Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
File: nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft (raw, json)
Hash identifier: tWQbBL1VyYkptSxIL3+KEjSVv27lgVLPDrbyuhOH5zM=
Subject key identifier: 06:A5:2B:83:68:5A:D9:11:50:13:80:E2:63:74:10:CD:38:33:63:50
Authority key identifier: 9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
Certificate issuer: /CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Certificate serial: 01A00326A179DCFFF390C98CD64B4EDB7C49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
Manifest number: 1A06
Signing time: Sat 15 Aug 2026 02:00:58 +0000
Manifest this update: Sat 15 Aug 2026 02:00:58 +0000
Manifest next update: Sun 16 Aug 2026 02:00:58 +0000
Files and hashes: 1: KJhzEQAWLMV6-n64J1IGurNPXJA.roa (hash: CtHxiuCIKbij596MTURQ2oG9yHp4BtbuHJNvFD8eVFU=)
2: M8HxuDTjeppXENHYtsmDwzIxfqg.roa (hash: ehN4HCrYdAsRJz9J+AoM/g7LUsIA+10CKLm98CDchvI=)
3: nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl (hash: RsVYSp3OkFOrimlBDs7c+oI0UQVWn2otdQx+HmQzllg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 02:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:03:26:a1:79:dc:ff:f3:90:c9:8c:d6:4b:4e:db:7c:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d239c08ead94bb04fc3e6b4a65e6e1c7dcf38f4
Validity
Not Before: Aug 15 02:00:58 2026 GMT
Not After : Aug 16 02:00:58 2026 GMT
Subject: CN=06a52b83685ad911501380e2637410cd38336350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:20:b5:e3:cf:5c:58:43:74:5f:bf:26:77:89:
04:0e:9b:e2:0e:1c:6c:21:a8:23:d6:6c:57:c6:44:
97:ff:cd:a2:54:94:2f:23:77:49:45:1c:ba:03:fd:
8a:62:94:6c:23:60:00:84:20:b5:72:22:5e:51:6b:
c0:95:2e:d8:fe:0d:16:44:71:ee:f6:45:74:37:8c:
24:a0:3f:47:c4:46:4d:0e:0f:b8:eb:4b:63:df:c6:
09:ee:a2:04:2b:3a:eb:8c:3a:bb:ff:8b:3b:53:e1:
c4:89:d5:1d:01:a6:7b:32:85:3b:1e:21:35:c3:43:
9d:b8:35:8f:38:31:32:6d:58:e4:fe:3f:f3:90:b3:
50:0a:fc:cd:5c:67:39:dd:00:68:ff:05:8e:96:a1:
ec:05:5a:1b:cd:e1:4b:40:51:3a:b1:81:60:b4:7f:
81:8d:ad:86:67:d7:e8:3b:ab:42:9e:69:fb:a3:9d:
56:28:94:4a:69:e0:c5:68:ec:ee:c7:b2:ef:40:e6:
0d:a6:b3:04:01:8e:75:46:5c:17:3d:14:e7:85:ed:
97:5e:d7:db:98:6e:b3:6e:f5:09:29:fc:56:56:9e:
05:6a:b5:7b:28:26:db:39:6f:ba:d5:e9:7f:aa:88:
57:ab:ad:37:41:62:a0:89:02:dc:fa:1b:58:54:68:
8d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:A5:2B:83:68:5A:D9:11:50:13:80:E2:63:74:10:CD:38:33:63:50
X509v3 Authority Key Identifier:
keyid:9D:23:9C:08:EA:D9:4B:B0:4F:C3:E6:B4:A6:5E:6E:1C:7D:CF:38:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSOcCOrZS7BPw-a0pl5uHH3POPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/060859-7707-412a-9810-dbb2931a0f64/1/nSOcCOrZS7BPw-a0pl5uHH3POPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:63:3b:00:c5:15:19:d8:02:f6:ca:95:fe:b6:b6:9d:60:f9:
13:9d:25:8e:b6:4b:bc:62:79:68:90:b6:5e:0a:5c:4a:a7:cb:
fc:a6:f3:c2:be:86:06:85:34:94:2c:d2:5d:8a:a6:cd:06:02:
6a:01:3d:33:d9:c0:fc:2f:3a:19:7b:65:98:22:a7:c2:26:dd:
f5:af:86:a8:d3:80:1c:db:21:87:2b:c9:22:85:7d:ea:6b:f4:
02:ef:90:f6:b1:03:2a:19:26:b9:e2:f6:d9:0c:76:c6:ea:87:
80:f9:ff:08:51:e7:a4:65:23:35:d4:ee:28:b8:a2:9d:ff:29:
84:0c:9a:1f:d0:2e:b7:27:a4:1e:63:24:d3:5a:fc:b1:ee:a8:
66:32:f7:dd:91:f9:94:6d:9d:58:ed:c6:9b:28:14:2e:d7:4d:
6e:c3:4c:ef:b9:85:bb:04:ae:b9:73:5d:75:bd:b4:c6:8f:d2:
b4:62:fa:a2:bf:70:2d:a3:3d:9c:cd:00:6a:6f:09:f8:38:6f:
08:b1:64:29:a6:14:04:df:1d:32:f4:86:bf:43:08:d6:98:97:
3e:96:72:25:a7:21:55:06:14:ef:32:5f:ae:fd:a8:75:e9:ea:
85:df:0d:2c:97:12:83:8a:64:20:9a:88:7e:b9:24:d2:a2:e6:
21:76:13:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaADJqF53P/zkMmM1ktO23xJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjM5YzA4ZWFkOTRiYjA0ZmMzZTZiNGE2NWU2ZTFjN2Rj
ZjM4ZjQwHhcNMjYwODE1MDIwMDU4WhcNMjYwODE2MDIwMDU4WjAzMTEwLwYDVQQD
EygwNmE1MmI4MzY4NWFkOTExNTAxMzgwZTI2Mzc0MTBjZDM4MzM2MzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqiC1489cWEN0X78md4kEDpviDhxs
Iagj1mxXxkSX/82iVJQvI3dJRRy6A/2KYpRsI2AAhCC1ciJeUWvAlS7Y/g0WRHHu
9kV0N4wkoD9HxEZNDg+460tj38YJ7qIEKzrrjDq7/4s7U+HEidUdAaZ7MoU7HiE1
w0OduDWPODEybVjk/j/zkLNQCvzNXGc53QBo/wWOlqHsBVobzeFLQFE6sYFgtH+B
ja2GZ9foO6tCnmn7o51WKJRKaeDFaOzux7LvQOYNprMEAY51RlwXPRTnhe2XXtfb
mG6zbvUJKfxWVp4FarV7KCbbOW+61el/qohXq603QWKgiQLc+htYVGiNfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAalK4NoWtkRUBOA4mN0EM04M2NQMB8GA1UdIwQY
MBaAFJ0jnAjq2UuwT8PmtKZebhx9zzj0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAt
ZGJiMjkzMWEwZjY0LzEvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wNjA4NTktNzcwNy00MTJhLTk4MTAtZGJiMjkzMWEwZjY0
LzEvblNPY0NPclpTN0JQdy1hMHBsNXVISDNQT1BRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAimM7AMUV
GdgC9sqV/ra2nWD5E50ljrZLvGJ5aJC2XgpcSqfL/Kbzwr6GBoU0lCzSXYqmzQYC
agE9M9nA/C86GXtlmCKnwibd9a+GqNOAHNshhyvJIoV96mv0Au+Q9rEDKhkmueL2
2Qx2xuqHgPn/CFHnpGUjNdTuKLiinf8phAyaH9AutyekHmMk01r8se6oZjL33ZH5
lG2dWO3GmygULtdNbsNM77mFuwSuuXNddb20xo/StGL6or9wLaM9nM0Aam8J+Dhv
CLFkKaYUBN8dMvSGv0MI1piXPpZyJachVQYU7zJfrv2odenqhd8NLJcSg4pkIJqI
frkk0qLmIXYTkg==
-----END CERTIFICATE-----
Generated at Sat Aug 15 09:34:11 2026 by rpki-client