Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier: FTwKVZ3wbR7P9k+IviqBLy6LWlrUrt5epW8cz/8LRHI=
Subject key identifier: 3E:2C:F5:57:2E:00:8D:38:3C:B3:6D:96:72:E4:7C:2C:DE:9F:42:BE
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 01A0CAB4AE93E9BB999B151661D2D41D0EBC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number: 1A6D
Signing time: Tue 22 Sep 2026 20:00:33 +0000
Manifest this update: Tue 22 Sep 2026 20:00:33 +0000
Manifest next update: Wed 23 Sep 2026 20:00:33 +0000
Files and hashes: 1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=)
2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: QPrVM5ie1xfwee4rh8z02kgC3IVj8VmevIMeOYNtsYg=)
3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=)
4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:b4:ae:93:e9:bb:99:9b:15:16:61:d2:d4:1d:0e:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Sep 22 20:00:33 2026 GMT
Not After : Sep 23 20:00:33 2026 GMT
Subject: CN=3e2cf5572e008d383cb36d9672e47c2cde9f42be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9f:2f:8c:f6:36:ad:c2:ee:a1:53:e4:d8:ec:
b5:cf:f8:7a:4b:6f:8f:91:ad:2d:3b:ee:a5:12:d1:
60:3e:18:d3:94:b9:95:d0:2a:85:05:89:8d:61:dc:
12:e6:e7:40:f1:f2:82:ac:e8:6a:dc:ec:d5:d5:da:
a7:fc:b1:56:29:07:be:27:cc:34:e9:2a:78:31:28:
fb:b7:98:d9:15:9d:70:8f:aa:1d:dc:67:9e:86:8e:
89:d3:e8:15:34:59:24:c6:55:40:de:d0:22:d6:b8:
be:9f:57:5c:d4:3c:30:78:0d:db:e4:40:38:c2:61:
17:1a:a7:55:c7:82:bb:c1:16:28:64:88:09:80:bb:
e2:92:96:bc:4a:5b:b6:06:8f:bd:c2:ba:2f:ec:7b:
2d:20:f6:e9:cd:ff:de:14:e5:d6:14:b5:77:18:09:
e9:3e:92:1a:6f:f1:94:ad:78:21:6f:a9:91:a2:c3:
3e:c4:28:d2:bb:9b:b5:0f:3e:79:f1:b2:53:43:71:
fa:39:47:f0:c0:d8:7f:9d:bf:6c:9f:22:89:45:09:
38:22:a2:be:30:c8:95:63:94:84:88:5c:33:55:7f:
12:46:fc:b6:18:27:76:86:a8:a4:69:6d:31:96:40:
17:b9:7f:4c:54:c9:75:87:c9:d0:82:ca:0f:e3:15:
95:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:2C:F5:57:2E:00:8D:38:3C:B3:6D:96:72:E4:7C:2C:DE:9F:42:BE
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:ee:d5:72:9d:33:6b:34:e9:48:d5:db:40:8f:01:c4:5c:0b:
f1:16:b1:36:dd:26:1b:c8:22:fc:46:e9:98:0a:0b:44:7c:cb:
38:a6:a6:8a:72:76:bb:c1:df:9d:2c:17:d0:84:80:e8:80:72:
0f:26:bd:c9:25:bf:d5:e6:c8:a8:85:dc:f6:07:f6:a1:ab:2f:
86:9e:b4:ec:8a:95:98:ab:eb:f2:27:aa:e1:d5:cc:c7:33:85:
cc:72:ae:db:f9:57:6c:59:70:14:b4:f9:a3:cf:0d:ce:d7:7f:
e7:32:0d:ea:21:37:5a:81:6e:6e:f7:fd:bb:ac:fb:6b:65:84:
09:e9:5e:6a:39:1d:3b:40:b0:50:55:69:63:73:53:c2:fd:e9:
b9:be:d5:7b:c7:07:f6:23:12:f0:73:dc:d1:89:e0:97:47:07:
30:84:46:71:17:ae:4d:89:6e:b4:4e:37:12:94:c1:2e:be:ac:
99:70:b9:da:3a:24:e1:6a:af:dc:0e:77:8f:16:15:30:43:33:
1d:f7:e9:2b:9e:c6:9f:12:40:83:29:94:8f:9a:c0:c8:d5:37:
3b:bf:7f:78:8f:15:48:b9:0c:5a:12:92:38:9a:1e:22:16:56:
8c:c9:7e:ff:12:96:46:f0:5e:5e:00:48:e9:14:fb:4f:33:df:
2a:a3:94:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKtK6T6buZmxUWYdLUHQ68MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OGFhNmVkNGI2Y2FjNmIzYTUyOTYxYmNmYTIyOWNmZGEw
MDA4MGUwHhcNMjYwOTIyMjAwMDMzWhcNMjYwOTIzMjAwMDMzWjAzMTEwLwYDVQQD
EygzZTJjZjU1NzJlMDA4ZDM4M2NiMzZkOTY3MmU0N2MyY2RlOWY0MmJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw58vjPY2rcLuoVPk2Oy1z/h6S2+P
ka0tO+6lEtFgPhjTlLmV0CqFBYmNYdwS5udA8fKCrOhq3OzV1dqn/LFWKQe+J8w0
6Sp4MSj7t5jZFZ1wj6od3Geeho6J0+gVNFkkxlVA3tAi1ri+n1dc1DwweA3b5EA4
wmEXGqdVx4K7wRYoZIgJgLvikpa8Slu2Bo+9wrov7HstIPbpzf/eFOXWFLV3GAnp
PpIab/GUrXghb6mRosM+xCjSu5u1Dz558bJTQ3H6OUfwwNh/nb9snyKJRQk4IqK+
MMiVY5SEiFwzVX8SRvy2GCd2hqikaW0xlkAXuX9MVMl1h8nQgsoP4xWVNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD4s9VcuAI04PLNtlnLkfCzen0K+MB8GA1UdIwQY
MBaAFDeKpu1LbKxrOlKWG8+iKc/aAAgOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAt
ZjRiOWRhNDgwZWUyLzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8xYmRkYTktNjRlYy00ZmI2LThiNDAtZjRiOWRhNDgwZWUy
LzEvTjRxbTdVdHNyR3M2VXBZYno2SXB6OW9BQ0E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABe7Vcp0z
azTpSNXbQI8BxFwL8RaxNt0mG8gi/EbpmAoLRHzLOKaminJ2u8HfnSwX0ISA6IBy
Dya9ySW/1ebIqIXc9gf2oasvhp607IqVmKvr8ieq4dXMxzOFzHKu2/lXbFlwFLT5
o88Nztd/5zIN6iE3WoFubvf9u6z7a2WECeleajkdO0CwUFVpY3NTwv3pub7Ve8cH
9iMS8HPc0Yngl0cHMIRGcReuTYlutE43EpTBLr6smXC52jok4Wqv3A53jxYVMEMz
HffpK57GnxJAgymUj5rAyNU3O79/eI8VSLkMWhKSOJoeIhZWjMl+/xKWRvBeXgBI
6RT7TzPfKqOUaQ==
-----END CERTIFICATE-----
Generated at Tue Sep 22 22:58:23 2026 by rpki-client