Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: MtStvvaO/AYge8fINIx3NfHzkX0C8s2vZmcnVdIOOeU=
Subject key identifier: D2:2D:A7:85:01:02:6B:E1:D2:BE:E9:13:42:25:F4:E6:5D:5A:33:F7
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 019FF4C634E27D32BB51FB3D726162221F26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 1404
Signing time: Wed 12 Aug 2026 07:00:58 +0000
Manifest this update: Wed 12 Aug 2026 07:00:58 +0000
Manifest next update: Thu 13 Aug 2026 07:00:58 +0000
Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=)
2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: mPR7p44xlTKQiwmoVSKyst6vSqNAmqzQEj9l/azxG2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 06:48:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f4:c6:34:e2:7d:32:bb:51:fb:3d:72:61:62:22:1f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Aug 12 07:00:58 2026 GMT
Not After : Aug 13 07:00:58 2026 GMT
Subject: CN=d22da78501026be1d2bee9134225f4e65d5a33f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:40:5e:d0:8d:bb:2b:24:63:ac:32:d0:25:c7:
48:d7:ed:46:85:f4:20:fd:b4:2a:8f:1c:78:79:c1:
6f:91:e7:f5:67:2e:8e:59:fe:67:34:1d:be:35:6d:
be:25:64:1c:c1:88:43:fe:d4:7c:b9:4c:2c:1d:91:
5e:f5:d6:b0:40:af:c7:30:1e:c0:45:50:76:28:23:
57:6e:06:e4:c4:94:fd:e2:2a:cc:4a:53:62:b2:d0:
41:9a:16:6f:fa:21:a8:1b:0f:15:0f:61:7a:a3:73:
f2:93:3b:3e:3f:d3:d1:39:68:bc:cf:27:c8:ca:a3:
ad:f0:88:a9:46:87:62:4d:62:e6:f3:9c:16:42:a1:
e8:82:24:07:71:66:80:6e:03:82:ea:39:97:9e:ac:
34:c1:ee:f9:66:ef:cb:dc:c6:93:14:1b:1b:00:31:
7d:d8:12:77:c2:5e:f2:7e:9d:46:49:40:5b:3b:88:
f0:66:f5:2a:b6:eb:3a:5e:bd:53:4c:28:ca:be:9b:
83:6c:af:f6:d2:88:33:7d:86:08:85:36:05:79:cb:
d4:92:8b:44:f1:75:bb:03:bb:06:f8:34:82:57:9c:
a8:2e:cc:24:c3:d5:8c:b4:71:de:85:bf:03:b2:40:
03:ff:1a:33:c4:c5:5b:53:94:77:37:6f:52:a5:81:
c8:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:2D:A7:85:01:02:6B:E1:D2:BE:E9:13:42:25:F4:E6:5D:5A:33:F7
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:30:5a:52:ca:68:0d:c5:2d:2a:cf:59:5c:95:ab:af:4b:bc:
e5:85:bf:ed:e8:3f:7b:5c:ab:81:af:75:90:9c:23:fc:43:02:
b5:13:0f:ed:83:af:5e:58:24:54:91:fb:e0:35:e6:a9:48:d7:
62:19:e3:a1:d4:33:9e:b1:30:d7:63:6f:b2:b5:09:0c:68:4c:
82:f4:c6:b1:b4:5b:33:87:b7:f9:8c:b8:c8:fd:e0:50:03:02:
bc:d5:50:ce:4f:59:c0:dc:b1:35:1c:26:c3:b2:90:dd:bf:ee:
ae:db:e6:93:49:5e:bb:0c:a7:d4:4e:a9:14:48:5c:65:98:f2:
60:e8:bb:81:c4:96:6b:9e:86:b1:a6:4a:48:8a:ad:4f:ef:73:
83:6d:29:42:eb:c9:c6:7d:62:20:64:b1:1e:6e:b9:0d:0a:06:
55:6b:95:a5:98:cf:fb:ec:84:ec:97:67:75:c4:97:ed:6d:58:
5b:b0:0f:76:2d:f7:36:0e:c3:0a:42:5f:27:3d:94:fd:bc:68:
54:75:a9:63:67:e5:f0:58:36:d9:f6:3e:ec:fa:e5:8b:55:fb:
10:27:88:75:c7:62:f4:a8:86:4c:6c:47:15:29:75:44:3c:09:
f3:41:33:91:fd:0b:3e:65:42:09:f2:88:e5:33:ab:1e:82:ee:
6f:1e:a3:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ/0xjTifTK7Ufs9cmFiIh8mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjAyODA4ZDFmOTE0NTU1ZTFiZDU5YzE2NzcyODdmZjli
M2I1OTAwHhcNMjYwODEyMDcwMDU4WhcNMjYwODEzMDcwMDU4WjAzMTEwLwYDVQQD
EyhkMjJkYTc4NTAxMDI2YmUxZDJiZWU5MTM0MjI1ZjRlNjVkNWEzM2Y3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4EBe0I27KyRjrDLQJcdI1+1GhfQg
/bQqjxx4ecFvkef1Zy6OWf5nNB2+NW2+JWQcwYhD/tR8uUwsHZFe9dawQK/HMB7A
RVB2KCNXbgbkxJT94irMSlNistBBmhZv+iGoGw8VD2F6o3Pykzs+P9PROWi8zyfI
yqOt8IipRodiTWLm85wWQqHogiQHcWaAbgOC6jmXnqw0we75Zu/L3MaTFBsbADF9
2BJ3wl7yfp1GSUBbO4jwZvUqtus6Xr1TTCjKvpuDbK/20ogzfYYIhTYFecvUkotE
8XW7A7sG+DSCV5yoLswkw9WMtHHehb8DskAD/xozxMVbU5R3N29SpYHIawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNItp4UBAmvh0r7pE0Il9OZdWjP3MB8GA1UdIwQY
MBaAFJ0gKAjR+RRVXhvVnBZ3KH/5s7WQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1Njgt
ODgwYjJkZjU3ZjI1LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1NjgtODgwYjJkZjU3ZjI1
LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAajBaUspo
DcUtKs9ZXJWrr0u85YW/7eg/e1yrga91kJwj/EMCtRMP7YOvXlgkVJH74DXmqUjX
YhnjodQznrEw12NvsrUJDGhMgvTGsbRbM4e3+Yy4yP3gUAMCvNVQzk9ZwNyxNRwm
w7KQ3b/urtvmk0leuwyn1E6pFEhcZZjyYOi7gcSWa56GsaZKSIqtT+9zg20pQuvJ
xn1iIGSxHm65DQoGVWuVpZjP++yE7JdndcSX7W1YW7APdi33Ng7DCkJfJz2U/bxo
VHWpY2fl8Fg22fY+7Prli1X7ECeIdcdi9KiGTGxHFSl1RDwJ80Ezkf0LPmVCCfKI
5TOrHoLubx6jBQ==
-----END CERTIFICATE-----
Generated at Wed Aug 12 09:30:11 2026 by rpki-client