Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
File: nfbRY1k964rv8HL-yljm8_HE5-U.mft (raw, json)
Hash identifier: Ssq9EzUSw228IHEFLmHpy2lgsO21LQlBpXPiTzBp0eg=
Subject key identifier: 40:F8:7F:73:32:26:47:6E:EC:6C:DE:7B:68:04:D4:25:86:3A:0C:1D
Authority key identifier: 9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
Certificate issuer: /CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Certificate serial: 01A0024AE9CC19A6B8B080DE3C8CD5D9192D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
Manifest number: 109D
Signing time: Fri 14 Aug 2026 22:00:58 +0000
Manifest this update: Fri 14 Aug 2026 22:00:58 +0000
Manifest next update: Sat 15 Aug 2026 22:00:58 +0000
Files and hashes: 1: Og8b6mn9T1akZjxc4TVcMnSz1As.roa (hash: MZENTXsLseNKZbHPbPVFQM4cXWctRVemJxC3RSLuLEk=)
2: nfbRY1k964rv8HL-yljm8_HE5-U.crl (hash: f1j8xA9egQPnFDW2oE0DLxPC7SxdgarygVo1gvxiiSM=)
3: qpf2jrPnGEdSelRtM1fGztVUn_M.asa (hash: T6+awxj1fPEBE6Cn0I06mdbSa3YDzKpDM/bjQAsbn8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:4a:e9:cc:19:a6:b8:b0:80:de:3c:8c:d5:d9:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df6d163593deb8aeff072feca58e6f3f1c4e7e5
Validity
Not Before: Aug 14 22:00:58 2026 GMT
Not After : Aug 15 22:00:58 2026 GMT
Subject: CN=40f87f733226476eec6cde7b6804d425863a0c1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:f5:fb:c2:ee:2d:0a:49:ce:b0:2a:c3:41:ed:
0d:20:8f:45:0d:74:37:00:13:a5:8e:89:86:8f:54:
5d:7d:61:fc:93:ee:21:16:31:45:18:d9:82:b9:f4:
e6:b3:0e:f4:e6:51:e1:4d:f5:2b:10:92:04:3f:7d:
67:c0:b6:7f:b5:66:de:fb:84:cf:8c:5e:53:c7:fd:
67:89:3d:f7:0b:ce:4d:f9:3a:aa:72:2f:35:82:f0:
dc:d6:d9:a9:3a:32:4c:6f:5a:fb:a2:77:83:d8:59:
e3:44:53:d9:5a:cb:47:dc:7e:3e:53:6d:cc:22:cb:
0f:da:85:44:61:a2:70:6a:c7:2d:48:f1:02:82:5a:
4a:c5:3a:aa:ba:da:09:33:02:10:a3:aa:d1:81:a0:
7b:12:e1:6d:4b:de:ab:b1:60:8f:6d:f5:27:09:0d:
f4:8d:5d:66:71:fb:c0:5f:a2:94:fe:d2:6d:92:ee:
78:df:6b:fb:91:58:01:f9:5f:9c:50:b3:0c:48:1c:
b6:69:89:e3:97:ff:40:1c:6a:b8:4c:96:2b:b6:78:
72:69:0c:0e:36:1c:e6:f0:28:c8:f4:12:30:cf:29:
c3:d9:6f:f5:72:63:b9:ca:a5:14:60:23:d2:d8:7f:
e4:7e:9e:46:e2:59:b8:78:93:a1:f4:e3:84:c0:1b:
38:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F8:7F:73:32:26:47:6E:EC:6C:DE:7B:68:04:D4:25:86:3A:0C:1D
X509v3 Authority Key Identifier:
keyid:9D:F6:D1:63:59:3D:EB:8A:EF:F0:72:FE:CA:58:E6:F3:F1:C4:E7:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfbRY1k964rv8HL-yljm8_HE5-U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/ff25d7-5ffa-4686-8326-69d79c9d0721/1/nfbRY1k964rv8HL-yljm8_HE5-U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:05:4a:8b:57:56:b9:51:ed:e5:3a:83:ef:8c:54:6e:0c:36:
b2:3c:1a:99:83:1e:d6:5b:08:49:a1:a9:f1:55:fc:a1:b4:5b:
82:53:d0:9d:78:17:b5:17:be:04:53:91:c6:8a:19:7d:d1:94:
5b:48:4b:e5:22:ba:58:e8:57:1e:3a:59:b0:d2:99:3e:02:b7:
8c:a9:56:cf:55:51:7e:ea:7b:46:eb:56:58:d8:d9:5f:3f:e9:
5f:59:d7:9e:76:0f:cb:5f:22:f3:2c:43:84:c0:c4:0c:f0:ce:
86:cd:b2:20:07:c0:96:9a:43:7d:f1:b7:30:0c:0f:c6:2b:ee:
64:7d:bd:4a:94:b9:84:4d:c9:b2:8a:5b:48:48:ee:22:15:67:
8f:c6:9b:de:fe:3e:ab:54:31:36:12:3c:68:cc:28:eb:70:20:
51:d4:2b:6f:50:81:ab:a5:e5:10:9d:8a:4e:c5:97:09:68:ac:
87:2a:f5:99:a8:cd:65:9e:a0:63:39:cc:04:60:16:85:a7:83:
3e:a3:2a:5e:31:01:38:23:31:65:3c:35:42:7b:15:bc:6d:bd:
8f:81:14:bd:70:34:12:9b:a9:2e:c2:b0:08:38:11:91:f3:4c:
25:70:c7:1e:7b:60:2c:13:f1:e9:c3:80:b1:38:ae:b2:d0:7c:
bd:df:e5:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaACSunMGaa4sIDePIzV2RktMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjZkMTYzNTkzZGViOGFlZmYwNzJmZWNhNThlNmYzZjFj
NGU3ZTUwHhcNMjYwODE0MjIwMDU4WhcNMjYwODE1MjIwMDU4WjAzMTEwLwYDVQQD
Eyg0MGY4N2Y3MzMyMjY0NzZlZWM2Y2RlN2I2ODA0ZDQyNTg2M2EwYzFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs/X7wu4tCknOsCrDQe0NII9FDXQ3
ABOljomGj1RdfWH8k+4hFjFFGNmCufTmsw705lHhTfUrEJIEP31nwLZ/tWbe+4TP
jF5Tx/1niT33C85N+Tqqci81gvDc1tmpOjJMb1r7oneD2FnjRFPZWstH3H4+U23M
IssP2oVEYaJwasctSPECglpKxTqqutoJMwIQo6rRgaB7EuFtS96rsWCPbfUnCQ30
jV1mcfvAX6KU/tJtku5432v7kVgB+V+cULMMSBy2aYnjl/9AHGq4TJYrtnhyaQwO
Nhzm8CjI9BIwzynD2W/1cmO5yqUUYCPS2H/kfp5G4lm4eJOh9OOEwBs46wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFED4f3MyJkdu7Gzee2gE1CWGOgwdMB8GA1UdIwQY
MBaAFJ320WNZPeuK7/By/spY5vPxxOflMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYt
NjlkNzljOWQwNzIxLzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9mZjI1ZDctNWZmYS00Njg2LTgzMjYtNjlkNzljOWQwNzIx
LzEvbmZiUlkxazk2NHJ2OEhMLXlsam04X0hFNS1VLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMwVKi1dW
uVHt5TqD74xUbgw2sjwamYMe1lsISaGp8VX8obRbglPQnXgXtRe+BFORxooZfdGU
W0hL5SK6WOhXHjpZsNKZPgK3jKlWz1VRfup7RutWWNjZXz/pX1nXnnYPy18i8yxD
hMDEDPDOhs2yIAfAlppDffG3MAwPxivuZH29SpS5hE3JsopbSEjuIhVnj8ab3v4+
q1QxNhI8aMwo63AgUdQrb1CBq6XlEJ2KTsWXCWishyr1majNZZ6gYznMBGAWhaeD
PqMqXjEBOCMxZTw1QnsVvG29j4EUvXA0EpupLsKwCDgRkfNMJXDHHntgLBPx6cOA
sTiustB8vd/lsQ==
-----END CERTIFICATE-----
Generated at Sat Aug 15 05:22:43 2026 by rpki-client