Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
File: ncNmr2zgsan2AXOxS1_d1-C5YwY.mft (raw, json)
Hash identifier: cJu8XTAgRsmLDf65qCa/RJu9diSAcOnS9zMG5fXOPQI=
Subject key identifier: 3B:3D:B1:75:22:6D:D6:78:F5:EE:20:AF:BF:50:C9:2A:D6:A3:E6:A4
Authority key identifier: 9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
Certificate issuer: /CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Certificate serial: 019CAC4711408676EFFB90C14619A92B4824
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
Manifest number: 1804
Signing time: Mon 02 Mar 2026 02:01:04 +0000
Manifest this update: Mon 02 Mar 2026 02:01:04 +0000
Manifest next update: Tue 03 Mar 2026 02:01:04 +0000
Files and hashes: 1: Kx2A4QHC9gQsEflStPjFwVjhvSA.roa (hash: FMGSXjNyUjkWfrbaK6kOA/2OaW9XrZEgBYS29pUlyug=)
2: ncNmr2zgsan2AXOxS1_d1-C5YwY.crl (hash: nfdgQi/QNtgkolt5AqUW9m5IeujDg55hOaNcJquHupc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:11:40:86:76:ef:fb:90:c1:46:19:a9:2b:48:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc366af6ce0b1a9f60173b14b5fddd7e0b96306
Validity
Not Before: Mar 2 02:01:04 2026 GMT
Not After : Mar 3 02:01:04 2026 GMT
Subject: CN=3b3db175226dd678f5ee20afbf50c92ad6a3e6a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:8a:8d:59:f1:cb:f4:b2:08:72:61:ea:e9:46:
48:73:fd:76:d3:80:c0:c2:db:f9:f6:fb:3e:e2:27:
f0:26:6a:b8:36:ea:39:f6:68:77:56:f4:ce:91:b5:
90:3e:2f:02:32:f6:24:29:5b:63:e7:c3:ea:55:5f:
35:88:a0:eb:64:3c:99:ee:7b:50:43:7b:45:f1:fd:
cb:5c:06:c2:1c:e6:e4:06:6c:07:41:c4:53:84:7a:
85:97:38:cc:37:cf:de:19:2e:45:ff:88:84:47:a6:
46:91:9e:43:62:f5:32:31:a3:65:bf:77:41:98:96:
56:78:0e:01:27:37:40:39:80:76:83:49:ed:a2:c2:
43:24:84:8e:24:4a:49:09:ba:c5:9f:1d:e9:f5:2d:
16:6e:3b:99:9c:f6:cb:e1:f2:a2:85:f9:2a:64:a0:
d1:99:f1:2d:ef:d0:7b:e8:1d:48:0d:1a:ed:bc:b9:
2c:5c:68:df:b7:dd:d5:51:7d:72:c4:be:a4:b8:00:
7d:ed:7f:54:07:12:e9:c8:d8:74:db:87:32:2a:81:
56:62:8b:c4:5a:db:c0:6e:4f:64:c0:12:9f:1a:0a:
43:9f:d4:a2:34:bd:0e:a6:3e:78:8d:ed:4a:b5:fc:
9b:07:8d:15:94:52:87:1c:86:24:29:c2:c9:22:0b:
c3:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:3D:B1:75:22:6D:D6:78:F5:EE:20:AF:BF:50:C9:2A:D6:A3:E6:A4
X509v3 Authority Key Identifier:
keyid:9D:C3:66:AF:6C:E0:B1:A9:F6:01:73:B1:4B:5F:DD:D7:E0:B9:63:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncNmr2zgsan2AXOxS1_d1-C5YwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/788fcf-60f3-426f-9858-82f476b5cfdb/1/ncNmr2zgsan2AXOxS1_d1-C5YwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:19:ad:dc:d7:d4:1d:06:3b:4d:14:03:d4:d6:2e:0f:43:22:
c2:74:fc:a7:88:b2:2b:5c:6f:1b:60:75:e4:92:8c:45:2b:03:
96:39:c8:5d:22:a1:78:b5:54:c8:2c:a8:ca:df:f6:9a:c5:bd:
9e:d5:0b:f5:45:2a:07:7f:8c:de:c5:d5:ce:e2:88:4f:ed:ec:
9d:d3:c7:85:66:59:ee:cc:9b:41:43:b0:8b:77:33:7b:37:5e:
0a:be:35:00:6e:9b:c1:42:25:6a:f0:20:24:52:ca:f8:d3:91:
a9:55:53:de:97:a6:e6:96:f1:ee:bd:41:35:19:59:d3:7c:0c:
3d:9a:de:db:4a:c8:1e:91:68:2c:fb:90:6c:99:dc:eb:7d:e7:
23:b5:a7:98:ad:2c:d2:11:4f:f4:dc:7d:9b:00:01:bf:f7:f3:
7a:4c:38:40:c6:37:a1:63:05:f9:93:c1:1c:20:08:5b:b8:e8:
12:85:e7:ad:31:7c:23:be:67:9b:47:33:3b:73:34:a2:49:62:
1b:e7:8b:61:0f:21:05:fe:02:fa:f3:c8:f8:78:67:8e:6a:39:
e3:5d:cf:b2:c5:87:77:4a:ca:83:67:f1:d1:fd:7c:f8:37:51:
c9:ed:bd:69:e5:46:80:41:d0:c3:b3:2c:54:88:98:8c:50:f8:
43:82:05:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRxFAhnbv+5DBRhmpK0gkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzM2NmFmNmNlMGIxYTlmNjAxNzNiMTRiNWZkZGQ3ZTBi
OTYzMDYwHhcNMjYwMzAyMDIwMTA0WhcNMjYwMzAzMDIwMTA0WjAzMTEwLwYDVQQD
EygzYjNkYjE3NTIyNmRkNjc4ZjVlZTIwYWZiZjUwYzkyYWQ2YTNlNmE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIqNWfHL9LIIcmHq6UZIc/1204DA
wtv59vs+4ifwJmq4Nuo59mh3VvTOkbWQPi8CMvYkKVtj58PqVV81iKDrZDyZ7ntQ
Q3tF8f3LXAbCHObkBmwHQcRThHqFlzjMN8/eGS5F/4iER6ZGkZ5DYvUyMaNlv3dB
mJZWeA4BJzdAOYB2g0ntosJDJISOJEpJCbrFnx3p9S0WbjuZnPbL4fKihfkqZKDR
mfEt79B76B1IDRrtvLksXGjft93VUX1yxL6kuAB97X9UBxLpyNh024cyKoFWYovE
WtvAbk9kwBKfGgpDn9SiNL0Opj54je1KtfybB40VlFKHHIYkKcLJIgvDcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDs9sXUibdZ49e4gr79QySrWo+akMB8GA1UdIwQY
MBaAFJ3DZq9s4LGp9gFzsUtf3dfguWMGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgt
ODJmNDc2YjVjZmRiLzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC83ODhmY2YtNjBmMy00MjZmLTk4NTgtODJmNDc2YjVjZmRi
LzEvbmNObXIyemdzYW4yQVhPeFMxX2QxLUM1WXdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAohmt3NfU
HQY7TRQD1NYuD0MiwnT8p4iyK1xvG2B15JKMRSsDljnIXSKheLVUyCyoyt/2msW9
ntUL9UUqB3+M3sXVzuKIT+3sndPHhWZZ7sybQUOwi3czezdeCr41AG6bwUIlavAg
JFLK+NORqVVT3pem5pbx7r1BNRlZ03wMPZre20rIHpFoLPuQbJnc633nI7WnmK0s
0hFP9Nx9mwABv/fzekw4QMY3oWMF+ZPBHCAIW7joEoXnrTF8I75nm0czO3M0okli
G+eLYQ8hBf4C+vPI+Hhnjmo5413PssWHd0rKg2fx0f18+DdRye29aeVGgEHQw7Ms
VIiYjFD4Q4IFng==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:45:10 2026 by rpki-client