Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: IczOz12y+KPWi+PsfYyCrynsA+xsu0w9a2COk2TP08c=
Subject key identifier: C2:15:52:2E:34:94:35:46:B8:62:89:B4:F9:E3:25:05:BB:9A:45:07
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019D37F6E0772A43370D83A0C209FC11E6AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0EA1
Signing time: Sun 29 Mar 2026 05:00:19 +0000
Manifest this update: Sun 29 Mar 2026 05:00:19 +0000
Manifest next update: Mon 30 Mar 2026 05:00:19 +0000
Files and hashes: 1: apqOufkzZC3hvfLS0yrWU54SWG4.roa (hash: bdicC57sTedPfwJhANjdpge4Xu2b5dLjhbZNF/3RXQM=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: BVRKnVzsLLHjyYVbCOegsnM6mWdorg6iaXIMOnwMSr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:e0:77:2a:43:37:0d:83:a0:c2:09:fc:11:e6:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Mar 29 05:00:19 2026 GMT
Not After : Mar 30 05:00:19 2026 GMT
Subject: CN=c215522e34943546b86289b4f9e32505bb9a4507
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5d:d6:e9:81:76:10:a8:f9:1c:c2:ce:98:6c:
ec:8e:52:4a:b8:53:c9:d3:32:8a:d3:9c:f9:e2:5f:
60:b0:85:a1:1f:a0:9d:58:63:49:82:d0:6c:ee:23:
5e:fb:ed:2c:fa:62:a1:39:1b:6c:f8:6f:20:27:0d:
19:80:3e:97:37:e3:ec:a9:9a:9b:48:d3:0f:f8:9b:
c8:0b:85:c8:25:c4:7c:ec:70:69:94:59:20:bd:5a:
ca:94:66:98:a8:69:80:77:b9:ad:3a:52:e3:a9:d5:
ba:c9:59:0f:5c:a9:82:92:46:ed:ae:71:bb:c1:d3:
f9:10:56:ff:3a:8b:3f:0f:0a:20:6e:03:b6:41:08:
59:57:70:fc:3c:b3:55:45:4d:46:9f:f6:96:a9:a7:
f5:a9:4e:f1:28:da:c0:0f:64:39:46:0c:48:af:55:
93:f9:70:ea:cd:30:b8:6a:3b:ce:87:8f:7d:78:2f:
e9:19:b6:5d:f9:a3:0b:22:1e:99:ea:ae:5e:20:a5:
2d:26:94:85:b1:b9:66:e1:d2:d0:32:f2:43:32:fa:
b2:05:5f:94:54:9b:d8:82:f4:6b:a6:9b:c3:3c:cc:
ed:20:af:03:da:3e:87:13:1b:d3:31:68:7d:1d:20:
0a:5d:d5:55:40:fb:bc:67:a8:87:ce:a8:e7:8e:52:
66:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:15:52:2E:34:94:35:46:B8:62:89:B4:F9:E3:25:05:BB:9A:45:07
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:72:1d:d4:50:79:cf:27:06:a6:b7:2a:c0:ea:1a:6c:6d:e6:
6a:3c:7d:5b:80:fe:d1:6d:87:c7:80:c2:70:cf:14:83:23:83:
f7:78:39:60:8b:c1:65:eb:19:93:d6:e9:fc:0d:3d:9f:b6:99:
b9:91:29:76:70:5e:d0:9d:bc:b9:4a:34:fc:bb:10:2e:42:ab:
1e:1e:db:04:f9:64:8a:b4:d4:69:86:ed:56:d3:cd:ac:a4:69:
5b:91:60:8e:db:25:56:40:92:4c:dd:52:cf:19:18:32:a9:4a:
a3:d4:75:98:37:ea:4a:d3:f9:35:90:ab:07:4e:78:3c:87:98:
25:1a:ba:a2:6e:e4:39:d4:97:ab:3e:1b:7f:67:56:71:81:20:
fc:d6:0c:c7:bc:97:b1:29:b1:ba:03:81:ca:3b:8a:f4:d9:45:
0a:28:a4:6a:b5:4d:3b:59:3c:ee:6f:c2:11:d9:40:8a:dc:14:
7a:5b:75:d1:3b:61:79:09:de:74:36:3d:46:94:76:f9:be:dc:
11:2d:db:81:49:23:41:3d:3d:52:91:10:81:49:0e:fe:64:82:
d6:f6:97:c0:01:c5:87:4b:97:97:67:db:78:df:67:8c:2b:ec:
52:dd:47:28:bb:10:6e:33:bb:ec:a9:36:00:ca:d3:b8:89:f6:
52:8e:82:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ039uB3KkM3DYOgwgn8EeavMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm
YzNjMGYwHhcNMjYwMzI5MDUwMDE5WhcNMjYwMzMwMDUwMDE5WjAzMTEwLwYDVQQD
EyhjMjE1NTIyZTM0OTQzNTQ2Yjg2Mjg5YjRmOWUzMjUwNWJiOWE0NTA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt13W6YF2EKj5HMLOmGzsjlJKuFPJ
0zKK05z54l9gsIWhH6CdWGNJgtBs7iNe++0s+mKhORts+G8gJw0ZgD6XN+PsqZqb
SNMP+JvIC4XIJcR87HBplFkgvVrKlGaYqGmAd7mtOlLjqdW6yVkPXKmCkkbtrnG7
wdP5EFb/Oos/DwogbgO2QQhZV3D8PLNVRU1Gn/aWqaf1qU7xKNrAD2Q5RgxIr1WT
+XDqzTC4ajvOh499eC/pGbZd+aMLIh6Z6q5eIKUtJpSFsblm4dLQMvJDMvqyBV+U
VJvYgvRrppvDPMztIK8D2j6HExvTMWh9HSAKXdVVQPu8Z6iHzqjnjlJmTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMIVUi40lDVGuGKJtPnjJQW7mkUHMB8GA1UdIwQY
MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct
ZDU2Mzc0ZTExNTdhLzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh
LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgHId1FB5
zycGprcqwOoabG3majx9W4D+0W2Hx4DCcM8UgyOD93g5YIvBZesZk9bp/A09n7aZ
uZEpdnBe0J28uUo0/LsQLkKrHh7bBPlkirTUaYbtVtPNrKRpW5FgjtslVkCSTN1S
zxkYMqlKo9R1mDfqStP5NZCrB054PIeYJRq6om7kOdSXqz4bf2dWcYEg/NYMx7yX
sSmxugOByjuK9NlFCiikarVNO1k87m/CEdlAitwUelt10TtheQnedDY9RpR2+b7c
ES3bgUkjQT09UpEQgUkO/mSC1vaXwAHFh0uXl2fbeN9njCvsUt1HKLsQbjO77Kk2
AMrTuIn2Uo6C0A==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client