Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
File: nN3tdbQwkYCFNbSuvXq-X2oTveE.mft (raw, json)
Hash identifier: vHzD8JZ7QPwXoRZ07FlAXTATqm5CKDrC+s8Vxb7CW3I=
Subject key identifier: 97:6B:2A:DA:3C:61:F6:7A:F1:C9:C7:16:29:39:F6:71:9C:55:6D:A2
Authority key identifier: 9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
Certificate issuer: /CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Certificate serial: 01A1859B07DA9139C2BF01052B9F89D986D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
Manifest number: 0143
Signing time: Thu 29 Oct 2026 03:01:32 +0000
Manifest this update: Thu 29 Oct 2026 03:01:32 +0000
Manifest next update: Fri 30 Oct 2026 03:01:32 +0000
Files and hashes: 1: Spy0ABfhiBR-fkb9ryyNj0gV224.roa (hash: Yn8A8PlzG90yhOJl/so573+Ah6OeGtK4m3ymx4hJJHo=)
2: nN3tdbQwkYCFNbSuvXq-X2oTveE.crl (hash: LP6UbZSW+rAwLPOLQycY0RDsVsL1q3USbyFCjtuGbtQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 23:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:85:9b:07:da:91:39:c2:bf:01:05:2b:9f:89:d9:86:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cdded75b43091808535b4aebd7abe5f6a13bde1
Validity
Not Before: Oct 29 03:01:32 2026 GMT
Not After : Oct 30 03:01:32 2026 GMT
Subject: CN=976b2ada3c61f67af1c9c7162939f6719c556da2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:27:6f:02:b4:d0:2c:2a:4e:74:2d:36:76:05:
63:35:8c:ad:bb:41:31:7e:67:f5:9c:62:e8:98:95:
52:58:0e:84:7c:e5:5d:8e:87:49:67:a7:c9:f8:fc:
03:f1:d2:2f:11:66:4d:80:78:a6:58:8c:f2:45:6a:
e9:8c:75:9b:ad:75:8b:c9:b6:e5:ad:0e:71:89:97:
0d:83:64:58:46:97:2e:bd:81:6d:2e:96:83:a2:ad:
14:a0:bb:25:db:fa:d6:25:b2:86:4b:38:3c:6a:90:
0c:f1:ae:2a:9b:19:61:e2:2f:8f:3f:26:3f:b1:62:
37:da:a4:53:c0:da:9b:e8:6f:15:90:2b:cf:f3:6e:
f5:2a:04:5c:27:79:df:28:ec:2d:04:a6:72:2e:cd:
2a:d8:28:cd:a6:c2:dc:7d:6d:3c:a9:21:4d:92:dc:
e7:3e:c6:ba:3e:17:67:9e:a5:b0:5a:b1:f8:bf:fa:
6d:c8:a8:65:9d:b1:6a:70:30:9b:d6:a9:53:90:c9:
c7:99:3d:08:88:e0:65:d8:7b:cf:57:d5:8d:95:d4:
12:e5:64:c3:c7:5c:5c:b9:fd:5c:01:0e:51:3c:44:
dc:bc:67:6f:3e:86:4c:4a:f2:90:2d:8b:9d:53:6b:
61:e7:23:ca:19:4f:a3:a6:c7:60:9e:15:9d:88:be:
b2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:6B:2A:DA:3C:61:F6:7A:F1:C9:C7:16:29:39:F6:71:9C:55:6D:A2
X509v3 Authority Key Identifier:
keyid:9C:DD:ED:75:B4:30:91:80:85:35:B4:AE:BD:7A:BE:5F:6A:13:BD:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nN3tdbQwkYCFNbSuvXq-X2oTveE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/43d508-d19e-4f66-ae85-f805ab3a327e/1/nN3tdbQwkYCFNbSuvXq-X2oTveE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:5e:e8:1f:1f:f0:c2:61:58:aa:43:5e:b7:c8:e0:44:8e:d6:
62:51:93:d4:51:43:f4:ea:ad:a4:01:81:e6:28:2d:6e:0b:ad:
da:5c:39:c7:4a:0e:1c:3b:8c:99:80:84:cf:16:0a:76:5f:51:
1f:20:53:1d:76:bb:f1:79:b7:e9:a7:56:2e:35:39:b2:f9:1d:
01:15:6c:b2:13:13:60:34:cc:5d:5b:3f:71:2e:59:ae:d3:61:
81:93:93:e7:98:dd:df:a6:8d:26:97:04:e8:bd:e7:ea:63:a3:
96:b0:b9:5b:3e:7e:04:b2:52:b6:d6:ac:cf:d6:d8:16:51:64:
07:80:fe:fe:65:32:60:92:7d:dc:a1:ca:ae:63:e0:2a:4f:69:
9e:21:04:65:59:84:ed:b4:5e:a6:da:ab:87:f5:74:fe:d3:a0:
28:2c:ac:ab:93:71:46:04:8a:f9:3f:c8:ea:5e:83:b6:68:4d:
dc:37:7e:f2:3a:b5:6b:c4:4d:01:e8:b1:bc:62:ce:47:cd:0a:
7e:14:25:32:07:36:58:c8:80:d6:65:52:c0:ee:ab:77:81:90:
30:1f:74:52:93:68:37:71:7f:6d:5e:f4:e3:33:37:62:6f:ec:
22:c2:58:11:f1:c2:d9:f1:9d:0d:6b:03:d6:37:47:31:51:cf:
76:8e:de:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGFmwfakTnCvwEFK5+J2YbQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZGRlZDc1YjQzMDkxODA4NTM1YjRhZWJkN2FiZTVmNmEx
M2JkZTEwHhcNMjYxMDI5MDMwMTMyWhcNMjYxMDMwMDMwMTMyWjAzMTEwLwYDVQQD
Eyg5NzZiMmFkYTNjNjFmNjdhZjFjOWM3MTYyOTM5ZjY3MTljNTU2ZGEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAridvArTQLCpOdC02dgVjNYytu0Ex
fmf1nGLomJVSWA6EfOVdjodJZ6fJ+PwD8dIvEWZNgHimWIzyRWrpjHWbrXWLybbl
rQ5xiZcNg2RYRpcuvYFtLpaDoq0UoLsl2/rWJbKGSzg8apAM8a4qmxlh4i+PPyY/
sWI32qRTwNqb6G8VkCvP8271KgRcJ3nfKOwtBKZyLs0q2CjNpsLcfW08qSFNktzn
Psa6PhdnnqWwWrH4v/ptyKhlnbFqcDCb1qlTkMnHmT0IiOBl2HvPV9WNldQS5WTD
x1xcuf1cAQ5RPETcvGdvPoZMSvKQLYudU2th5yPKGU+jpsdgnhWdiL6yLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJdrKto8YfZ68cnHFik59nGcVW2iMB8GA1UdIwQY
MBaAFJzd7XW0MJGAhTW0rr16vl9qE73hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk4zdGRiUXdrWUNGTmJTdXZYcS1YMm9UdmVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUt
ZjgwNWFiM2EzMjdlLzEvbk4zdGRiUXdrWUNGTmJTdXZYcS1YMm9UdmVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS80M2Q1MDgtZDE5ZS00ZjY2LWFlODUtZjgwNWFiM2EzMjdl
LzEvbk4zdGRiUXdrWUNGTmJTdXZYcS1YMm9UdmVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0l7oHx/w
wmFYqkNet8jgRI7WYlGT1FFD9OqtpAGB5igtbgut2lw5x0oOHDuMmYCEzxYKdl9R
HyBTHXa78Xm36adWLjU5svkdARVsshMTYDTMXVs/cS5ZrtNhgZOT55jd36aNJpcE
6L3n6mOjlrC5Wz5+BLJSttasz9bYFlFkB4D+/mUyYJJ93KHKrmPgKk9pniEEZVmE
7bReptqrh/V0/tOgKCysq5NxRgSK+T/I6l6DtmhN3Dd+8jq1a8RNAeixvGLOR80K
fhQlMgc2WMiA1mVSwO6rd4GQMB90UpNoN3F/bV704zM3Ym/sIsJYEfHC2fGdDWsD
1jdHMVHPdo7eUg==
-----END CERTIFICATE-----
Generated at Thu Oct 29 10:59:48 2026 by rpki-client