Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
File: nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft (raw, json)
Hash identifier: CZhnmRHlW7qS70LRfqA9ffY/2SdkkYGb9Lgi6ywZJNU=
Subject key identifier: 08:6C:85:9A:DD:89:19:49:93:6B:67:56:77:75:EA:EE:FB:2A:2D:93
Authority key identifier: 9D:1B:EF:2C:96:1F:DC:CE:94:EB:E2:DB:FB:22:60:9E:28:CC:F5:CF
Certificate issuer: /CN=9d1bef2c961fdcce94ebe2dbfb22609e28ccf5cf
Certificate serial: 01A1754B5CE00BA3E6629DA48D700D8EA9E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRvvLJYf3M6U6-Lb-yJgnijM9c8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
Manifest number: 45
Signing time: Sun 25 Oct 2026 23:00:35 +0000
Manifest this update: Sun 25 Oct 2026 23:00:35 +0000
Manifest next update: Mon 26 Oct 2026 23:00:35 +0000
Files and hashes: 1: 0o9Ph672PYFs3U67nvyPgpwJ0KU.asa (hash: rbJ2M0kHmIDMnsyW66p1tZekT2YXfrvqRpPRJrHulic=)
2: nRvvLJYf3M6U6-Lb-yJgnijM9c8.crl (hash: oZ67prWg1s64Qm45BIRaOLVCYFyOV96AWlkBNAOwEtc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRvvLJYf3M6U6-Lb-yJgnijM9c8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:75:4b:5c:e0:0b:a3:e6:62:9d:a4:8d:70:0d:8e:a9:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d1bef2c961fdcce94ebe2dbfb22609e28ccf5cf
Validity
Not Before: Oct 25 23:00:35 2026 GMT
Not After : Oct 26 23:00:35 2026 GMT
Subject: CN=086c859add891949936b67567775eaeefb2a2d93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b6:a0:3d:c9:9b:b5:f7:a2:f4:4a:98:c7:bc:
07:d9:e9:66:92:bf:eb:85:47:f4:15:fd:51:c4:49:
ac:74:3d:ed:e6:66:1d:c0:ea:9c:b5:98:8c:00:c4:
49:ea:27:83:37:f1:df:04:c6:4b:a5:f6:6b:8e:9d:
1e:2c:a3:c2:07:e2:1d:ff:51:9f:43:cc:39:0e:4a:
85:79:09:81:50:8e:f9:bf:3d:bf:05:32:56:3b:88:
ae:83:41:8c:aa:20:6a:92:be:03:0c:99:e9:a4:6e:
30:65:c0:7e:9d:35:30:60:cb:08:34:5e:81:a3:1e:
45:6a:ff:48:72:3d:ce:8c:e6:de:6a:7f:b3:9c:e7:
9c:f2:55:07:51:d4:b7:02:b3:cf:0a:4a:0e:73:ba:
74:5d:48:12:86:92:26:12:67:83:a7:b6:56:df:eb:
5f:1f:97:71:3e:35:fd:a7:7b:c2:36:ef:d2:59:c0:
54:44:da:92:cd:7b:47:82:b5:d6:50:b5:47:91:08:
36:80:68:62:47:3e:29:f6:9c:49:b3:25:15:f3:4a:
60:ad:cf:d1:b5:9c:81:8e:3e:2e:58:89:ff:89:61:
87:93:33:4e:be:5e:92:92:4c:7e:96:0a:ff:d1:51:
20:b3:fa:64:66:e7:2f:a2:42:d1:a4:44:ab:d6:db:
6e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:6C:85:9A:DD:89:19:49:93:6B:67:56:77:75:EA:EE:FB:2A:2D:93
X509v3 Authority Key Identifier:
keyid:9D:1B:EF:2C:96:1F:DC:CE:94:EB:E2:DB:FB:22:60:9E:28:CC:F5:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRvvLJYf3M6U6-Lb-yJgnijM9c8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/310e8d-541d-4b23-ae04-d036c11a7d33/1/nRvvLJYf3M6U6-Lb-yJgnijM9c8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:d7:4f:ea:9c:dd:25:d2:43:4b:d3:26:6f:90:3d:eb:f3:8e:
9a:bb:1c:34:6b:ec:59:57:13:58:76:14:8a:f4:fc:02:3c:f1:
e5:b2:f6:52:fe:0e:1d:32:52:9f:f3:bd:04:09:c6:3b:0b:0f:
86:79:78:e0:d1:b2:fd:24:22:2f:86:11:c7:30:e7:24:1d:d4:
4d:6c:01:a8:1b:07:45:65:55:d4:3c:b6:b3:12:0a:e0:e6:36:
2a:9e:84:fe:57:11:dc:88:b4:90:f9:bb:98:f9:f0:cd:b3:1b:
31:85:08:8f:5c:17:9b:1e:04:2f:ea:18:20:a5:0b:9d:51:75:
53:3e:28:61:f6:b1:89:f6:7c:8f:8b:32:35:c1:72:d4:0b:65:
6a:2d:b9:5d:a5:64:59:3f:5b:78:b0:12:d5:f3:f1:af:a7:b5:
4d:0d:e1:8e:74:92:2d:d2:46:1a:9d:ec:90:7e:5a:bd:b1:76:
4c:0f:fa:b0:71:79:52:ec:cb:15:1b:81:bc:79:66:ae:0d:b3:
2c:85:5b:9e:4b:e3:d8:63:84:50:f6:4d:dd:6d:c9:e7:81:ac:
e2:f9:5d:aa:83:24:47:51:87:c3:d5:bf:6f:fe:4d:96:0f:f8:
73:9f:7a:00:b9:9a:89:c0:11:2a:fd:04:2c:6b:94:d7:2e:dc:
08:b3:38:08
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF1S1zgC6PmYp2kjXANjqnkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMWJlZjJjOTYxZmRjY2U5NGViZTJkYmZiMjI2MDllMjhj
Y2Y1Y2YwHhcNMjYxMDI1MjMwMDM1WhcNMjYxMDI2MjMwMDM1WjAzMTEwLwYDVQQD
EygwODZjODU5YWRkODkxOTQ5OTM2YjY3NTY3Nzc1ZWFlZWZiMmEyZDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLagPcmbtfei9EqYx7wH2elmkr/r
hUf0Ff1RxEmsdD3t5mYdwOqctZiMAMRJ6ieDN/HfBMZLpfZrjp0eLKPCB+Id/1Gf
Q8w5DkqFeQmBUI75vz2/BTJWO4iug0GMqiBqkr4DDJnppG4wZcB+nTUwYMsINF6B
ox5Fav9Icj3OjObean+znOec8lUHUdS3ArPPCkoOc7p0XUgShpImEmeDp7ZW3+tf
H5dxPjX9p3vCNu/SWcBURNqSzXtHgrXWULVHkQg2gGhiRz4p9pxJsyUV80pgrc/R
tZyBjj4uWIn/iWGHkzNOvl6Skkx+lgr/0VEgs/pkZucvokLRpESr1ttuewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhshZrdiRlJk2tnVnd16u77Ki2TMB8GA1UdIwQY
MBaAFJ0b7yyWH9zOlOvi2/siYJ4ozPXPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblJ2dkxKWWYzTTZVNi1MYi15SmduaWpNOWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zMTBlOGQtNTQxZC00YjIzLWFlMDQt
ZDAzNmMxMWE3ZDMzLzEvblJ2dkxKWWYzTTZVNi1MYi15SmduaWpNOWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8zMTBlOGQtNTQxZC00YjIzLWFlMDQtZDAzNmMxMWE3ZDMz
LzEvblJ2dkxKWWYzTTZVNi1MYi15SmduaWpNOWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiddP6pzd
JdJDS9Mmb5A96/OOmrscNGvsWVcTWHYUivT8Ajzx5bL2Uv4OHTJSn/O9BAnGOwsP
hnl44NGy/SQiL4YRxzDnJB3UTWwBqBsHRWVV1Dy2sxIK4OY2Kp6E/lcR3Ii0kPm7
mPnwzbMbMYUIj1wXmx4EL+oYIKULnVF1Uz4oYfaxifZ8j4syNcFy1Atlai25XaVk
WT9beLAS1fPxr6e1TQ3hjnSSLdJGGp3skH5avbF2TA/6sHF5UuzLFRuBvHlmrg2z
LIVbnkvj2GOEUPZN3W3J54Gs4vldqoMkR1GHw9W/b/5Nlg/4c596ALmaicARKv0E
LGuU1y7cCLM4CA==
-----END CERTIFICATE-----
Generated at Mon Oct 26 08:50:57 2026 by rpki-client