Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: UZTHyTIFsMaPyNPKPOJIGM5ruvZEq8z0I+VPSA3qUp4=
Subject key identifier: AA:8A:12:28:37:B2:E1:3F:09:BD:32:C6:4B:D1:D5:B8:03:7E:D8:BC
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 01A03AF10FB726D7B03D72DD27AA3C8446EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 1A20
Signing time: Tue 25 Aug 2026 22:01:11 +0000
Manifest this update: Tue 25 Aug 2026 22:01:11 +0000
Manifest next update: Wed 26 Aug 2026 22:01:11 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: bX3VSCwwmfzgHON93o3xUGV0RGQ.asa (hash: ijaCS3mqldZ4pWneFno46A31UHhq2PJZI7Dj9j47OsM=)
3: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: mJYVe746VGT4W0xT87ECFiYHb7CSxiUyTk2m8v/5UXE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3a:f1:0f:b7:26:d7:b0:3d:72:dd:27:aa:3c:84:46:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Aug 25 22:01:11 2026 GMT
Not After : Aug 26 22:01:11 2026 GMT
Subject: CN=aa8a122837b2e13f09bd32c64bd1d5b8037ed8bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:3c:05:d6:19:08:75:e2:d5:7f:9d:29:d8:36:
0c:8c:b0:84:03:23:10:22:a5:45:4d:cf:f0:92:91:
b3:e0:65:ed:75:b4:2c:e4:05:71:c7:4b:70:33:c1:
cc:f1:be:e6:8f:b6:b5:0b:61:52:6c:97:1f:4d:3a:
61:be:58:65:45:ce:ba:31:fa:04:f0:a7:52:3a:39:
0b:85:04:eb:9a:30:d2:60:5b:34:36:f2:9f:af:c2:
d9:2e:bc:a7:47:02:db:e6:88:01:0a:df:a2:09:9c:
12:65:9c:74:63:ac:bb:db:f3:ed:b2:8c:d9:cb:0a:
d0:07:e4:67:46:04:45:6b:54:d0:43:a7:2c:7d:94:
2b:42:e0:46:68:9a:c0:bf:ca:53:22:0e:ee:4f:5f:
03:71:14:cd:91:9a:b8:e9:38:4f:f6:2d:5a:14:48:
66:a0:f0:7e:20:8b:ce:b0:e3:24:a4:3e:f0:f0:fd:
ee:99:fe:b5:47:89:9c:0c:fd:5f:09:54:06:ce:b5:
97:68:b2:dc:dc:53:8b:0a:73:10:9f:c9:b7:ee:0c:
fb:86:84:e8:d7:18:b7:c3:ea:85:ec:e7:6f:f0:67:
3e:dd:c9:7a:5d:d2:dc:8e:31:e8:c0:bc:75:c7:9d:
39:0d:b2:8e:a2:c8:5c:60:3c:74:dc:8c:40:74:eb:
09:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:12:28:37:B2:E1:3F:09:BD:32:C6:4B:D1:D5:B8:03:7E:D8:BC
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:19:19:45:ef:a8:20:c6:70:e6:25:4e:b3:0c:ce:7d:38:b6:
4a:c1:36:80:9a:a6:c5:17:cc:19:10:7c:5e:1c:90:89:cf:30:
d3:33:1c:98:99:e9:06:27:f1:cc:6e:59:bb:5b:26:4e:9d:bc:
aa:cd:d1:ec:e0:15:6e:7f:ff:86:52:c1:ba:07:73:5b:e2:27:
19:4c:36:da:56:fb:4e:6f:4e:ef:d3:68:7a:fd:5f:d3:db:48:
2d:c1:16:cf:a7:49:d6:39:b0:4f:0d:d8:ba:05:d6:9a:a7:47:
b3:81:61:bd:6f:29:f0:8e:ff:f1:07:08:49:6b:c5:c5:40:7f:
2e:cc:9d:c9:ce:f6:94:b5:a3:cb:0e:46:f1:9d:a0:c6:16:c0:
56:38:eb:c9:ed:3d:a8:42:89:47:df:70:1c:11:5e:c5:e9:f5:
0c:94:31:f8:41:f4:05:16:7c:17:1d:1b:6f:17:f7:bd:1d:74:
9c:87:ca:cc:a0:87:ff:37:49:de:bb:33:b8:4f:d9:b3:1f:8f:
b4:5b:b1:91:ab:5d:40:c6:ed:ea:f5:3f:24:89:95:a4:a7:56:
39:0e:7e:d2:01:e7:cf:6f:29:90:23:32:1e:fa:c9:8a:71:82:
4b:74:ed:cb:35:67:67:9b:21:bd:ba:37:8a:82:c8:90:06:e4:
8f:78:99:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaA68Q+3JtewPXLdJ6o8hEbvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj
YThjNDcwHhcNMjYwODI1MjIwMTExWhcNMjYwODI2MjIwMTExWjAzMTEwLwYDVQQD
EyhhYThhMTIyODM3YjJlMTNmMDliZDMyYzY0YmQxZDViODAzN2VkOGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jwF1hkIdeLVf50p2DYMjLCEAyMQ
IqVFTc/wkpGz4GXtdbQs5AVxx0twM8HM8b7mj7a1C2FSbJcfTTphvlhlRc66MfoE
8KdSOjkLhQTrmjDSYFs0NvKfr8LZLrynRwLb5ogBCt+iCZwSZZx0Y6y72/PtsozZ
ywrQB+RnRgRFa1TQQ6csfZQrQuBGaJrAv8pTIg7uT18DcRTNkZq46ThP9i1aFEhm
oPB+IIvOsOMkpD7w8P3umf61R4mcDP1fCVQGzrWXaLLc3FOLCnMQn8m37gz7hoTo
1xi3w+qF7Odv8Gc+3cl6XdLcjjHowLx1x505DbKOoshcYDx03IxAdOsJ4wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKqKEig3suE/Cb0yxkvR1bgDfti8MB8GA1UdIwQY
MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt
NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy
LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJRkZRe+o
IMZw5iVOswzOfTi2SsE2gJqmxRfMGRB8XhyQic8w0zMcmJnpBifxzG5Zu1smTp28
qs3R7OAVbn//hlLBugdzW+InGUw22lb7Tm9O79Noev1f09tILcEWz6dJ1jmwTw3Y
ugXWmqdHs4FhvW8p8I7/8QcISWvFxUB/Lsydyc72lLWjyw5G8Z2gxhbAVjjrye09
qEKJR99wHBFexen1DJQx+EH0BRZ8Fx0bbxf3vR10nIfKzKCH/zdJ3rszuE/Zsx+P
tFuxkatdQMbt6vU/JImVpKdWOQ5+0gHnz28pkCMyHvrJinGCS3TtyzVnZ5shvbo3
ioLIkAbkj3iZeQ==
-----END CERTIFICATE-----
Generated at Wed Aug 26 08:07:54 2026 by rpki-client