Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: pdSIlRXqWwcvYksDrImWltoraqbkoyM4cXYNj2ba/Lg=
Subject key identifier: 50:06:9E:F7:D4:39:51:F8:21:FD:27:B3:F5:4A:29:41:7B:EF:8D:79
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019DCFE3CC92571302597F39FB4B53AC2512
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 03E3
Signing time: Mon 27 Apr 2026 17:01:45 +0000
Manifest this update: Mon 27 Apr 2026 17:01:45 +0000
Manifest next update: Tue 28 Apr 2026 17:01:45 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: hNsSZnx7RVjB2Z2+3N5cVpltZFVmXJN3YIhVn7xHU0c=)
2: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (hash: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:cc:92:57:13:02:59:7f:39:fb:4b:53:ac:25:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Apr 27 17:01:45 2026 GMT
Not After : Apr 28 17:01:45 2026 GMT
Subject: CN=50069ef7d43951f821fd27b3f54a29417bef8d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:7c:4c:7b:d5:5f:b3:a2:d0:1b:0f:0f:5d:7b:
9e:fe:a3:cc:fe:16:04:ef:75:79:da:1f:1c:27:19:
3f:9d:f0:01:fc:63:69:51:9b:78:d6:29:f4:55:bc:
5b:56:64:2f:03:c2:03:4f:c6:7d:52:91:4a:22:d8:
d5:4a:f9:23:77:03:ad:b0:71:d1:6f:e5:8f:15:78:
16:59:bf:6b:c5:a7:2e:07:e0:01:e3:af:81:57:e5:
ce:cd:e9:5a:7a:29:24:d2:f2:c3:fa:6d:e9:90:cf:
58:5c:db:98:27:d5:99:56:49:54:d9:33:f8:be:3d:
65:ac:15:fe:15:2b:e9:73:60:ed:91:2f:a1:a7:15:
30:99:57:33:03:2c:e7:e4:7d:96:cf:f7:af:db:6c:
4d:12:3c:f2:b8:fb:a6:97:8f:9b:52:b1:65:91:49:
17:1e:32:58:0c:37:be:dc:6e:73:e3:bb:81:09:e0:
4a:9b:ad:bb:bf:83:51:dd:be:76:2d:44:98:c3:4a:
b5:d2:d9:db:c1:83:af:39:1b:44:78:f7:5e:a5:7b:
cd:64:7a:ff:e9:43:ef:86:6f:95:d1:d8:3b:6e:2c:
ef:c5:29:3a:f8:a3:fd:86:bc:09:8b:e7:f7:25:e6:
de:b6:37:ea:5b:18:3a:92:6d:fe:f5:7f:17:4f:b1:
2e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:06:9E:F7:D4:39:51:F8:21:FD:27:B3:F5:4A:29:41:7B:EF:8D:79
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:ab:6f:75:65:f0:bd:be:68:08:2a:46:01:52:66:ca:85:4e:
ad:98:a9:52:07:20:c5:c0:71:70:7a:7d:9b:07:d4:fd:3a:50:
a3:ff:8b:66:9b:66:dc:34:6b:75:ba:c7:f9:71:2b:ad:4b:01:
36:37:ec:e8:ac:a2:ab:ee:57:12:65:78:07:0f:dd:4e:0d:2c:
c8:2a:86:61:1d:b9:cb:92:58:59:a1:cf:da:eb:bb:06:82:0e:
5b:c1:f4:9f:ef:1f:c8:63:fd:dd:5a:2b:24:c4:97:0f:a3:54:
ed:bb:d3:d2:c5:9e:9e:ba:e7:8a:39:bf:a5:93:7b:c3:4f:bc:
66:93:d8:cc:ff:da:04:e8:46:70:3b:b0:55:af:82:0a:03:da:
97:80:f6:1b:bf:65:7e:c1:df:f1:f8:17:b1:77:6a:7d:36:af:
34:9e:fe:3c:71:d1:a6:82:a8:93:35:cf:84:d0:f7:e5:0c:e5:
e0:7d:a5:2a:b5:e4:5b:f4:e5:a5:90:5b:85:e0:03:46:fa:68:
45:2a:d2:b2:d3:b2:e8:59:53:ef:7f:d7:af:73:34:ea:c2:0e:
4e:e8:f1:13:a3:24:82:da:01:ea:71:b7:69:fb:f5:5c:21:db:
ed:47:6c:bb:bc:71:78:93:78:c2:6e:97:e9:4e:4c:24:b3:ee:
51:03:a8:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3P48ySVxMCWX85+0tTrCUSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOTE5M2M5NDJhMDcwZWI2ZTdiNzZkMzNjMTE3MGMxYWJh
YWFiYzAwHhcNMjYwNDI3MTcwMTQ1WhcNMjYwNDI4MTcwMTQ1WjAzMTEwLwYDVQQD
Eyg1MDA2OWVmN2Q0Mzk1MWY4MjFmZDI3YjNmNTRhMjk0MTdiZWY4ZDc5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAznxMe9Vfs6LQGw8PXXue/qPM/hYE
73V52h8cJxk/nfAB/GNpUZt41in0VbxbVmQvA8IDT8Z9UpFKItjVSvkjdwOtsHHR
b+WPFXgWWb9rxacuB+AB46+BV+XOzelaeikk0vLD+m3pkM9YXNuYJ9WZVklU2TP4
vj1lrBX+FSvpc2DtkS+hpxUwmVczAyzn5H2Wz/ev22xNEjzyuPuml4+bUrFlkUkX
HjJYDDe+3G5z47uBCeBKm627v4NR3b52LUSYw0q10tnbwYOvORtEePdepXvNZHr/
6UPvhm+V0dg7bizvxSk6+KP9hrwJi+f3JebetjfqWxg6km3+9X8XT7Eu1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFAGnvfUOVH4If0ns/VKKUF77415MB8GA1UdIwQY
MBaAFJyRk8lCoHDrbnt20zwRcMGrqqvAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUt
Y2UwZTk3YmFiNmE3LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC9lNjdlODItNzRkMS00NTk4LTgwZWUtY2UwZTk3YmFiNmE3
LzEvbkpHVHlVS2djT3R1ZTNiVFBCRnd3YXVxcThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUatvdWXw
vb5oCCpGAVJmyoVOrZipUgcgxcBxcHp9mwfU/TpQo/+LZptm3DRrdbrH+XErrUsB
Njfs6Kyiq+5XEmV4Bw/dTg0syCqGYR25y5JYWaHP2uu7BoIOW8H0n+8fyGP93Vor
JMSXD6NU7bvT0sWenrrnijm/pZN7w0+8ZpPYzP/aBOhGcDuwVa+CCgPal4D2G79l
fsHf8fgXsXdqfTavNJ7+PHHRpoKokzXPhND35Qzl4H2lKrXkW/TlpZBbheADRvpo
RSrSstOy6FlT73/Xr3M06sIOTujxE6MkgtoB6nG3afv1XCHb7Udsu7xxeJN4wm6X
6U5MJLPuUQOoIw==
-----END CERTIFICATE-----
Generated at Mon Apr 27 19:39:31 2026 by rpki-client