Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
File: ND2aiq7MjjRw4ShmzmdE256WEVA.mft (raw, json)
Hash identifier: hLd/2d0EU/s9H7+Nd2RpLYtko1tGRYB7tFo9oc04A+Q=
Subject key identifier: F5:9A:91:1F:FC:EA:E3:C0:72:EB:CE:BC:E2:F3:B5:23:65:8C:FD:4A
Authority key identifier: 34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
Certificate issuer: /CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Certificate serial: 01A1212F4001C6104540142FC138FF56C5F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
Manifest number: 010F
Signing time: Fri 09 Oct 2026 15:01:47 +0000
Manifest this update: Fri 09 Oct 2026 15:01:47 +0000
Manifest next update: Sat 10 Oct 2026 15:01:47 +0000
Files and hashes: 1: ND2aiq7MjjRw4ShmzmdE256WEVA.crl (hash: vqmSUxqXTYWzVi8Knm6UVCSJ/w9KChUQyfyp2N5/uUE=)
2: k8BbPKe3zDaEG8erTcVGfXUzWz4.roa (hash: FGXIVoVE914VJSU7fecgdSgEJFlK859BoDPJSA3aMsg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:21:2f:40:01:c6:10:45:40:14:2f:c1:38:ff:56:c5:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=343d9a8aaecc8e3470e12866ce6744db9e961150
Validity
Not Before: Oct 9 15:01:47 2026 GMT
Not After : Oct 10 15:01:47 2026 GMT
Subject: CN=f59a911ffceae3c072ebcebce2f3b523658cfd4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:59:e2:67:cb:13:63:66:46:39:37:b6:c3:5c:
f9:d7:7a:b7:7b:36:e7:ab:41:2b:a0:53:94:cb:da:
d9:c2:04:7a:df:a9:be:d8:d9:71:3c:ab:c1:6e:85:
67:54:e1:f5:c2:d0:fc:b3:71:7e:fa:15:94:78:a7:
7c:33:97:81:bf:ab:50:42:85:35:92:da:e5:e9:d8:
3f:d2:ef:e0:ac:0a:5d:a0:77:97:0d:08:f2:b3:63:
21:58:cd:6d:82:45:b3:28:cc:3c:d8:1e:39:81:9d:
ef:0c:d5:f8:d1:87:e2:f2:47:f5:2d:a4:f3:17:e3:
90:13:af:cb:39:5a:53:e5:9a:4c:8d:0f:9e:1e:10:
dd:e3:b2:6b:0b:c4:03:09:80:f2:15:a1:36:7b:15:
2a:e9:d4:aa:c7:ce:c2:82:72:42:46:ee:e0:cb:eb:
67:57:90:ba:c4:3c:bb:0b:9c:0c:23:48:f9:32:1a:
de:54:01:0a:35:b8:8e:35:f9:46:b6:01:4a:a0:af:
81:34:db:92:5e:c6:ed:95:62:af:33:69:2b:d8:e4:
e9:58:e7:89:a8:43:24:68:5a:a1:e1:55:32:c4:f9:
25:fa:42:18:53:34:e7:ae:8d:86:4b:02:19:cb:af:
c7:70:21:5e:2f:77:54:6a:55:d8:3e:66:d8:c7:b4:
6e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:9A:91:1F:FC:EA:E3:C0:72:EB:CE:BC:E2:F3:B5:23:65:8C:FD:4A
X509v3 Authority Key Identifier:
keyid:34:3D:9A:8A:AE:CC:8E:34:70:E1:28:66:CE:67:44:DB:9E:96:11:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ND2aiq7MjjRw4ShmzmdE256WEVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/864f4f-a513-443b-8e0f-16e308162644/1/ND2aiq7MjjRw4ShmzmdE256WEVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:0c:e4:27:29:81:7f:92:91:00:58:cb:0f:a6:cf:be:c2:35:
a7:28:90:73:99:77:49:14:25:7f:a8:c1:44:35:12:13:8a:45:
df:20:14:84:f5:05:ac:fe:f6:62:2b:10:69:b5:fc:19:16:bf:
d6:ef:08:af:f3:27:c2:f8:17:3a:10:de:d4:cb:79:7b:e3:67:
3c:98:3f:23:cb:6d:a0:63:39:a7:f2:35:53:34:b6:96:d6:85:
37:76:44:1d:e5:38:02:51:76:c3:ae:43:07:a4:b7:74:71:90:
ed:7a:1b:21:e2:53:6d:9b:ba:71:79:d6:10:21:9d:89:d2:74:
a1:94:e4:61:07:7c:09:0f:a6:4d:04:7b:44:b3:c9:b5:07:4d:
49:0e:79:33:70:78:3c:eb:fc:c9:4e:6e:48:e0:02:5e:91:00:
18:4e:e2:e6:24:25:79:3b:a6:fb:e9:88:5f:a3:b7:3b:84:5c:
ad:a9:0e:e0:f3:89:7d:44:8f:77:07:e5:6e:47:c6:26:a9:8a:
0d:92:a6:31:87:02:8f:04:b1:41:3a:7a:5b:ac:d7:b7:67:31:
01:f3:7a:81:76:86:53:99:7b:4a:bc:a6:b0:bd:95:44:c4:7b:
fa:89:54:71:28:1f:b3:64:aa:3f:fd:88:d1:30:a1:b9:d9:14:
3e:b8:22:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEhL0ABxhBFQBQvwTj/VsXyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0M2Q5YThhYWVjYzhlMzQ3MGUxMjg2NmNlNjc0NGRiOWU5
NjExNTAwHhcNMjYxMDA5MTUwMTQ3WhcNMjYxMDEwMTUwMTQ3WjAzMTEwLwYDVQQD
EyhmNTlhOTExZmZjZWFlM2MwNzJlYmNlYmNlMmYzYjUyMzY1OGNmZDRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz1niZ8sTY2ZGOTe2w1z513q3ezbn
q0EroFOUy9rZwgR636m+2NlxPKvBboVnVOH1wtD8s3F++hWUeKd8M5eBv6tQQoU1
ktrl6dg/0u/grApdoHeXDQjys2MhWM1tgkWzKMw82B45gZ3vDNX40Yfi8kf1LaTz
F+OQE6/LOVpT5ZpMjQ+eHhDd47JrC8QDCYDyFaE2exUq6dSqx87CgnJCRu7gy+tn
V5C6xDy7C5wMI0j5MhreVAEKNbiONflGtgFKoK+BNNuSXsbtlWKvM2kr2OTpWOeJ
qEMkaFqh4VUyxPkl+kIYUzTnro2GSwIZy6/HcCFeL3dUalXYPmbYx7RukQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWakR/86uPAcuvOvOLztSNljP1KMB8GA1UdIwQY
MBaAFDQ9moquzI40cOEoZs5nRNuelhFQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkQyYWlxN01qalJ3NFNobXptZEUyNTZXRVZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMC84NjRmNGYtYTUxMy00NDNiLThlMGYt
MTZlMzA4MTYyNjQ0LzEvTkQyYWlxN01qalJ3NFNobXptZEUyNTZXRVZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMC84NjRmNGYtYTUxMy00NDNiLThlMGYtMTZlMzA4MTYyNjQ0
LzEvTkQyYWlxN01qalJ3NFNobXptZEUyNTZXRVZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQzkJymB
f5KRAFjLD6bPvsI1pyiQc5l3SRQlf6jBRDUSE4pF3yAUhPUFrP72YisQabX8GRa/
1u8Ir/MnwvgXOhDe1Mt5e+NnPJg/I8ttoGM5p/I1UzS2ltaFN3ZEHeU4AlF2w65D
B6S3dHGQ7XobIeJTbZu6cXnWECGdidJ0oZTkYQd8CQ+mTQR7RLPJtQdNSQ55M3B4
POv8yU5uSOACXpEAGE7i5iQleTum++mIX6O3O4RcrakO4POJfUSPdwflbkfGJqmK
DZKmMYcCjwSxQTp6W6zXt2cxAfN6gXaGU5l7SrymsL2VRMR7+olUcSgfs2SqP/2I
0TChudkUPrgi5g==
-----END CERTIFICATE-----
Generated at Fri Oct 9 21:23:36 2026 by rpki-client