Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
File: nhUzxHAsLMtang6HqyetVrFfLHY.mft (raw, json)
Hash identifier: svdobkhmCRzI+j8q2TlX7fPaZ9aY5ZdItIkfBNBJLSw=
Subject key identifier: 0E:3D:59:03:16:D5:B8:93:C7:04:8D:3A:80:B6:C5:1F:BC:72:94:22
Authority key identifier: 9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
Certificate issuer: /CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Certificate serial: 019CAE6C5F3B4A29832FD6467C1D0DBA04C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
Manifest number: 0F1C
Signing time: Mon 02 Mar 2026 12:01:03 +0000
Manifest this update: Mon 02 Mar 2026 12:01:03 +0000
Manifest next update: Tue 03 Mar 2026 12:01:03 +0000
Files and hashes: 1: dMfKUJHSuWnseGbTE-GdRIw07W4.roa (hash: y2qy1o8S5/XUqYwrCQSN4S8pMHsU2FgYcmzRMM/ZUGk=)
2: nhUzxHAsLMtang6HqyetVrFfLHY.crl (hash: Guj5CyAkO3ATe7BDdoy4Cv5lc/G8ACH3miI+v9s/pVU=)
3: xVq8myRToHEzG4XtrfoYm_ql4tU.roa (hash: qD4DTGCUvT4xhgt8cQf/IqQZzJ2Q7J0szRvgCLAXSVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:5f:3b:4a:29:83:2f:d6:46:7c:1d:0d:ba:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e1533c4702c2ccb5a9e0e87ab27ad56b15f2c76
Validity
Not Before: Mar 2 12:01:03 2026 GMT
Not After : Mar 3 12:01:03 2026 GMT
Subject: CN=0e3d590316d5b893c7048d3a80b6c51fbc729422
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a9:47:c2:77:aa:a7:33:b1:f8:13:3d:59:63:
ac:04:a0:dc:e9:91:ff:0b:74:44:13:43:f5:d3:35:
84:a2:57:8d:ef:bc:f3:93:67:33:d9:b9:08:7b:38:
f4:d5:5c:7e:9d:ec:68:ea:78:6e:84:e4:fd:15:3c:
8c:19:8d:75:3d:51:0b:6a:0c:2f:e5:a5:f2:93:e6:
f0:3d:d9:eb:02:83:de:dd:4a:40:01:3f:5c:9d:c3:
a6:68:6f:51:d2:eb:36:3e:9b:24:14:7b:1c:99:b8:
48:75:ec:a3:f6:ae:f0:12:3c:b9:59:ad:be:a7:0b:
9a:c2:66:a8:e7:db:7c:86:42:da:da:4d:1d:fe:61:
a6:77:59:93:29:2e:ee:49:16:cc:1f:25:79:b5:e3:
f2:42:12:a9:12:a7:83:6d:dd:d4:a0:26:21:82:3e:
de:05:62:a4:ee:36:97:38:db:f5:b1:20:d0:4c:22:
43:49:5d:36:27:43:38:f8:e2:bb:c4:ed:0a:61:1a:
a6:fd:9c:0e:51:67:cf:43:f1:79:fc:12:db:b2:84:
1d:80:02:9e:4e:0e:72:52:eb:d0:de:f7:8e:c5:e9:
2a:47:36:fa:fe:39:5d:de:01:2a:69:a5:ef:0f:71:
87:47:b9:c7:09:39:8f:18:5b:6a:9e:9f:35:09:b3:
9f:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:3D:59:03:16:D5:B8:93:C7:04:8D:3A:80:B6:C5:1F:BC:72:94:22
X509v3 Authority Key Identifier:
keyid:9E:15:33:C4:70:2C:2C:CB:5A:9E:0E:87:AB:27:AD:56:B1:5F:2C:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nhUzxHAsLMtang6HqyetVrFfLHY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/2688b6-da70-4abd-8f59-1a831b599c18/1/nhUzxHAsLMtang6HqyetVrFfLHY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:04:5f:c4:40:1e:8c:15:a5:78:8e:5c:eb:81:db:38:42:93:
ad:2d:87:6a:62:79:08:93:ba:b9:e9:cd:02:62:ed:5f:6d:91:
ef:be:b2:49:05:4a:76:a3:c2:d9:f1:1b:c5:f8:7c:37:eb:0c:
64:94:04:31:c9:ff:b3:36:3f:1c:87:5b:4b:82:71:61:ca:95:
ab:36:79:8e:f1:44:b8:f8:af:d0:5b:38:60:db:37:21:71:58:
29:66:b2:9d:5c:b8:60:38:35:6f:5b:f7:62:7b:84:bb:7f:53:
4d:58:79:89:7c:c2:3d:9f:92:e8:ee:07:67:9e:ba:4f:f8:14:
4e:12:31:93:da:f0:2b:77:39:77:97:05:e2:35:1a:7b:9d:a5:
ec:ad:24:3b:af:6c:ed:b5:dc:bd:c7:cd:41:8e:2e:db:20:2d:
8f:52:c8:d6:d5:59:25:59:43:8d:2c:d6:ce:3f:ed:48:c5:a5:
6e:bf:f3:d1:0d:88:a5:17:39:4f:7f:e7:3f:7e:ea:fa:c6:24:
74:b2:7c:0e:42:45:78:9b:0a:ec:73:b9:a3:a6:81:73:83:a6:
99:cf:57:87:2f:b9:41:bc:60:57:8d:df:52:fb:07:a3:3a:3a:
ee:bf:4c:14:90:c2:f6:44:9d:09:02:49:41:62:92:42:e1:68:
24:61:7c:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyubF87SimDL9ZGfB0NugTAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllMTUzM2M0NzAyYzJjY2I1YTllMGU4N2FiMjdhZDU2YjE1
ZjJjNzYwHhcNMjYwMzAyMTIwMTAzWhcNMjYwMzAzMTIwMTAzWjAzMTEwLwYDVQQD
EygwZTNkNTkwMzE2ZDViODkzYzcwNDhkM2E4MGI2YzUxZmJjNzI5NDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtalHwneqpzOx+BM9WWOsBKDc6ZH/
C3REE0P10zWEoleN77zzk2cz2bkIezj01Vx+nexo6nhuhOT9FTyMGY11PVELagwv
5aXyk+bwPdnrAoPe3UpAAT9cncOmaG9R0us2PpskFHscmbhIdeyj9q7wEjy5Wa2+
pwuawmao59t8hkLa2k0d/mGmd1mTKS7uSRbMHyV5tePyQhKpEqeDbd3UoCYhgj7e
BWKk7jaXONv1sSDQTCJDSV02J0M4+OK7xO0KYRqm/ZwOUWfPQ/F5/BLbsoQdgAKe
Tg5yUuvQ3veOxekqRzb6/jld3gEqaaXvD3GHR7nHCTmPGFtqnp81CbOfVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA49WQMW1biTxwSNOoC2xR+8cpQiMB8GA1UdIwQY
MBaAFJ4VM8RwLCzLWp4Oh6snrVaxXyx2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTkt
MWE4MzFiNTk5YzE4LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS8yNjg4YjYtZGE3MC00YWJkLThmNTktMWE4MzFiNTk5YzE4
LzEvbmhVenhIQXNMTXRhbmc2SHF5ZXRWckZmTEhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWQRfxEAe
jBWleI5c64HbOEKTrS2HamJ5CJO6uenNAmLtX22R776ySQVKdqPC2fEbxfh8N+sM
ZJQEMcn/szY/HIdbS4JxYcqVqzZ5jvFEuPiv0Fs4YNs3IXFYKWaynVy4YDg1b1v3
YnuEu39TTVh5iXzCPZ+S6O4HZ566T/gUThIxk9rwK3c5d5cF4jUae52l7K0kO69s
7bXcvcfNQY4u2yAtj1LI1tVZJVlDjSzWzj/tSMWlbr/z0Q2IpRc5T3/nP37q+sYk
dLJ8DkJFeJsK7HO5o6aBc4Ommc9Xhy+5QbxgV43fUvsHozo67r9MFJDC9kSdCQJJ
QWKSQuFoJGF8BA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:20:10 2026 by rpki-client