Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
File: NOFy8gusVmf_hcr_gLRTZ1jm2po.mft (raw, json)
Hash identifier: UAdBTw2TciPxzS5/SgGfwuw3Er9+D4uNsdCsiprkzqE=
Subject key identifier: 5A:18:8E:3B:DA:DF:1D:CE:EC:73:C4:64:1E:04:8B:C1:B8:96:68:F6
Authority key identifier: 34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
Certificate issuer: /CN=34e172f20bac5667ff85caff80b4536758e6da9a
Certificate serial: 01A08A8C1273A5D572111731B0BA3EA046B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
Manifest number: C1
Signing time: Thu 10 Sep 2026 09:00:30 +0000
Manifest this update: Thu 10 Sep 2026 09:00:30 +0000
Manifest next update: Fri 11 Sep 2026 09:00:30 +0000
Files and hashes: 1: ESRoyyzD6nuIbg2v7a5fFcPEEtM.roa (hash: 6CkIgU30ZTpBXP27tZUxeNY4xYkwYzV9C1Gfa7vFkz4=)
2: NOFy8gusVmf_hcr_gLRTZ1jm2po.crl (hash: StuBwOnTIwrqRlGokNS99WvmDOQFm/Iq5J6Fe2yFz3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:8c:12:73:a5:d5:72:11:17:31:b0:ba:3e:a0:46:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34e172f20bac5667ff85caff80b4536758e6da9a
Validity
Not Before: Sep 10 09:00:30 2026 GMT
Not After : Sep 11 09:00:30 2026 GMT
Subject: CN=5a188e3bdadf1dceec73c4641e048bc1b89668f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:dc:20:f6:0e:77:d0:2c:cf:48:c2:62:66:78:
26:02:cc:6f:93:9d:91:46:29:6a:73:c4:ab:48:cd:
9f:75:9b:47:2f:f2:0d:b0:40:bf:85:c5:88:36:45:
4a:dc:93:a0:7c:86:99:03:7e:4c:9b:1d:75:19:87:
ad:bd:85:69:d3:bf:d7:a6:59:ab:3c:44:c0:2e:93:
73:11:cd:16:17:23:aa:37:a5:61:47:7b:22:66:dc:
61:64:54:e5:e9:ba:0d:85:e8:32:ab:f7:86:01:ce:
70:aa:3a:d1:93:bf:92:36:03:25:14:3f:76:ca:12:
e4:f3:43:ff:f5:56:c2:01:dc:51:dd:1b:a8:18:59:
58:d2:a4:32:25:32:61:37:3a:64:30:72:eb:23:34:
c8:5d:62:c0:84:e2:3e:24:ed:f7:a1:52:97:c8:2e:
65:c9:96:39:e3:67:60:b6:f6:46:da:8f:1a:19:85:
a2:eb:41:86:b1:90:50:2e:34:52:c6:b4:8f:5d:ab:
ff:6e:a5:ee:a9:ce:4e:cd:64:89:55:75:20:4b:7d:
f0:84:f1:b3:4f:b3:d4:6c:5f:21:f7:ed:84:1a:c8:
9b:37:4b:a9:32:cd:40:97:87:28:49:a4:ba:19:bd:
94:d6:9f:30:2e:97:47:64:8d:86:38:2b:62:60:10:
d5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:18:8E:3B:DA:DF:1D:CE:EC:73:C4:64:1E:04:8B:C1:B8:96:68:F6
X509v3 Authority Key Identifier:
keyid:34:E1:72:F2:0B:AC:56:67:FF:85:CA:FF:80:B4:53:67:58:E6:DA:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NOFy8gusVmf_hcr_gLRTZ1jm2po.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/2f36b6-d701-4335-af30-48fe633b1b3f/1/NOFy8gusVmf_hcr_gLRTZ1jm2po.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:d0:2e:8c:5e:09:2f:2e:bd:38:dd:7c:a9:1a:09:c1:0c:b9:
66:48:ef:08:c4:d4:5b:df:22:cf:d3:64:dd:45:f5:b9:3e:b7:
24:9c:77:eb:fe:47:a3:8a:c2:8a:6a:6a:b3:79:59:ca:47:e2:
1c:ba:10:af:20:27:38:ff:66:50:0d:7d:18:28:1f:c6:8c:9f:
29:20:31:21:b8:94:2d:72:03:6d:04:2f:bd:d4:d4:6d:3b:53:
d6:11:d1:30:14:a9:27:97:cb:8f:c8:c0:f7:44:9c:ab:cf:94:
dd:95:05:47:12:c6:f2:14:57:92:7a:ec:01:37:0e:46:02:73:
df:4b:e0:2e:86:82:d9:3b:de:d7:97:46:3c:e0:5a:8c:12:19:
19:fa:f6:5e:72:e5:d4:dd:82:46:ff:1c:f9:b1:b2:2c:77:4e:
24:f4:9e:5c:14:01:6c:c5:d3:de:9a:b8:98:a1:4a:71:2e:71:
46:2f:07:22:03:fd:72:fd:12:d3:13:28:2b:0e:6c:b8:6e:b9:
fe:0c:a4:9b:e0:0a:5f:03:13:e1:8f:c5:08:9e:7b:d0:d0:5a:
b5:e2:44:5f:ee:af:00:b0:99:ef:3f:6f:f7:34:16:37:ad:96:
a6:d8:22:e8:df:43:1c:98:3a:b1:75:11:9b:6e:78:a9:16:ea:
60:0a:a8:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCKjBJzpdVyERcxsLo+oEawMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZTE3MmYyMGJhYzU2NjdmZjg1Y2FmZjgwYjQ1MzY3NThl
NmRhOWEwHhcNMjYwOTEwMDkwMDMwWhcNMjYwOTExMDkwMDMwWjAzMTEwLwYDVQQD
Eyg1YTE4OGUzYmRhZGYxZGNlZWM3M2M0NjQxZTA0OGJjMWI4OTY2OGY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNwg9g530CzPSMJiZngmAsxvk52R
Rilqc8SrSM2fdZtHL/INsEC/hcWINkVK3JOgfIaZA35Mmx11GYetvYVp07/Xplmr
PETALpNzEc0WFyOqN6VhR3siZtxhZFTl6boNhegyq/eGAc5wqjrRk7+SNgMlFD92
yhLk80P/9VbCAdxR3RuoGFlY0qQyJTJhNzpkMHLrIzTIXWLAhOI+JO33oVKXyC5l
yZY542dgtvZG2o8aGYWi60GGsZBQLjRSxrSPXav/bqXuqc5OzWSJVXUgS33whPGz
T7PUbF8h9+2EGsibN0upMs1Al4coSaS6Gb2U1p8wLpdHZI2GOCtiYBDV5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoYjjva3x3O7HPEZB4Ei8G4lmj2MB8GA1UdIwQY
MBaAFDThcvILrFZn/4XK/4C0U2dY5tqaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk9GeThndXNWbWZfaGNyX2dMUlRaMWptMnBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAt
NDhmZTYzM2IxYjNmLzEvTk9GeThndXNWbWZfaGNyX2dMUlRaMWptMnBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC8yZjM2YjYtZDcwMS00MzM1LWFmMzAtNDhmZTYzM2IxYjNm
LzEvTk9GeThndXNWbWZfaGNyX2dMUlRaMWptMnBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbdAujF4J
Ly69ON18qRoJwQy5ZkjvCMTUW98iz9Nk3UX1uT63JJx36/5Ho4rCimpqs3lZykfi
HLoQryAnOP9mUA19GCgfxoyfKSAxIbiULXIDbQQvvdTUbTtT1hHRMBSpJ5fLj8jA
90Scq8+U3ZUFRxLG8hRXknrsATcORgJz30vgLoaC2Tve15dGPOBajBIZGfr2XnLl
1N2CRv8c+bGyLHdOJPSeXBQBbMXT3pq4mKFKcS5xRi8HIgP9cv0S0xMoKw5suG65
/gykm+AKXwMT4Y/FCJ570NBateJEX+6vALCZ7z9v9zQWN62Wptgi6N9DHJg6sXUR
m254qRbqYAqosQ==
-----END CERTIFICATE-----
Generated at Thu Sep 10 13:14:14 2026 by rpki-client