Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: V0/zKkKSr97n/0Wvt0H9KAWApCWdNwEAyUOhZBESdE4=
Subject key identifier: A8:18:E7:83:4E:7C:C5:9B:3E:B9:F2:29:E4:17:BE:CB:3F:97:A5:7F
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019D3789A4752781E35B9D2392B94840DA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa (hash: ZZQdUJPsVGvVmbO6BIZT7SnJBcEBT1ZftSP8BYy67GI=)
2: c57e1whtl5eogTBCeFXU_KrAjnI.roa (hash: rui/Yx3IAn8AclnySbYIVuFoxnyBxQ2AYt9fq4YiyHI=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: PLfO2aeF7XddRmNq50hF4KoOkwqvDIMXGavnQYFoHxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a4:75:27:81:e3:5b:9d:23:92:b9:48:40:da:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=a818e7834e7cc59b3eb9f229e417becb3f97a57f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:04:20:5e:b4:3b:ad:da:13:e1:96:5d:5d:29:
90:ef:58:0a:4d:0c:39:43:cf:ed:9d:e5:f9:27:65:
02:15:3a:70:3d:02:86:ac:ab:8f:51:e9:c6:3c:bb:
7e:13:4d:e1:21:bc:04:7e:66:01:b1:63:e6:9e:ac:
5c:c8:6f:f9:39:f5:b9:19:7c:34:c9:7f:2d:77:26:
63:74:79:71:e6:77:2e:4b:73:90:0a:b7:d6:8d:0f:
84:a4:69:9d:30:1f:10:5f:8f:ee:9f:c8:a3:c6:db:
dc:85:a8:d6:84:75:d9:33:fb:e8:fb:81:ca:af:51:
d9:40:b4:62:73:3d:0d:b8:c0:18:25:dc:4d:3a:d8:
fd:57:d7:57:1b:f2:af:1b:5c:a6:fb:f0:32:93:52:
85:68:a4:36:6c:c0:94:19:60:08:17:88:72:44:51:
0f:50:4e:9f:75:20:70:2f:9f:06:47:95:d7:d5:c4:
0f:15:21:6d:21:d2:7b:20:4d:99:4b:de:6e:8d:d3:
7c:a8:78:4d:1f:95:aa:fb:eb:c0:36:70:d2:53:0b:
bf:14:b7:b6:cf:73:ce:2d:df:b7:9c:21:8c:31:7c:
94:de:22:24:df:b0:99:72:54:65:c1:e3:16:88:3d:
f8:4b:41:e7:27:9b:cf:68:45:a2:33:09:34:d9:62:
ff:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:18:E7:83:4E:7C:C5:9B:3E:B9:F2:29:E4:17:BE:CB:3F:97:A5:7F
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:0e:a1:cb:31:97:71:1d:26:fa:7c:34:22:74:22:71:c0:14:
a2:90:06:a8:92:c3:9a:70:1d:41:40:d5:32:ae:a1:bd:78:fe:
bb:48:d3:34:99:68:80:44:ab:90:18:17:81:c6:83:56:1d:fe:
d8:2b:be:8f:42:4f:6e:fd:c2:82:09:84:e6:56:86:28:ad:4a:
c0:2e:11:2a:84:1e:56:62:b7:c3:b4:02:e9:c2:68:54:9d:d0:
6f:ac:4d:4f:59:d4:e5:96:e2:ab:22:5d:1d:ae:49:da:5a:80:
b0:86:77:db:14:d8:53:44:41:00:45:49:eb:a5:80:b3:b1:4c:
75:d1:7a:e3:56:49:92:b4:6a:9e:fc:f7:a1:f5:13:5c:4a:b3:
a0:a0:09:dd:24:9a:a6:19:85:f6:a9:2e:f6:c4:6c:a1:5a:4e:
72:10:22:98:99:ba:4e:c3:b1:c6:11:01:52:3a:fc:f1:5f:2b:
c3:a2:d9:8e:04:52:0e:4d:06:e9:c2:33:ff:f3:08:7a:a3:70:
51:8e:24:32:64:6c:fd:07:be:c4:bc:64:bf:b0:96:03:59:f9:
80:73:f7:a0:0a:c9:67:71:95:aa:e2:50:8e:1b:bc:c0:52:0d:
d5:e0:08:9b:9f:01:2d:f9:78:2f:a4:bd:2c:68:96:a9:3e:f3:
03:07:69:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03iaR1J4HjW50jkrlIQNozMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOGExODc2ZmRkYzJiNjM3NDhiNDU3Yjc3MGI3OWE3ZTY2
ZTc5M2MwHhcNMjYwMzI5MDMwMTAwWhcNMjYwMzMwMDMwMTAwWjAzMTEwLwYDVQQD
EyhhODE4ZTc4MzRlN2NjNTliM2ViOWYyMjllNDE3YmVjYjNmOTdhNTdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArgQgXrQ7rdoT4ZZdXSmQ71gKTQw5
Q8/tneX5J2UCFTpwPQKGrKuPUenGPLt+E03hIbwEfmYBsWPmnqxcyG/5OfW5GXw0
yX8tdyZjdHlx5ncuS3OQCrfWjQ+EpGmdMB8QX4/un8ijxtvchajWhHXZM/vo+4HK
r1HZQLRicz0NuMAYJdxNOtj9V9dXG/KvG1ym+/Ayk1KFaKQ2bMCUGWAIF4hyRFEP
UE6fdSBwL58GR5XX1cQPFSFtIdJ7IE2ZS95ujdN8qHhNH5Wq++vANnDSUwu/FLe2
z3POLd+3nCGMMXyU3iIk37CZclRlweMWiD34S0HnJ5vPaEWiMwk02WL/bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKgY54NOfMWbPrnyKeQXvss/l6V/MB8GA1UdIwQY
MBaAFJyKGHb93CtjdItFe3cLeafmbnk8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMt
NzA5ZmJlODRjZGZiLzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy85ZWE2OGYtNzQzZC00N2RhLWI3MWMtNzA5ZmJlODRjZGZi
LzEvbklvWWR2M2NLMk4waTBWN2R3dDVwLVp1ZVR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgw6hyzGX
cR0m+nw0InQiccAUopAGqJLDmnAdQUDVMq6hvXj+u0jTNJlogESrkBgXgcaDVh3+
2Cu+j0JPbv3CggmE5laGKK1KwC4RKoQeVmK3w7QC6cJoVJ3Qb6xNT1nU5ZbiqyJd
Ha5J2lqAsIZ32xTYU0RBAEVJ66WAs7FMddF641ZJkrRqnvz3ofUTXEqzoKAJ3SSa
phmF9qku9sRsoVpOchAimJm6TsOxxhEBUjr88V8rw6LZjgRSDk0G6cIz//MIeqNw
UY4kMmRs/Qe+xLxkv7CWA1n5gHP3oArJZ3GVquJQjhu8wFIN1eAIm58BLfl4L6S9
LGiWqT7zAwdpdQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:18 2026 by rpki-client