Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: V0tvGjZV390zfDg5e6q9IxcHp2hmHEh1FM+2TYJ1R8A=
Subject key identifier: 3A:48:99:9D:D1:4D:E2:0E:0A:2A:5C:72:93:B6:91:08:57:5D:54:2F
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019DCE62696801BC6CA4D124F836A47105FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 0500
Signing time: Mon 27 Apr 2026 10:00:49 +0000
Manifest this update: Mon 27 Apr 2026 10:00:49 +0000
Manifest next update: Tue 28 Apr 2026 10:00:49 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: w+vFM7UDbPawBSeZS3pB0/Dy+UiRdBMr+9RgoTgILYo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 10:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:62:69:68:01:bc:6c:a4:d1:24:f8:36:a4:71:05:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Apr 27 10:00:49 2026 GMT
Not After : Apr 28 10:00:49 2026 GMT
Subject: CN=3a48999dd14de20e0a2a5c7293b69108575d542f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a8:11:cd:8c:a9:77:2b:6a:55:fe:8a:4d:35:
80:c3:2b:45:5c:9f:53:86:ae:02:16:c6:1d:1e:0f:
d6:86:33:83:a9:f9:30:a3:f1:8a:dc:c6:38:d8:0a:
50:f8:00:6c:62:3a:ea:c0:13:66:f1:64:86:f9:b3:
6a:b8:69:5c:35:07:d8:81:9f:e8:db:53:2b:8a:bf:
c3:e8:d1:64:29:b3:74:11:2a:cd:03:00:ed:cd:15:
bd:37:ca:36:04:eb:86:81:18:50:e8:40:18:db:71:
ae:35:f9:a3:2a:53:94:63:b2:ad:de:71:db:be:af:
ab:46:1b:d0:2a:77:e3:da:b3:bf:82:7e:49:09:a2:
27:71:e4:aa:99:d0:2e:6e:ba:eb:7d:f6:fa:9d:c8:
fc:c3:59:6f:3d:01:f5:87:36:ad:5e:d0:b2:75:15:
a5:16:d3:30:b6:b1:96:73:97:5d:c7:5e:34:f1:38:
b3:10:01:13:2a:1b:96:6e:e3:1e:ea:4a:60:52:d0:
97:4d:34:af:ce:a8:f0:c2:1c:39:0d:90:3b:a8:c9:
2b:17:0f:b9:8d:3b:85:93:85:7e:6f:ca:62:29:e9:
ce:66:0a:71:c6:82:c7:19:19:c1:94:57:5a:a0:55:
48:cd:20:ea:eb:e9:fc:dc:50:d1:5e:95:a0:22:1f:
c7:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:48:99:9D:D1:4D:E2:0E:0A:2A:5C:72:93:B6:91:08:57:5D:54:2F
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:99:af:9d:53:2b:33:87:30:b0:37:23:f1:da:14:2d:dc:8d:
64:ca:6a:c3:66:43:b5:46:fa:2c:78:35:ea:e8:9f:f1:e7:c2:
a5:f5:c9:23:02:5d:75:64:57:75:01:50:9d:69:35:50:83:7d:
91:ee:bc:0a:e6:81:a8:ad:5e:3e:9a:7f:9e:32:e9:c7:74:de:
87:4a:8b:28:2f:89:81:f4:3e:cd:82:0f:62:c2:03:a0:f9:b6:
35:96:ee:bf:bb:4e:ce:17:2e:78:12:82:9b:1f:28:1b:2d:f2:
c7:17:74:c9:61:f1:3e:89:a0:d4:49:95:31:97:c7:b0:95:57:
df:5c:0f:10:1a:f8:b8:27:60:be:30:8a:04:2f:a7:3c:48:fa:
02:0f:6b:af:0f:77:5e:26:92:1e:ed:b1:dd:4a:66:42:f5:4b:
7c:46:ab:8d:9a:ac:39:85:62:1f:d5:23:e5:03:45:ba:b4:7a:
c5:b9:35:02:e7:45:5f:ab:6e:49:b3:df:43:9b:88:6e:89:3b:
ff:f7:12:7c:18:af:9e:c4:9c:81:6a:6e:15:2b:8d:e4:4b:a9:
f0:9c:37:13:0f:56:14:eb:41:7f:39:b2:4b:51:c1:d1:80:78:
46:e7:8b:7d:78:50:1c:22:f2:f1:1c:ae:84:3a:de:93:5c:9a:
01:60:c2:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3OYmloAbxspNEk+DakcQX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjYwNDI3MTAwMDQ5WhcNMjYwNDI4MTAwMDQ5WjAzMTEwLwYDVQQD
EygzYTQ4OTk5ZGQxNGRlMjBlMGEyYTVjNzI5M2I2OTEwODU3NWQ1NDJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKgRzYypdytqVf6KTTWAwytFXJ9T
hq4CFsYdHg/WhjODqfkwo/GK3MY42ApQ+ABsYjrqwBNm8WSG+bNquGlcNQfYgZ/o
21Mrir/D6NFkKbN0ESrNAwDtzRW9N8o2BOuGgRhQ6EAY23GuNfmjKlOUY7Kt3nHb
vq+rRhvQKnfj2rO/gn5JCaInceSqmdAubrrrffb6ncj8w1lvPQH1hzatXtCydRWl
FtMwtrGWc5ddx1408TizEAETKhuWbuMe6kpgUtCXTTSvzqjwwhw5DZA7qMkrFw+5
jTuFk4V+b8piKenOZgpxxoLHGRnBlFdaoFVIzSDq6+n83FDRXpWgIh/HnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDpImZ3RTeIOCipccpO2kQhXXVQvMB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAepmvnVMr
M4cwsDcj8doULdyNZMpqw2ZDtUb6LHg16uif8efCpfXJIwJddWRXdQFQnWk1UIN9
ke68CuaBqK1ePpp/njLpx3Teh0qLKC+JgfQ+zYIPYsIDoPm2NZbuv7tOzhcueBKC
mx8oGy3yxxd0yWHxPomg1EmVMZfHsJVX31wPEBr4uCdgvjCKBC+nPEj6Ag9rrw93
XiaSHu2x3UpmQvVLfEarjZqsOYViH9Uj5QNFurR6xbk1AudFX6tuSbPfQ5uIbok7
//cSfBivnsScgWpuFSuN5Eup8Jw3Ew9WFOtBfzmyS1HB0YB4RueLfXhQHCLy8Ryu
hDrek1yaAWDCgw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 18:32:28 2026 by rpki-client