Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
File: nxFouFcXoUZmABtbL2yQgBmX3gY.mft (raw, json)
Hash identifier: X7iGd4PrcEpxUvl84zbgM1BizBpu/oDY58Rr0a+Je3s=
Subject key identifier: 2C:4A:34:97:5B:1C:B1:65:5D:DC:6E:DB:D5:EB:ED:0D:B3:93:C2:52
Authority key identifier: 9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
Certificate issuer: /CN=9f1168b85717a14666001b5b2f6c90801997de06
Certificate serial: 019D386650AFE3A9A07F10C0317945B925B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
Manifest number: 0641
Signing time: Sun 29 Mar 2026 07:02:02 +0000
Manifest this update: Sun 29 Mar 2026 07:02:02 +0000
Manifest next update: Mon 30 Mar 2026 07:02:02 +0000
Files and hashes: 1: 4mcjlfKQeAXTF7xGEKQ2QAqMI50.roa (hash: JOKnaNGFem+HWwH7PdEKl79mLEfLJaQb9H34d4OS4AM=)
2: nxFouFcXoUZmABtbL2yQgBmX3gY.crl (hash: 8dvPzT0Toen12GZsMhLLDC4foujzhV3DGXSxbEIehCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:50:af:e3:a9:a0:7f:10:c0:31:79:45:b9:25:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f1168b85717a14666001b5b2f6c90801997de06
Validity
Not Before: Mar 29 07:02:02 2026 GMT
Not After : Mar 30 07:02:02 2026 GMT
Subject: CN=2c4a34975b1cb1655ddc6edbd5ebed0db393c252
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ae:69:ca:3c:2c:45:ea:3b:84:e4:7b:25:fd:
d1:bb:03:02:9f:bd:4b:a6:41:39:1a:fc:0b:97:c3:
b4:c3:d2:5b:64:5d:02:71:82:40:03:44:ae:cc:cf:
3a:da:ab:e4:a4:7f:e5:39:05:4f:f0:29:5d:c8:fb:
67:73:33:da:f6:6a:59:da:ef:09:4c:c8:ca:ae:31:
81:42:cb:0f:95:49:8a:7c:f8:28:16:a9:f5:13:3b:
99:f6:aa:d0:24:b0:34:a7:af:dc:de:13:14:09:c3:
95:a6:86:54:7c:a0:7d:9b:7d:a0:f7:2e:01:83:6a:
86:83:db:ee:c3:ae:3e:42:3d:ad:86:fc:f3:33:b8:
32:74:fa:20:c7:3b:3c:f2:40:fc:e8:d8:ce:e5:7c:
24:b4:bb:23:da:e3:51:ba:b1:c6:c9:b3:3c:bf:3c:
24:55:5e:11:47:61:5e:12:81:bf:0c:07:15:51:fa:
26:55:09:7b:1e:e2:a3:25:d7:cb:4d:5e:37:e8:7f:
6e:75:94:73:c7:fd:43:d5:c3:a7:28:c9:57:e1:69:
2d:6b:ad:99:59:dc:f2:32:25:be:26:8c:be:fc:2e:
a0:8f:55:3d:41:c0:f6:b6:aa:35:89:3f:b5:ff:6a:
7d:0b:0d:78:7f:e0:e9:3a:f7:d7:60:cf:e9:40:32:
db:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4A:34:97:5B:1C:B1:65:5D:DC:6E:DB:D5:EB:ED:0D:B3:93:C2:52
X509v3 Authority Key Identifier:
keyid:9F:11:68:B8:57:17:A1:46:66:00:1B:5B:2F:6C:90:80:19:97:DE:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nxFouFcXoUZmABtbL2yQgBmX3gY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/8f658c-3fac-498d-b95e-f4219beddb37/1/nxFouFcXoUZmABtbL2yQgBmX3gY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:e7:b3:da:88:de:bb:3d:da:99:fe:72:d1:9b:fa:fd:a2:5a:
8f:29:dd:b0:16:aa:65:1c:bd:7b:91:fa:db:5d:71:9f:37:48:
80:d9:e8:c0:03:61:fe:d2:3b:dc:91:14:ee:1a:44:71:b8:69:
9b:2f:80:25:2f:72:56:37:99:1d:19:67:e0:ab:b3:cd:1d:43:
a8:a4:ac:2b:75:aa:fe:1d:10:e2:4d:88:50:20:d3:9d:c0:98:
06:62:b0:df:ca:f1:ba:76:fb:f6:bf:b1:57:a0:88:43:84:49:
17:b4:f7:35:c5:96:49:90:50:b6:4d:23:6c:64:88:16:be:a1:
b6:c5:36:ac:cb:0c:1a:b4:83:4a:d1:ba:d7:98:55:9a:65:66:
cd:62:d9:a6:6c:a8:74:3b:69:b1:e0:c6:51:ec:66:39:49:6f:
b9:2b:ce:a2:57:d4:2b:05:98:88:d4:0b:8b:fe:83:f6:d5:2d:
04:40:01:8f:ea:c0:fe:21:1e:7a:60:65:2c:a2:c5:89:e0:8a:
18:60:9e:bd:9b:2e:1e:bb:a5:26:23:f1:d3:7d:a0:1b:7e:70:
1e:25:0e:75:1a:25:e1:55:9c:f4:80:3a:9d:8f:e1:a3:2e:f9:
55:1c:cc:4f:9a:16:da:db:2d:19:db:73:ff:b3:04:a0:d6:47:
55:7a:5f:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04ZlCv46mgfxDAMXlFuSWyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmMTE2OGI4NTcxN2ExNDY2NjAwMWI1YjJmNmM5MDgwMTk5
N2RlMDYwHhcNMjYwMzI5MDcwMjAyWhcNMjYwMzMwMDcwMjAyWjAzMTEwLwYDVQQD
EygyYzRhMzQ5NzViMWNiMTY1NWRkYzZlZGJkNWViZWQwZGIzOTNjMjUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqa5pyjwsReo7hOR7Jf3RuwMCn71L
pkE5GvwLl8O0w9JbZF0CcYJAA0SuzM862qvkpH/lOQVP8CldyPtnczPa9mpZ2u8J
TMjKrjGBQssPlUmKfPgoFqn1EzuZ9qrQJLA0p6/c3hMUCcOVpoZUfKB9m32g9y4B
g2qGg9vuw64+Qj2thvzzM7gydPogxzs88kD86NjO5XwktLsj2uNRurHGybM8vzwk
VV4RR2FeEoG/DAcVUfomVQl7HuKjJdfLTV436H9udZRzx/1D1cOnKMlX4Wkta62Z
WdzyMiW+Joy+/C6gj1U9QcD2tqo1iT+1/2p9Cw14f+DpOvfXYM/pQDLbbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxKNJdbHLFlXdxu29Xr7Q2zk8JSMB8GA1UdIwQY
MBaAFJ8RaLhXF6FGZgAbWy9skIAZl94GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUt
ZjQyMTliZWRkYjM3LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC84ZjY1OGMtM2ZhYy00OThkLWI5NWUtZjQyMTliZWRkYjM3
LzEvbnhGb3VGY1hvVVptQUJ0YkwyeVFnQm1YM2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAuez2oje
uz3amf5y0Zv6/aJajyndsBaqZRy9e5H6211xnzdIgNnowANh/tI73JEU7hpEcbhp
my+AJS9yVjeZHRln4KuzzR1DqKSsK3Wq/h0Q4k2IUCDTncCYBmKw38rxunb79r+x
V6CIQ4RJF7T3NcWWSZBQtk0jbGSIFr6htsU2rMsMGrSDStG615hVmmVmzWLZpmyo
dDtpseDGUexmOUlvuSvOolfUKwWYiNQLi/6D9tUtBEABj+rA/iEeemBlLKLFieCK
GGCevZsuHrulJiPx032gG35wHiUOdRol4VWc9IA6nY/hoy75VRzMT5oW2tstGdtz
/7MEoNZHVXpfww==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:13 2026 by rpki-client