Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File: nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier: 46J5McQR9NyItvG56xfXJYQeCjr5zkVNGFAtFMGYC88=
Subject key identifier: 65:69:27:24:15:64:05:B6:25:5D:FE:55:9E:2E:D8:A9:26:A3:F0:8A
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial: 019CABA24D7AA08A750FD5D6E1F4F0C00E55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 23:01:06 +0000
Manifest this update: Sun 01 Mar 2026 23:01:06 +0000
Manifest next update: Mon 02 Mar 2026 23:01:06 +0000
Files and hashes: 1: Om7ZQ-8XCQlgOaJIlxkUZHdp1tc.roa (hash: bjl4aARKpgl6sPBL+R2cds28ZzucnTcBrTeFC8PyXIc=)
2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: E3Rzm+oCHcAlKh8tGx/EsZbAXnva34KIFToE7n2Nzps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:4d:7a:a0:8a:75:0f:d5:d6:e1:f4:f0:c0:0e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Validity
Not Before: Mar 1 23:01:06 2026 GMT
Not After : Mar 2 23:01:06 2026 GMT
Subject: CN=65692724156405b6255dfe559e2ed8a926a3f08a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:91:f2:cd:9e:61:e4:c6:df:13:35:7d:ee:33:
7e:e9:cc:d1:6e:72:35:2e:44:3f:a3:54:6b:3f:ec:
35:63:0c:50:74:80:0d:9a:a6:81:86:45:1e:0d:5e:
f7:bc:e4:72:8c:5e:0e:a2:0e:76:89:45:8f:10:b0:
95:cd:4b:a8:3b:7a:14:d3:0d:ca:c9:8a:80:a4:e4:
51:32:cb:3f:09:a9:34:80:1d:00:f9:13:50:12:4a:
83:42:8a:e3:d2:b5:13:1e:60:6b:20:56:63:05:7c:
44:ac:23:67:f4:c6:ea:c2:61:9b:7f:d0:ab:31:df:
fb:72:b0:a2:92:f5:68:5b:64:3b:c1:b7:91:d3:9b:
8a:0c:07:f4:72:7a:66:29:ae:59:e5:5c:ba:93:09:
bb:dd:7d:0a:43:0a:bd:42:57:72:10:b6:3d:d1:f6:
6c:a5:76:43:35:86:80:6a:fb:b8:42:f9:96:98:72:
43:06:d3:3e:cc:2a:25:44:06:88:39:8b:0c:24:c5:
96:70:8b:8e:8f:15:c2:e0:e1:23:79:de:53:ab:ad:
59:4a:43:21:38:d2:d4:15:e1:20:48:43:d4:ff:be:
74:84:8f:4f:8c:f5:96:35:8b:90:a1:b6:63:40:3a:
a7:58:26:48:5d:5b:75:20:b7:ed:eb:73:b6:e3:4a:
1d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:69:27:24:15:64:05:B6:25:5D:FE:55:9E:2E:D8:A9:26:A3:F0:8A
X509v3 Authority Key Identifier:
keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:58:6d:d3:58:5d:88:f8:64:fd:5c:86:1a:03:f2:54:9c:3d:
84:7f:d3:ff:68:bf:29:e4:30:3c:93:b6:02:cb:6c:44:8d:83:
26:72:b9:5d:28:91:47:8a:e4:86:a0:1c:80:b4:91:ea:f9:e6:
47:6d:59:84:28:84:18:46:18:ae:11:c9:8d:76:93:3b:fe:e4:
9f:be:63:45:7d:a3:0d:58:e3:89:f0:3e:e2:86:78:41:fc:a3:
b1:e7:94:62:5f:bd:f4:b6:9b:39:32:52:38:16:c7:91:e2:4a:
21:ea:48:ec:77:8b:9b:59:c2:fb:4c:fa:16:0f:07:2a:76:30:
30:bf:57:2d:2a:70:a2:ec:db:d8:56:ac:e1:2e:35:e3:eb:21:
c9:cc:fc:82:20:5b:15:a9:7a:56:a7:a9:9e:d9:5d:a5:04:cb:
01:94:b7:43:30:72:92:f4:57:91:4e:52:1b:41:b8:ef:ac:4f:
eb:cb:26:46:4c:b0:a6:bb:33:96:d7:4c:a7:da:3f:21:a8:12:
f8:ae:b4:2a:f9:aa:11:ff:ed:2d:2f:b3:30:c3:e7:83:c8:82:
26:6a:aa:06:6c:0c:2d:d8:73:f6:42:05:1e:4f:16:b1:6b:95:
9f:1f:11:4a:9a:d7:b1:27:11:68:65:aa:37:f4:a5:84:ac:7f:
63:40:16:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrok16oIp1D9XW4fTwwA5VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzIxYWM4MDdhMzI2Zjg3MWJiYWExODQ5NjNjZDYwMmI1
Y2MyZDYwHhcNMjYwMzAxMjMwMTA2WhcNMjYwMzAyMjMwMTA2WjAzMTEwLwYDVQQD
Eyg2NTY5MjcyNDE1NjQwNWI2MjU1ZGZlNTU5ZTJlZDhhOTI2YTNmMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtpHyzZ5h5MbfEzV97jN+6czRbnI1
LkQ/o1RrP+w1YwxQdIANmqaBhkUeDV73vORyjF4Oog52iUWPELCVzUuoO3oU0w3K
yYqApORRMss/Cak0gB0A+RNQEkqDQorj0rUTHmBrIFZjBXxErCNn9MbqwmGbf9Cr
Md/7crCikvVoW2Q7wbeR05uKDAf0cnpmKa5Z5Vy6kwm73X0KQwq9QldyELY90fZs
pXZDNYaAavu4QvmWmHJDBtM+zColRAaIOYsMJMWWcIuOjxXC4OEjed5Tq61ZSkMh
ONLUFeEgSEPU/750hI9PjPWWNYuQobZjQDqnWCZIXVt1ILft63O240odKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGVpJyQVZAW2JV3+VZ4u2Kkmo/CKMB8GA1UdIwQY
MBaAFJxyGsgHoyb4cbuqGEljzWArXMLWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGIt
Mjg2NDcwN2IyYjNmLzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi80NjQyNjAtOGQ3ZS00NTA3LWI0NGItMjg2NDcwN2IyYjNm
LzEvbkhJYXlBZWpKdmh4dTZvWVNXUE5ZQ3Rjd3RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfVht01hd
iPhk/VyGGgPyVJw9hH/T/2i/KeQwPJO2AstsRI2DJnK5XSiRR4rkhqAcgLSR6vnm
R21ZhCiEGEYYrhHJjXaTO/7kn75jRX2jDVjjifA+4oZ4QfyjseeUYl+99LabOTJS
OBbHkeJKIepI7HeLm1nC+0z6Fg8HKnYwML9XLSpwouzb2Fas4S414+shycz8giBb
Fal6VqepntldpQTLAZS3QzBykvRXkU5SG0G476xP68smRkywprszltdMp9o/IagS
+K60KvmqEf/tLS+zMMPng8iCJmqqBmwMLdhz9kIFHk8WsWuVnx8RSprXsScRaGWq
N/SlhKx/Y0AW5g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:36:10 2026 by rpki-client