Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
File: NFMcVLHnlWwsw3GyPgp1VnqidRg.mft (raw, json)
Hash identifier: XYjSReqdUkDLGdv/oQuakQWHqOPsGPcYsA2d1rsqoHg=
Subject key identifier: DF:D2:25:83:AB:5D:77:45:0C:B6:02:C1:33:5E:25:98:2D:FD:F8:98
Authority key identifier: 34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
Certificate issuer: /CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Certificate serial: 019DD08822C465C74307FE4EA627F631180B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
Manifest number: 108F
Signing time: Mon 27 Apr 2026 20:01:15 +0000
Manifest this update: Mon 27 Apr 2026 20:01:15 +0000
Manifest next update: Tue 28 Apr 2026 20:01:15 +0000
Files and hashes: 1: KZG3OMXklNZsBx6WgKitrALmZj0.roa (hash: 9SZwSzE7oslX10Qwql6XopOxhODMi+xGUT/9jnT+PNY=)
2: NFMcVLHnlWwsw3GyPgp1VnqidRg.crl (hash: FLms60Xx1Kq/pH0Q3Ha+FYvvdpO2yuk2Y+M9CaEMgHY=)
3: RgWD6Cul8V-cKt9LYAk_Q1ocGfE.roa (hash: Iv9j2nkfTILhlOSx9nkPprOTDgdWmEYo93HdfeAlzlU=)
4: nMxyFTkhcgdua8Reb7Q6l90PApI.roa (hash: ATDpv/c9S6aS3lBil2ijdclB6hxxeL+T+uqh9C31XI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:88:22:c4:65:c7:43:07:fe:4e:a6:27:f6:31:18:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34531c54b1e7956c2cc371b23e0a75567aa27518
Validity
Not Before: Apr 27 20:01:15 2026 GMT
Not After : Apr 28 20:01:15 2026 GMT
Subject: CN=dfd22583ab5d77450cb602c1335e25982dfdf898
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:e7:ac:f7:a7:c1:5a:e2:b4:b7:54:9b:db:b6:
c4:70:b6:d6:5f:27:3a:5c:ad:5c:b4:57:c3:85:00:
52:71:62:00:f7:3a:be:87:b4:4a:f0:27:59:60:af:
dd:ed:5f:52:1a:b3:09:c5:11:5d:26:eb:44:66:58:
dc:66:8f:7d:8a:ac:fc:70:18:03:c0:e7:de:f4:f2:
03:0e:8b:58:3d:43:48:d3:55:bb:88:99:99:27:ef:
94:0b:68:c9:f9:8a:7c:d4:17:22:72:b0:a4:be:ac:
ff:84:1c:81:0e:ed:50:3f:bc:02:81:82:e4:37:b4:
44:f9:24:90:db:1f:29:68:56:07:52:5b:79:df:ac:
7e:a2:43:29:b5:a5:4f:1d:70:5c:3e:70:c0:37:36:
04:10:be:e9:e3:7c:42:5b:d8:e6:31:52:08:12:b3:
e2:a8:9f:62:6d:b8:00:9e:16:2a:f8:68:60:c1:1e:
03:dd:3e:55:32:4f:a7:97:3c:08:22:83:21:4e:c1:
19:31:8c:ef:7e:b0:bd:79:02:f2:7f:9f:05:f1:5f:
27:27:47:30:5c:26:1f:70:17:87:3f:22:8f:d6:24:
c4:9c:20:20:97:18:f3:04:0c:b9:cf:4f:50:bb:bc:
8c:0b:fe:de:4f:91:53:3a:6f:63:1d:25:69:59:1d:
2c:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:D2:25:83:AB:5D:77:45:0C:B6:02:C1:33:5E:25:98:2D:FD:F8:98
X509v3 Authority Key Identifier:
keyid:34:53:1C:54:B1:E7:95:6C:2C:C3:71:B2:3E:0A:75:56:7A:A2:75:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFMcVLHnlWwsw3GyPgp1VnqidRg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/8efa86-c35f-41b6-ad01-4906103dbd16/1/NFMcVLHnlWwsw3GyPgp1VnqidRg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:0f:1a:12:73:50:98:5a:36:70:21:49:8f:0f:53:78:90:16:
ba:b2:37:ab:2d:13:bd:aa:28:f3:29:58:55:d8:4c:cb:b3:f7:
91:2b:5b:25:90:86:d6:aa:ea:0f:2a:64:4b:93:96:a4:5b:11:
96:76:e8:d0:54:b3:6c:bc:75:14:75:c0:cd:e8:a7:ce:56:56:
aa:e6:9c:f2:a1:f8:cd:50:86:e7:e5:08:aa:20:ad:07:45:af:
c5:51:f1:c8:2c:52:0a:53:f7:d6:ba:f5:7b:14:81:92:a9:9a:
63:a7:4d:c5:9a:8f:67:ba:f7:dd:2e:8d:0b:b1:1a:00:9c:44:
0a:2e:4a:b8:86:1e:2a:29:86:d7:2b:75:12:64:ac:55:e9:a8:
94:01:cf:28:8c:4e:aa:54:5a:27:b9:4e:31:a8:d5:29:84:62:
1b:e6:6c:0e:03:4f:f6:c9:ec:a2:1f:2a:48:fa:35:e8:5e:27:
13:dc:8c:07:89:d6:2b:c8:bb:52:8f:a2:b5:0f:08:52:a1:26:
5e:b4:0c:e2:ad:6c:83:1c:a2:8d:25:89:26:57:1f:00:20:8f:
34:ca:fc:e7:4d:5b:4c:d1:e6:51:3b:3b:b7:1b:e3:bb:fc:8d:
e5:98:0f:25:40:06:a9:de:69:95:a2:fb:75:f7:57:cc:25:4c:
83:16:76:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3QiCLEZcdDB/5Opif2MRgLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NTMxYzU0YjFlNzk1NmMyY2MzNzFiMjNlMGE3NTU2N2Fh
Mjc1MTgwHhcNMjYwNDI3MjAwMTE1WhcNMjYwNDI4MjAwMTE1WjAzMTEwLwYDVQQD
EyhkZmQyMjU4M2FiNWQ3NzQ1MGNiNjAyYzEzMzVlMjU5ODJkZmRmODk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOes96fBWuK0t1Sb27bEcLbWXyc6
XK1ctFfDhQBScWIA9zq+h7RK8CdZYK/d7V9SGrMJxRFdJutEZljcZo99iqz8cBgD
wOfe9PIDDotYPUNI01W7iJmZJ++UC2jJ+Yp81BcicrCkvqz/hByBDu1QP7wCgYLk
N7RE+SSQ2x8paFYHUlt536x+okMptaVPHXBcPnDANzYEEL7p43xCW9jmMVIIErPi
qJ9ibbgAnhYq+GhgwR4D3T5VMk+nlzwIIoMhTsEZMYzvfrC9eQLyf58F8V8nJ0cw
XCYfcBeHPyKP1iTEnCAglxjzBAy5z09Qu7yMC/7eT5FTOm9jHSVpWR0sVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN/SJYOrXXdFDLYCwTNeJZgt/fiYMB8GA1UdIwQY
MBaAFDRTHFSx55VsLMNxsj4KdVZ6onUYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEt
NDkwNjEwM2RiZDE2LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS84ZWZhODYtYzM1Zi00MWI2LWFkMDEtNDkwNjEwM2RiZDE2
LzEvTkZNY1ZMSG5sV3dzdzNHeVBncDFWbnFpZFJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcg8aEnNQ
mFo2cCFJjw9TeJAWurI3qy0Tvaoo8ylYVdhMy7P3kStbJZCG1qrqDypkS5OWpFsR
lnbo0FSzbLx1FHXAzeinzlZWquac8qH4zVCG5+UIqiCtB0WvxVHxyCxSClP31rr1
exSBkqmaY6dNxZqPZ7r33S6NC7EaAJxECi5KuIYeKimG1yt1EmSsVemolAHPKIxO
qlRaJ7lOMajVKYRiG+ZsDgNP9snsoh8qSPo16F4nE9yMB4nWK8i7Uo+itQ8IUqEm
XrQM4q1sgxyijSWJJlcfACCPNMr8501bTNHmUTs7txvju/yN5ZgPJUAGqd5plaL7
dfdXzCVMgxZ2zA==
-----END CERTIFICATE-----
Generated at Mon Apr 27 23:18:28 2026 by rpki-client