Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
File: NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft (raw, json)
Hash identifier: KYAfKyY6KcURL5DwzlvlxU2NdPjbs/HmvkRXNJv1coI=
Subject key identifier: F8:7C:C2:29:8E:DC:CE:61:BD:37:DD:48:9A:10:FB:DA:C6:16:92:DC
Authority key identifier: 34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
Certificate issuer: /CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Certificate serial: 019D38D29785A126D1DCBA3208D1E543F038
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
Manifest number: 11C6
Signing time: Sun 29 Mar 2026 09:00:18 +0000
Manifest this update: Sun 29 Mar 2026 09:00:18 +0000
Manifest next update: Mon 30 Mar 2026 09:00:18 +0000
Files and hashes: 1: GJLrnN9jbFArqwGuqjb_171b46A.roa (hash: d5vjSxzfWWDDhURSXFjGweH1v9cRHkRxXTKq0QW8dR4=)
2: NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl (hash: sqoUWBSQa286CVhcXzBiP85xNzPwjwjrths1sMYve7k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d2:97:85:a1:26:d1:dc:ba:32:08:d1:e5:43:f0:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34a63dc86120e87f4cff8c59af3261e6e1292fd9
Validity
Not Before: Mar 29 09:00:18 2026 GMT
Not After : Mar 30 09:00:18 2026 GMT
Subject: CN=f87cc2298edcce61bd37dd489a10fbdac61692dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:43:a5:3f:43:59:0a:b0:ae:c8:d3:fe:5f:b7:
5e:79:78:b4:30:65:07:70:f8:88:fe:86:f2:e0:42:
bd:70:5f:92:25:67:09:89:c5:0a:f4:d8:3d:02:f4:
13:98:d8:9e:79:a8:ce:01:b9:f4:14:0c:46:6a:0d:
bf:d4:a7:2c:5e:12:25:a6:f6:88:14:39:47:87:cc:
c8:4b:34:d6:53:55:94:a0:74:a6:cc:9b:16:c7:5d:
16:ab:c8:1d:96:2d:cc:d1:df:f3:49:ac:10:97:d7:
82:36:db:fc:3a:18:a5:fe:d8:05:e5:a0:90:ea:64:
17:d7:ac:c7:85:26:1e:23:8c:a0:64:e5:63:e7:09:
14:90:e7:27:e0:c2:ab:dc:ed:c4:0b:b4:2d:04:58:
3f:b0:18:9a:c4:44:5c:93:7b:53:87:67:cf:61:07:
23:fd:4f:0c:4f:bc:da:e3:62:3f:df:c6:ea:31:56:
a8:92:69:f2:ef:24:07:05:c8:fc:93:5b:af:73:dd:
22:24:22:28:d5:4e:a0:2d:7e:7a:fb:d3:78:48:73:
7e:59:f3:0d:39:22:17:ea:a3:15:c4:05:e9:85:75:
c2:be:55:f9:08:f3:68:7a:45:58:a6:62:b5:dd:f3:
59:20:3e:de:70:40:44:77:ec:87:ea:2c:d6:64:43:
f7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:7C:C2:29:8E:DC:CE:61:BD:37:DD:48:9A:10:FB:DA:C6:16:92:DC
X509v3 Authority Key Identifier:
keyid:34:A6:3D:C8:61:20:E8:7F:4C:FF:8C:59:AF:32:61:E6:E1:29:2F:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NKY9yGEg6H9M_4xZrzJh5uEpL9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/6b9c7a-9dc7-4040-b29a-fc7a0ea6b0e2/1/NKY9yGEg6H9M_4xZrzJh5uEpL9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:c0:83:f6:bb:bc:47:7b:2a:97:4c:e5:4d:d7:6d:e1:28:41:
8f:0b:46:39:75:68:51:40:aa:f5:42:5c:12:2e:ea:78:f2:77:
7a:13:e7:43:5f:a9:ef:f9:67:87:a5:15:f4:14:bc:f2:22:26:
06:eb:11:24:0b:09:b6:8e:f5:81:60:a3:12:c7:89:7f:78:ff:
0f:d5:d9:54:a1:ff:63:fd:93:d8:a7:a0:6c:4f:49:96:a3:19:
73:89:a7:1a:49:a8:42:8a:7f:26:47:42:26:29:12:cd:a3:8f:
1c:02:6a:3e:4a:b4:de:c6:40:0e:c0:1f:e9:a9:0b:76:98:ac:
a3:cb:e9:e6:5f:ba:d7:7d:86:1b:59:f2:25:08:f3:48:a7:d6:
78:54:52:1f:38:80:2c:87:59:b9:db:76:99:66:52:1f:05:ba:
ea:af:70:af:a6:8a:86:08:6e:ac:67:e0:56:32:d8:0a:f1:a3:
52:ce:c4:d7:90:f1:90:85:dd:4a:15:c8:19:cc:90:58:32:ee:
40:73:6e:05:40:e9:1f:d3:e6:75:8c:73:a4:c4:c7:76:8f:9d:
42:52:f7:49:72:4d:5f:e1:ef:65:47:55:d0:82:f5:3d:07:a2:
36:ce:97:91:96:c3:8d:3f:3e:7b:23:10:fe:5f:01:1a:74:d6:
c1:8d:7f:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ040peFoSbR3LoyCNHlQ/A4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0YTYzZGM4NjEyMGU4N2Y0Y2ZmOGM1OWFmMzI2MWU2ZTEy
OTJmZDkwHhcNMjYwMzI5MDkwMDE4WhcNMjYwMzMwMDkwMDE4WjAzMTEwLwYDVQQD
EyhmODdjYzIyOThlZGNjZTYxYmQzN2RkNDg5YTEwZmJkYWM2MTY5MmRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArUOlP0NZCrCuyNP+X7deeXi0MGUH
cPiI/oby4EK9cF+SJWcJicUK9Ng9AvQTmNieeajOAbn0FAxGag2/1KcsXhIlpvaI
FDlHh8zISzTWU1WUoHSmzJsWx10Wq8gdli3M0d/zSawQl9eCNtv8Ohil/tgF5aCQ
6mQX16zHhSYeI4ygZOVj5wkUkOcn4MKr3O3EC7QtBFg/sBiaxERck3tTh2fPYQcj
/U8MT7za42I/38bqMVaokmny7yQHBcj8k1uvc90iJCIo1U6gLX56+9N4SHN+WfMN
OSIX6qMVxAXphXXCvlX5CPNoekVYpmK13fNZID7ecEBEd+yH6izWZEP3gQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPh8wimO3M5hvTfdSJoQ+9rGFpLcMB8GA1UdIwQY
MBaAFDSmPchhIOh/TP+MWa8yYebhKS/ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEt
ZmM3YTBlYTZiMGUyLzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy82YjljN2EtOWRjNy00MDQwLWIyOWEtZmM3YTBlYTZiMGUy
LzEvTktZOXlHRWc2SDlNXzR4WnJ6Smg1dUVwTDlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIcCD9ru8
R3sql0zlTddt4ShBjwtGOXVoUUCq9UJcEi7qePJ3ehPnQ1+p7/lnh6UV9BS88iIm
BusRJAsJto71gWCjEseJf3j/D9XZVKH/Y/2T2KegbE9JlqMZc4mnGkmoQop/JkdC
JikSzaOPHAJqPkq03sZADsAf6akLdpiso8vp5l+6132GG1nyJQjzSKfWeFRSHziA
LIdZudt2mWZSHwW66q9wr6aKhghurGfgVjLYCvGjUs7E15DxkIXdShXIGcyQWDLu
QHNuBUDpH9PmdYxzpMTHdo+dQlL3SXJNX+HvZUdV0IL1PQeiNs6XkZbDjT8+eyMQ
/l8BGnTWwY1/lA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:56:48 2026 by rpki-client