Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: bgDx+BKjWglOekthk7Xcctqgu0DhUgPymu4aVYsFEdg=
Subject key identifier: 7B:B9:16:5D:5E:52:56:0A:CB:DE:85:BE:43:9C:41:E1:4C:B7:22:67
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019CE25A0EE262BE90DAD29594566AC24E9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0B96
Signing time: Thu 12 Mar 2026 14:01:18 +0000
Manifest this update: Thu 12 Mar 2026 14:01:18 +0000
Manifest next update: Fri 13 Mar 2026 14:01:18 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: FpzGR+hF2sLI4GnVQP9/hUTBYvZ/+nI06TdTM0HFI9Q=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:5a:0e:e2:62:be:90:da:d2:95:94:56:6a:c2:4e:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Mar 12 14:01:18 2026 GMT
Not After : Mar 13 14:01:18 2026 GMT
Subject: CN=7bb9165d5e52560acbde85be439c41e14cb72267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:43:57:77:57:d9:0a:5e:12:c9:72:21:76:06:
00:ac:66:7d:d4:92:7e:9a:74:d7:4b:70:64:03:e6:
54:84:ca:be:14:af:22:01:f9:94:be:79:1a:c3:70:
e2:07:af:c1:1c:60:d2:46:db:5f:c3:53:12:46:86:
9b:7f:6d:53:ec:ec:51:df:e1:88:4a:d7:38:3f:0f:
e3:cb:4f:55:a2:56:43:72:19:6e:37:b7:88:8d:6c:
53:dc:a9:13:66:cb:89:33:ee:be:2b:c3:15:b4:c6:
c2:44:19:d0:df:6c:b4:0a:be:af:d0:16:15:04:45:
48:82:ff:0f:11:d5:09:e5:21:7b:56:61:fd:c3:db:
9e:78:f7:ba:20:81:19:34:cb:35:1a:7a:aa:1d:d1:
d3:f8:cc:15:25:6d:61:cd:58:f7:56:b5:d7:96:3d:
fd:79:9f:f6:eb:c6:79:5d:04:fc:0c:57:4f:e9:a3:
27:b2:1a:01:9b:99:1b:ec:b5:72:f5:76:9c:a5:a1:
55:3c:e8:24:81:56:f8:70:2b:57:e7:f0:3e:7f:03:
56:e1:0a:f4:12:58:c5:7c:48:81:d0:d4:c3:8c:2a:
54:8b:5d:a6:d0:c6:06:10:63:0c:96:0f:c1:19:38:
73:f9:5b:ad:dc:3e:3f:80:4a:cd:3e:a3:d1:3d:23:
95:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B9:16:5D:5E:52:56:0A:CB:DE:85:BE:43:9C:41:E1:4C:B7:22:67
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:1d:5c:f7:b8:b4:f4:06:81:92:cb:d4:9c:df:c3:d1:44:87:
c8:72:37:fc:d5:f6:f1:0c:4f:bc:c8:71:f1:9c:4f:e3:9b:aa:
c3:cf:58:5d:ac:0b:e8:18:c4:13:f6:a6:ec:5e:f6:28:92:83:
c7:a3:b3:9b:9a:95:bd:20:a9:f4:a9:1b:33:eb:2c:86:01:4f:
eb:fd:e6:3d:55:94:ad:02:17:5a:df:c5:f9:9b:53:c9:91:c7:
1d:06:9c:96:88:b1:7e:89:61:92:37:dd:12:0d:60:61:11:82:
e1:50:6d:31:93:16:ef:a0:8a:88:16:5a:55:2e:38:56:70:66:
b2:31:2f:d0:22:c1:ae:66:70:55:c8:46:69:f2:bd:69:f1:e5:
f5:5b:bb:0e:28:d4:7c:ad:4b:3c:ff:a1:51:f0:cd:1f:af:ad:
51:36:75:67:ff:b3:3e:cf:2a:4d:5a:27:91:ad:f3:2e:72:22:
0a:38:68:35:f6:77:57:44:83:00:f6:b9:62:78:47:71:fa:b6:
ef:58:c2:48:4b:32:25:e4:0d:cc:45:39:25:f8:3e:61:7b:13:
eb:4a:fc:43:25:34:4f:ce:06:db:a7:b3:9c:d5:4f:3d:45:b6:
98:3c:a2:ca:b9:bc:17:41:ed:fb:eb:83:45:f9:d6:a4:83:b6:
4b:bc:28:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZziWg7iYr6Q2tKVlFZqwk6fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMjFhNWU0Y2Y2ZTllMmU3MDMzOGFlZWJmYTBkMTU4OGQ3
M2I2ZWYwHhcNMjYwMzEyMTQwMTE4WhcNMjYwMzEzMTQwMTE4WjAzMTEwLwYDVQQD
Eyg3YmI5MTY1ZDVlNTI1NjBhY2JkZTg1YmU0MzljNDFlMTRjYjcyMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoUNXd1fZCl4SyXIhdgYArGZ91JJ+
mnTXS3BkA+ZUhMq+FK8iAfmUvnkaw3DiB6/BHGDSRttfw1MSRoabf21T7OxR3+GI
Stc4Pw/jy09VolZDchluN7eIjWxT3KkTZsuJM+6+K8MVtMbCRBnQ32y0Cr6v0BYV
BEVIgv8PEdUJ5SF7VmH9w9ueePe6IIEZNMs1GnqqHdHT+MwVJW1hzVj3VrXXlj39
eZ/268Z5XQT8DFdP6aMnshoBm5kb7LVy9XacpaFVPOgkgVb4cCtX5/A+fwNW4Qr0
EljFfEiB0NTDjCpUi12m0MYGEGMMlg/BGThz+Vut3D4/gErNPqPRPSOV9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHu5Fl1eUlYKy96FvkOcQeFMtyJnMB8GA1UdIwQY
MBaAFJwhpeTPbp4ucDOK7r+g0ViNc7bvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDIt
NTI4ZWZmNTJmZWJkLzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi84Y2NlODYtYjBhZS00MTY2LTkwNDItNTI4ZWZmNTJmZWJk
LzEvbkNHbDVNOXVuaTV3TTRydXY2RFJXSTF6dHU4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKB1c97i0
9AaBksvUnN/D0USHyHI3/NX28QxPvMhx8ZxP45uqw89YXawL6BjEE/am7F72KJKD
x6Ozm5qVvSCp9KkbM+sshgFP6/3mPVWUrQIXWt/F+ZtTyZHHHQacloixfolhkjfd
Eg1gYRGC4VBtMZMW76CKiBZaVS44VnBmsjEv0CLBrmZwVchGafK9afHl9Vu7DijU
fK1LPP+hUfDNH6+tUTZ1Z/+zPs8qTVonka3zLnIiCjhoNfZ3V0SDAPa5YnhHcfq2
71jCSEsyJeQNzEU5Jfg+YXsT60r8QyU0T84G26eznNVPPUW2mDyiyrm8F0Ht++uD
RfnWpIO2S7woWg==
-----END CERTIFICATE-----
Generated at Thu Mar 12 22:56:16 2026 by rpki-client