Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
File: n-lNLu3NgkrB3nSt42wfnWnUlso.mft (raw, json)
Hash identifier: 0n7MrImWZ/LbIF6UgmG87Wqs51C2TEu9Np2InxVYsYc=
Subject key identifier: C8:44:81:B7:50:F8:EA:E2:86:9A:DD:44:5B:F3:25:B9:C3:CE:65:E4
Authority key identifier: 9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
Certificate issuer: /CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Certificate serial: 01A04129F0C94731FED4825A8E968DB495C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
Manifest number: 090D
Signing time: Thu 27 Aug 2026 03:01:02 +0000
Manifest this update: Thu 27 Aug 2026 03:01:02 +0000
Manifest next update: Fri 28 Aug 2026 03:01:02 +0000
Files and hashes: 1: IxSOqG3VKiGzkrHVsxe1NDwRPlQ.roa (hash: COV4hg+LgsDZn9oz3/oU/egGJ+3yB4BuGfUdkH+oFDI=)
2: n-lNLu3NgkrB3nSt42wfnWnUlso.crl (hash: 7uFol7eFGDl4uU+SVyiGxlB3YgfdWP7rJi7uiRLVubA=)
3: p9sadlQLRMoFQLA1QXaKKY23LjQ.roa (hash: HShX7yQDvzKtFJFjK3t2BxQA1/vBYI4tq5fNWg1k4xY=)
4: ugyXshHr8wuLJhM8Vr2WcFZCUG4.roa (hash: yVgEXEDLqTUHDzrLVVJTJnKbB6aMI3zrlCtjybaz+8Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:41:29:f0:c9:47:31:fe:d4:82:5a:8e:96:8d:b4:95:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe94d2eedcd824ac1de74ade36c1f9d69d496ca
Validity
Not Before: Aug 27 03:01:02 2026 GMT
Not After : Aug 28 03:01:02 2026 GMT
Subject: CN=c84481b750f8eae2869add445bf325b9c3ce65e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:ca:6c:75:f5:8c:4f:b7:3f:78:98:37:59:19:
3e:43:fd:73:dc:de:d8:5f:9a:50:31:96:da:c2:04:
e3:f1:dd:fb:cd:55:62:69:4a:39:db:2a:42:ef:f4:
0a:4b:3d:1a:b9:62:24:88:80:c6:0c:2f:8a:c1:47:
cf:8b:9a:6e:ec:7b:82:09:26:c4:a0:26:38:1b:ed:
a1:5e:0c:17:78:30:ff:68:39:ef:38:2e:45:23:55:
b4:48:ae:5a:a6:18:44:49:20:f1:68:ea:30:7f:c7:
a9:79:ce:2f:99:6b:aa:d6:37:72:8d:a1:70:78:a9:
c6:e8:42:88:57:db:8b:23:aa:7e:21:be:bb:fd:72:
83:e5:6d:12:e2:db:36:cb:51:1e:72:3e:4d:7b:81:
61:3a:2f:79:99:2d:83:66:16:5b:a9:68:cf:fd:08:
83:e5:2c:9b:6a:2e:ce:5f:f8:12:41:76:ea:fb:03:
84:e3:87:29:0c:59:1d:a3:3d:28:bb:38:39:4d:93:
02:39:3f:bc:f0:2d:12:72:82:0a:70:99:52:39:33:
71:a8:e4:da:66:fe:02:bd:37:63:c2:31:9e:da:0d:
80:82:41:97:76:bf:8f:23:a3:01:4f:57:bb:05:02:
4d:e5:a5:c6:8b:52:d9:ac:a8:61:de:58:6f:99:49:
86:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:44:81:B7:50:F8:EA:E2:86:9A:DD:44:5B:F3:25:B9:C3:CE:65:E4
X509v3 Authority Key Identifier:
keyid:9F:E9:4D:2E:ED:CD:82:4A:C1:DE:74:AD:E3:6C:1F:9D:69:D4:96:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-lNLu3NgkrB3nSt42wfnWnUlso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/660e54-5c85-4d25-8e61-7ca11dc3ae82/1/n-lNLu3NgkrB3nSt42wfnWnUlso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:15:40:cc:a1:0a:a4:19:af:af:e3:f2:ed:ba:a9:aa:91:be:
e3:cb:b4:33:0f:b7:31:57:16:1f:52:1a:36:86:bc:67:01:0f:
e2:46:38:40:0d:3b:f6:a8:71:9c:9e:7d:35:ca:74:aa:3f:89:
48:56:b4:46:f6:91:8b:b0:36:5c:d4:d6:35:92:09:3e:69:64:
ac:b2:b6:ff:ef:27:17:57:14:2b:12:b6:4f:99:08:54:cb:2c:
28:6c:b2:f7:61:ed:24:37:4d:b7:44:56:cf:91:42:a8:09:dd:
0c:b6:c0:68:46:fb:55:c9:fe:bd:04:30:04:15:27:e1:f3:a7:
d0:99:8d:c2:bc:73:5c:db:d5:7b:dc:f9:85:a7:ec:70:ad:6b:
a1:fd:60:30:02:dd:2e:2b:1f:ab:46:44:b9:d9:8a:b0:e2:81:
53:cf:9a:91:49:f8:c6:e5:32:49:71:4d:2f:7f:cd:9a:56:08:
59:3e:3a:1c:f5:fe:67:f0:08:18:dd:2f:32:5a:63:96:2b:09:
24:a7:eb:9c:b8:90:13:6d:5c:59:27:fb:a4:10:06:e6:e5:32:
be:4c:c5:4d:cd:9d:94:92:18:62:fe:c9:fe:d7:1e:c6:5d:ec:
23:d1:97:45:68:84:d1:71:64:40:46:7b:12:26:0f:6b:9b:5e:
e8:c9:87:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaBBKfDJRzH+1IJajpaNtJXDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk0ZDJlZWRjZDgyNGFjMWRlNzRhZGUzNmMxZjlkNjlk
NDk2Y2EwHhcNMjYwODI3MDMwMTAyWhcNMjYwODI4MDMwMTAyWjAzMTEwLwYDVQQD
EyhjODQ0ODFiNzUwZjhlYWUyODY5YWRkNDQ1YmYzMjViOWMzY2U2NWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1spsdfWMT7c/eJg3WRk+Q/1z3N7Y
X5pQMZbawgTj8d37zVViaUo52ypC7/QKSz0auWIkiIDGDC+KwUfPi5pu7HuCCSbE
oCY4G+2hXgwXeDD/aDnvOC5FI1W0SK5aphhESSDxaOowf8epec4vmWuq1jdyjaFw
eKnG6EKIV9uLI6p+Ib67/XKD5W0S4ts2y1Eecj5Ne4FhOi95mS2DZhZbqWjP/QiD
5Sybai7OX/gSQXbq+wOE44cpDFkdoz0ouzg5TZMCOT+88C0ScoIKcJlSOTNxqOTa
Zv4CvTdjwjGe2g2AgkGXdr+PI6MBT1e7BQJN5aXGi1LZrKhh3lhvmUmGowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhEgbdQ+OrihprdRFvzJbnDzmXkMB8GA1UdIwQY
MBaAFJ/pTS7tzYJKwd50reNsH51p1JbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEt
N2NhMTFkYzNhZTgyLzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZC82NjBlNTQtNWM4NS00ZDI1LThlNjEtN2NhMTFkYzNhZTgy
LzEvbi1sTkx1M05na3JCM25TdDQyd2ZuV25VbHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARBVAzKEK
pBmvr+Py7bqpqpG+48u0Mw+3MVcWH1IaNoa8ZwEP4kY4QA079qhxnJ59Ncp0qj+J
SFa0RvaRi7A2XNTWNZIJPmlkrLK2/+8nF1cUKxK2T5kIVMssKGyy92HtJDdNt0RW
z5FCqAndDLbAaEb7Vcn+vQQwBBUn4fOn0JmNwrxzXNvVe9z5hafscK1rof1gMALd
Lisfq0ZEudmKsOKBU8+akUn4xuUySXFNL3/NmlYIWT46HPX+Z/AIGN0vMlpjlisJ
JKfrnLiQE21cWSf7pBAG5uUyvkzFTc2dlJIYYv7J/tcexl3sI9GXRWiE0XFkQEZ7
EiYPa5te6MmHsA==
-----END CERTIFICATE-----
Generated at Thu Aug 27 13:16:10 2026 by rpki-client