Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
File: nOYfsJJrzgyvrdDysZNIiVpEgUc.mft (raw, json)
Hash identifier: 4AzivNTh2Ag79XACuVHp9oAw4iEH7QGrB/Lo4Q1P/SE=
Subject key identifier: 2C:0F:4C:97:EA:50:F4:0C:6D:B9:82:1B:A6:F9:52:50:40:3C:31:7B
Authority key identifier: 9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
Certificate issuer: /CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Certificate serial: 019E29946FADD67DCCBAED2874B8642508EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
Manifest number: 04FF
Signing time: Fri 15 May 2026 03:00:54 +0000
Manifest this update: Fri 15 May 2026 03:00:54 +0000
Manifest next update: Sat 16 May 2026 03:00:54 +0000
Files and hashes: 1: aHZWHMMoj_Ve6PMcHsk-tOdBl7s.roa (hash: FwYlWjG/YEx7zRmE4xVfW5Fkuzu/u399S24Boa04NeA=)
2: nOYfsJJrzgyvrdDysZNIiVpEgUc.crl (hash: DEcrSrW7qPb4ASqD+p9H5/vIOaV9Bo8IeZG+Lk76nzo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 16 May 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:29:94:6f:ad:d6:7d:cc:ba:ed:28:74:b8:64:25:08:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce61fb0926bce0cafadd0f2b19348895a448147
Validity
Not Before: May 15 03:00:54 2026 GMT
Not After : May 16 03:00:54 2026 GMT
Subject: CN=2c0f4c97ea50f40c6db9821ba6f95250403c317b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:98:21:47:df:0c:bd:4b:3a:46:1b:d1:5b:16:
9a:03:26:df:3c:3d:98:d6:fc:24:2d:ac:e4:7c:a6:
10:fb:28:09:2d:22:e8:97:87:4a:15:28:3d:1e:d7:
82:06:47:07:d5:8e:b5:10:2d:0b:9f:63:36:d2:fc:
73:31:c3:ad:06:18:c6:3c:72:50:d5:b0:53:81:ee:
8d:86:9f:ce:7e:9e:53:48:4d:ae:2a:9d:a3:00:59:
31:03:fc:57:ec:59:a0:84:0a:f5:5c:0c:94:ee:8a:
63:33:4b:db:35:f3:e1:93:5e:8e:d9:f5:92:16:5e:
3a:5c:21:ae:3b:8d:94:60:9f:41:51:cd:69:0e:c0:
70:fc:4d:bb:59:45:49:f0:12:a1:14:a3:90:fb:1e:
ce:2c:c1:ac:63:72:08:34:06:c5:4a:f4:d4:c7:8e:
ba:8d:eb:b8:e5:8b:29:22:b9:bc:8f:06:ee:92:8b:
e3:66:21:69:b6:a4:93:d9:67:32:aa:7b:d2:03:1e:
a0:4e:80:f0:0f:0d:8b:e1:f0:6d:77:b0:31:86:5e:
64:b5:f0:5b:44:63:26:87:7a:ee:9d:ec:33:49:81:
88:20:dd:00:54:91:2d:03:77:d7:d3:52:fb:4a:cd:
bd:ff:47:eb:18:3f:76:c0:14:9a:ca:61:16:0b:6f:
96:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:0F:4C:97:EA:50:F4:0C:6D:B9:82:1B:A6:F9:52:50:40:3C:31:7B
X509v3 Authority Key Identifier:
keyid:9C:E6:1F:B0:92:6B:CE:0C:AF:AD:D0:F2:B1:93:48:89:5A:44:81:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOYfsJJrzgyvrdDysZNIiVpEgUc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/60e957-1e17-410e-91a1-96b7e0a8ee09/1/nOYfsJJrzgyvrdDysZNIiVpEgUc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f3:ff:ab:50:5d:9e:d6:90:6a:be:42:7c:14:f6:83:dc:da:
42:04:98:1a:18:6e:27:02:d7:31:e5:f9:f2:f1:4f:05:45:71:
e3:44:aa:3b:b1:3b:ec:15:c2:ae:d1:4c:49:83:c7:a8:de:7e:
a7:56:a9:ee:b3:a0:a1:c3:09:cb:ac:1d:a2:df:7c:e9:8f:16:
0d:f8:ad:0a:c4:d8:da:39:fb:32:c0:22:aa:6e:02:9f:b1:9d:
76:e3:9a:b5:0a:9a:21:d8:0d:a6:49:46:74:22:1d:d7:a0:73:
c5:bb:94:40:55:46:73:ea:79:46:1a:93:99:c9:c7:d8:34:37:
fe:a9:ff:c4:5a:b7:ee:2e:2f:82:d1:41:f0:1a:07:e8:b5:b9:
f1:ac:85:fd:7c:02:dc:5b:a1:a4:f3:59:c6:61:bb:57:e6:24:
be:9a:59:dd:54:5f:96:16:fd:70:62:1f:61:69:ed:17:88:be:
39:47:d7:d3:3a:97:50:60:ef:92:6e:80:d0:8f:6d:13:30:e4:
3d:59:96:ae:a3:5d:f1:4e:ed:dd:7a:ac:00:b0:3d:9f:7e:f3:
75:81:45:f5:97:a3:cc:43:da:7c:b9:94:76:fa:68:16:67:73:
c2:fd:8b:1e:71:19:c4:62:ee:a3:b0:13:c6:76:bd:fb:67:17:
a2:89:49:40
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ4plG+t1n3Muu0odLhkJQjsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZTYxZmIwOTI2YmNlMGNhZmFkZDBmMmIxOTM0ODg5NWE0
NDgxNDcwHhcNMjYwNTE1MDMwMDU0WhcNMjYwNTE2MDMwMDU0WjAzMTEwLwYDVQQD
EygyYzBmNGM5N2VhNTBmNDBjNmRiOTgyMWJhNmY5NTI1MDQwM2MzMTdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJghR98MvUs6RhvRWxaaAybfPD2Y
1vwkLazkfKYQ+ygJLSLol4dKFSg9HteCBkcH1Y61EC0Ln2M20vxzMcOtBhjGPHJQ
1bBTge6Nhp/Ofp5TSE2uKp2jAFkxA/xX7FmghAr1XAyU7opjM0vbNfPhk16O2fWS
Fl46XCGuO42UYJ9BUc1pDsBw/E27WUVJ8BKhFKOQ+x7OLMGsY3IINAbFSvTUx466
jeu45YspIrm8jwbukovjZiFptqST2WcyqnvSAx6gToDwDw2L4fBtd7Axhl5ktfBb
RGMmh3runewzSYGIIN0AVJEtA3fX01L7Ss29/0frGD92wBSaymEWC2+WSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwPTJfqUPQMbbmCG6b5UlBAPDF7MB8GA1UdIwQY
MBaAFJzmH7CSa84Mr63Q8rGTSIlaRIFHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEt
OTZiN2UwYThlZTA5LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My82MGU5NTctMWUxNy00MTBlLTkxYTEtOTZiN2UwYThlZTA5
LzEvbk9ZZnNKSnJ6Z3l2cmREeXNaTklpVnBFZ1VjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfP/q1Bd
ntaQar5CfBT2g9zaQgSYGhhuJwLXMeX58vFPBUVx40SqO7E77BXCrtFMSYPHqN5+
p1ap7rOgocMJy6wdot986Y8WDfitCsTY2jn7MsAiqm4Cn7GdduOatQqaIdgNpklG
dCId16BzxbuUQFVGc+p5RhqTmcnH2DQ3/qn/xFq37i4vgtFB8BoH6LW58ayF/XwC
3FuhpPNZxmG7V+YkvppZ3VRflhb9cGIfYWntF4i+OUfX0zqXUGDvkm6A0I9tEzDk
PVmWrqNd8U7t3XqsALA9n37zdYFF9ZejzEPafLmUdvpoFmdzwv2LHnEZxGLuo7AT
xna9+2cXoolJQA==
-----END CERTIFICATE-----
Generated at Fri May 15 10:43:40 2026 by rpki-client