Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
File: nYnnxT6SR534EXHrqvI2CgN8Mkg.mft (raw, json)
Hash identifier: V6g3fnMlkGux719SCaqKmrfoz7gninSznXfH493yHI4=
Subject key identifier: CD:AD:4A:B6:92:74:FB:24:09:6B:1E:D7:FB:90:7F:FF:A5:58:95:A2
Authority key identifier: 9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
Certificate issuer: /CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Certificate serial: 019FF86C8779400FDB2CFBB8BC23D0B24F37
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
Manifest number: 12AB
Signing time: Thu 13 Aug 2026 00:01:29 +0000
Manifest this update: Thu 13 Aug 2026 00:01:29 +0000
Manifest next update: Fri 14 Aug 2026 00:01:29 +0000
Files and hashes: 1: ercPbtahy3f9eM5GSzohbTGgqsw.roa (hash: 6i0HSVm0VOwA3Kxo8s7D20nC5SFv01ATtGPCU/ddYG0=)
2: nYnnxT6SR534EXHrqvI2CgN8Mkg.crl (hash: 15JEA8pgsS8HbsqDQ7WS5DFN6N+FQF9hfdeqxwTPPj8=)
3: vmIjf2ea1b5ZbkV2jBRhH4g9FnA.asa (hash: 6b8Tpx55XUsVFkjanfbwXE/OmqC9SLGgWKXzepRWWCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 00:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:6c:87:79:40:0f:db:2c:fb:b8:bc:23:d0:b2:4f:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d89e7c53e92479df81171ebaaf2360a037c3248
Validity
Not Before: Aug 13 00:01:29 2026 GMT
Not After : Aug 14 00:01:29 2026 GMT
Subject: CN=cdad4ab69274fb24096b1ed7fb907fffa55895a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:16:cc:83:6c:c4:7b:aa:a3:30:16:5b:4c:59:
cb:84:7a:55:15:0e:f5:0e:55:da:8d:5f:cb:05:07:
84:15:f4:ea:92:3b:8d:fc:99:93:df:06:f7:4d:77:
09:9e:2f:b5:5e:a0:5e:4d:f2:b5:a5:75:ce:c9:8d:
40:f7:79:3d:c3:d5:f2:2e:cd:7b:5a:94:6b:e3:ec:
61:aa:1c:4f:20:a7:78:67:44:65:9c:bf:16:e0:50:
49:f3:0b:e3:e0:74:e4:61:5f:d8:09:74:4f:f4:3f:
7f:2d:44:ea:c6:4b:e0:53:14:cb:80:0a:08:71:eb:
62:2f:b8:d8:1e:01:fd:e1:cb:f1:0e:99:8c:d2:39:
b4:0d:c8:66:06:c8:eb:b8:27:a2:67:1a:d8:b4:bf:
b5:ed:af:22:6b:af:ea:fd:a2:7e:43:33:ce:7c:da:
f4:2d:13:76:4a:11:22:ba:92:3c:32:2d:23:a7:9e:
5b:02:e6:1b:48:cd:53:fc:39:1c:01:b4:60:c7:61:
e9:be:41:a6:9e:e8:1b:c8:16:70:dc:03:3c:af:22:
a4:40:41:29:af:43:73:94:cf:00:ad:26:40:57:cd:
76:66:e1:0a:fe:a5:04:a7:0a:d2:85:61:b9:4e:7a:
33:79:6b:18:25:ec:18:92:d4:64:40:b5:53:97:4c:
33:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:AD:4A:B6:92:74:FB:24:09:6B:1E:D7:FB:90:7F:FF:A5:58:95:A2
X509v3 Authority Key Identifier:
keyid:9D:89:E7:C5:3E:92:47:9D:F8:11:71:EB:AA:F2:36:0A:03:7C:32:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYnnxT6SR534EXHrqvI2CgN8Mkg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/304c76-9960-4979-860c-89a68e5a2110/1/nYnnxT6SR534EXHrqvI2CgN8Mkg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:8c:1a:c1:d2:d9:38:1b:e2:26:f8:d4:9a:c9:ea:3a:db:76:
bc:b8:c9:0a:35:51:ab:7a:f0:ce:61:b5:6b:71:40:0b:a7:06:
c7:c4:a9:1a:dd:b0:ef:61:8a:39:af:09:9b:06:21:4e:a2:f0:
d5:d7:11:7e:3b:49:a7:7e:39:66:b9:55:db:e6:70:32:05:17:
8c:c7:92:3f:90:70:e1:c3:71:6c:e0:df:8e:5d:44:02:d2:bf:
ed:e3:d7:f2:2d:6e:5d:d7:5e:7f:a9:77:71:cc:73:e8:bc:f4:
c3:b9:7f:1b:6c:4b:18:19:fb:dc:ef:24:43:ba:36:23:94:47:
d7:c0:c1:89:9b:80:6a:a1:1c:79:7c:51:23:9a:4d:44:78:97:
41:4d:be:88:17:da:28:bf:12:e3:d4:cd:c3:27:6a:41:82:cd:
96:2e:6d:a1:40:79:c9:27:e7:dc:e3:5f:0b:81:5f:05:e8:3b:
b0:5e:34:96:41:59:ad:f0:b3:bf:66:5e:fb:9b:c6:a3:24:00:
4c:eb:1a:a9:3f:ca:8f:c2:86:31:b3:83:c3:7f:75:67:62:e5:
3c:c3:b2:bb:5e:78:d1:c2:40:f4:dd:20:9e:4e:b9:80:e1:0b:
ba:c7:23:c9:d0:75:5b:a9:9f:86:76:57:d6:dd:52:eb:bf:de:
83:03:b3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/4bId5QA/bLPu4vCPQsk83MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkODllN2M1M2U5MjQ3OWRmODExNzFlYmFhZjIzNjBhMDM3
YzMyNDgwHhcNMjYwODEzMDAwMTI5WhcNMjYwODE0MDAwMTI5WjAzMTEwLwYDVQQD
EyhjZGFkNGFiNjkyNzRmYjI0MDk2YjFlZDdmYjkwN2ZmZmE1NTg5NWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAohbMg2zEe6qjMBZbTFnLhHpVFQ71
DlXajV/LBQeEFfTqkjuN/JmT3wb3TXcJni+1XqBeTfK1pXXOyY1A93k9w9XyLs17
WpRr4+xhqhxPIKd4Z0RlnL8W4FBJ8wvj4HTkYV/YCXRP9D9/LUTqxkvgUxTLgAoI
cetiL7jYHgH94cvxDpmM0jm0DchmBsjruCeiZxrYtL+17a8ia6/q/aJ+QzPOfNr0
LRN2ShEiupI8Mi0jp55bAuYbSM1T/DkcAbRgx2HpvkGmnugbyBZw3AM8ryKkQEEp
r0NzlM8ArSZAV812ZuEK/qUEpwrShWG5TnozeWsYJewYktRkQLVTl0wz3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM2tSraSdPskCWse1/uQf/+lWJWiMB8GA1UdIwQY
MBaAFJ2J58U+kked+BFx66ryNgoDfDJIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMt
ODlhNjhlNWEyMTEwLzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8zMDRjNzYtOTk2MC00OTc5LTg2MGMtODlhNjhlNWEyMTEw
LzEvbllubnhUNlNSNTM0RVhIcnF2STJDZ044TWtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOowawdLZ
OBviJvjUmsnqOtt2vLjJCjVRq3rwzmG1a3FAC6cGx8SpGt2w72GKOa8JmwYhTqLw
1dcRfjtJp345ZrlV2+ZwMgUXjMeSP5Bw4cNxbODfjl1EAtK/7ePX8i1uXddef6l3
ccxz6Lz0w7l/G2xLGBn73O8kQ7o2I5RH18DBiZuAaqEceXxRI5pNRHiXQU2+iBfa
KL8S49TNwydqQYLNli5toUB5ySfn3ONfC4FfBeg7sF40lkFZrfCzv2Ze+5vGoyQA
TOsaqT/Kj8KGMbODw391Z2LlPMOyu1540cJA9N0gnk65gOELuscjydB1W6mfhnZX
1t1S67/egwOzTg==
-----END CERTIFICATE-----
Generated at Thu Aug 13 08:57:01 2026 by rpki-client