Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: EzhhUx74WAT8sryLaqS9rC0P2EADzSilAOqPVAkdRtA=
Subject key identifier: B8:0D:D7:E5:B4:FD:42:C8:7E:0C:83:08:DF:55:F9:EF:37:0F:17:AB
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 019CA9EBB279D3CB7649FC39E9BAE19916DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0D38
Signing time: Sun 01 Mar 2026 15:02:01 +0000
Manifest this update: Sun 01 Mar 2026 15:02:01 +0000
Manifest next update: Mon 02 Mar 2026 15:02:01 +0000
Files and hashes: 1: 7pgJyQEhPGE9dXbf6EcHY0j7uuY.roa (hash: ptYDlgyfUaBAmMsMOgj+f0CY335JokuQ/NfrWH0iFkk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: S30YALE1/Z5tbOVAm1xkGrpK20lgM9DxmA2Ou6HtOoI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:b2:79:d3:cb:76:49:fc:39:e9:ba:e1:99:16:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Mar 1 15:02:01 2026 GMT
Not After : Mar 2 15:02:01 2026 GMT
Subject: CN=b80dd7e5b4fd42c87e0c8308df55f9ef370f17ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:e8:61:39:1e:d7:22:24:e8:11:dd:2e:5b:66:
e3:1b:71:c6:bc:dd:cc:af:19:f1:d4:ce:e6:15:ab:
31:b5:82:cc:10:a2:27:d0:de:ec:0f:94:9c:da:dd:
26:eb:12:f0:0e:88:c6:ee:b7:97:09:93:7c:86:95:
79:73:c0:36:82:25:76:1d:d6:da:6b:67:14:76:0b:
f6:51:58:1b:60:a9:b6:82:b0:e1:00:87:be:fb:fd:
cd:19:a4:6b:7f:f4:80:d6:ac:3b:2e:19:06:92:e4:
88:2d:69:1d:48:ae:fc:66:1a:f1:ae:c2:46:83:be:
93:6e:ca:d2:d0:ff:ce:ac:4c:3c:8a:32:36:16:23:
e4:ce:6e:36:76:96:83:f2:a8:f1:d8:5d:f7:7e:05:
83:d9:6f:8e:f2:2e:81:33:12:85:6c:12:06:a8:5b:
6c:c6:7f:d7:d6:e9:37:58:fe:56:bc:93:c3:1c:4d:
7d:26:8c:d4:32:8a:93:b6:63:4f:f2:6c:b4:32:68:
82:6f:b9:3d:9d:12:ca:b1:2c:10:05:ce:82:2c:c4:
08:51:72:1b:ef:59:4c:a4:cc:c3:79:49:1d:f1:d7:
8f:2e:5d:f8:54:af:02:70:c6:2f:14:71:c1:16:09:
61:38:56:2f:7e:36:18:e5:b2:0c:6e:ba:10:5b:70:
81:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:0D:D7:E5:B4:FD:42:C8:7E:0C:83:08:DF:55:F9:EF:37:0F:17:AB
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:6a:3b:97:7a:ba:89:b5:41:76:5f:d8:49:87:89:62:2b:df:
41:ff:c1:3f:4f:cb:9e:83:88:bc:6b:86:42:46:d9:76:62:4d:
6f:6a:46:a9:ac:eb:f8:23:55:c8:b5:23:98:6b:11:2c:c6:da:
ff:f1:01:9f:75:50:44:f7:85:45:9f:7d:19:41:06:96:9f:07:
ac:0c:86:a6:fc:65:07:59:94:d8:de:7b:2c:7b:90:59:d7:49:
de:8e:20:2d:8e:18:b2:c7:3f:f0:09:7d:bf:57:5c:51:20:70:
25:eb:fa:60:0d:12:22:3a:40:8e:2e:7b:7f:47:c4:7b:2a:81:
99:a8:c1:4b:01:20:cb:ee:d6:17:ba:e5:ef:22:84:9e:53:32:
a6:f9:49:0c:3f:7b:e4:9a:89:b9:f8:74:54:ed:90:22:75:16:
a8:c5:37:04:8c:68:b8:a9:bd:c4:d7:c1:be:87:67:37:19:81:
a9:ac:69:53:b4:bb:5e:4b:b3:fd:2f:36:43:93:b7:d7:a7:72:
42:8a:80:a9:54:62:82:f4:f0:7f:2d:6c:6b:f8:4f:28:39:7e:
0e:e3:c7:a1:10:16:84:47:12:f3:1e:4e:84:d4:b4:3b:05:02:
63:f8:3d:b6:2c:c3:a1:76:34:28:0c:0d:c3:c3:99:17:c7:02:
6e:b5:df:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp67J508t2Sfw56brhmRbfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGQ1NTQwYmRjZDMzMDUyYmMwMGZmZjI2NjMzOGJmM2Nj
ODJhODAwHhcNMjYwMzAxMTUwMjAxWhcNMjYwMzAyMTUwMjAxWjAzMTEwLwYDVQQD
EyhiODBkZDdlNWI0ZmQ0MmM4N2UwYzgzMDhkZjU1ZjllZjM3MGYxN2FiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6+hhOR7XIiToEd0uW2bjG3HGvN3M
rxnx1M7mFasxtYLMEKIn0N7sD5Sc2t0m6xLwDojG7reXCZN8hpV5c8A2giV2Hdba
a2cUdgv2UVgbYKm2grDhAIe++/3NGaRrf/SA1qw7LhkGkuSILWkdSK78ZhrxrsJG
g76TbsrS0P/OrEw8ijI2FiPkzm42dpaD8qjx2F33fgWD2W+O8i6BMxKFbBIGqFts
xn/X1uk3WP5WvJPDHE19JozUMoqTtmNP8my0MmiCb7k9nRLKsSwQBc6CLMQIUXIb
71lMpMzDeUkd8dePLl34VK8CcMYvFHHBFglhOFYvfjYY5bIMbroQW3CBKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgN1+W0/ULIfgyDCN9V+e83DxerMB8GA1UdIwQY
MBaAFJwNVUC9zTMFK8AP/yZjOL88yCqAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUt
MTZmYzlkNDRlYzdkLzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi83MGRkYzQtZjljNC00OThiLTg1ZWUtMTZmYzlkNDRlYzdk
LzEvbkExVlFMM05Nd1Vyd0FfX0ptTTR2enpJS29BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATGo7l3q6
ibVBdl/YSYeJYivfQf/BP0/LnoOIvGuGQkbZdmJNb2pGqazr+CNVyLUjmGsRLMba
//EBn3VQRPeFRZ99GUEGlp8HrAyGpvxlB1mU2N57LHuQWddJ3o4gLY4Yssc/8Al9
v1dcUSBwJev6YA0SIjpAji57f0fEeyqBmajBSwEgy+7WF7rl7yKEnlMypvlJDD97
5JqJufh0VO2QInUWqMU3BIxouKm9xNfBvodnNxmBqaxpU7S7Xkuz/S82Q5O316dy
QoqAqVRigvTwfy1sa/hPKDl+DuPHoRAWhEcS8x5OhNS0OwUCY/g9tizDoXY0KAwN
w8OZF8cCbrXf6g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:45:04 2026 by rpki-client