Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
File: nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft (raw, json)
Hash identifier: KK2it/K83ho5223G/eWZVQvW4s9pAmeWY/S6uV0iuWc=
Subject key identifier: 6F:7A:8E:EB:FC:42:04:2A:96:5C:F6:FB:B1:EA:B5:0D:58:87:3F:DF
Authority key identifier: 9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
Certificate issuer: /CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Certificate serial: 019D98F47ECFCDD0FBB09227BE4A79540CB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
Manifest number: 09BF
Signing time: Fri 17 Apr 2026 01:00:52 +0000
Manifest this update: Fri 17 Apr 2026 01:00:52 +0000
Manifest next update: Sat 18 Apr 2026 01:00:52 +0000
Files and hashes: 1: nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl (hash: A9ZiZFgBpXno+/8JTE+bLmt4PyUl3A1hoC4TDzbYsYE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:7e:cf:cd:d0:fb:b0:92:27:be:4a:79:54:0c:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0554b3a69077cb2629da4807c3e02a561ad94a
Validity
Not Before: Apr 17 01:00:52 2026 GMT
Not After : Apr 18 01:00:52 2026 GMT
Subject: CN=6f7a8eebfc42042a965cf6fbb1eab50d58873fdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:37:2c:21:3e:ff:33:99:66:01:57:d8:39:e6:
7f:ba:21:57:5d:f4:1d:83:0f:49:65:82:1f:3e:15:
75:b5:6e:c7:24:bc:31:69:66:4e:1f:98:bb:c5:2e:
93:35:09:50:85:12:08:f5:36:5c:67:e6:98:2d:3a:
bb:e4:56:b9:ad:5f:78:7c:df:21:ef:c8:32:94:1d:
b9:37:a3:60:59:7b:d9:24:44:29:1f:89:4c:08:eb:
2d:47:d6:70:a7:b0:48:3d:b2:92:b2:b5:3f:f4:72:
29:ec:c3:fb:9c:21:96:03:2e:70:2a:06:46:1d:b2:
29:ac:93:29:89:34:97:cd:1e:34:04:2d:f2:3a:65:
7e:94:26:c4:39:73:b5:03:c3:b4:da:4a:73:77:93:
fc:e5:5e:93:f7:4b:48:64:6c:28:d7:41:3b:96:8e:
c7:97:16:bc:dc:6d:51:97:60:4c:3e:b3:1e:35:18:
5f:58:3c:d8:f6:60:69:ad:25:98:1a:43:36:f8:ca:
3c:4b:27:24:72:30:8a:e3:48:ed:0a:2e:ee:7a:b4:
4f:2e:b0:fb:8f:55:31:86:44:03:a0:8f:4e:23:10:
d8:70:f9:f1:63:2b:47:b4:2c:c5:04:ce:12:6c:40:
8b:ce:38:22:c3:bb:95:cd:89:b4:6c:64:52:99:1b:
97:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:7A:8E:EB:FC:42:04:2A:96:5C:F6:FB:B1:EA:B5:0D:58:87:3F:DF
X509v3 Authority Key Identifier:
keyid:9C:05:54:B3:A6:90:77:CB:26:29:DA:48:07:C3:E0:2A:56:1A:D9:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAVUs6aQd8smKdpIB8PgKlYa2Uo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/5f28b6-6082-4a35-a328-40820c8426b4/1/nAVUs6aQd8smKdpIB8PgKlYa2Uo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:da:86:35:bf:ac:9c:26:c2:e8:ef:c2:f2:39:6f:74:0f:e7:
51:09:81:af:05:6f:19:10:30:60:64:8f:b3:27:c5:58:f2:81:
9e:8d:10:d7:c4:92:14:2f:4f:b8:da:f3:01:ea:a5:1b:c9:0d:
1e:66:a8:4a:07:41:69:40:5a:bf:d3:33:b8:b8:eb:a6:4b:bb:
81:90:1b:ba:13:da:3b:9a:58:3a:3e:dc:27:49:c1:2f:e0:e4:
a2:35:e4:56:b3:dc:bb:a6:28:c0:39:48:eb:2d:be:c4:06:16:
20:6b:5c:7f:75:07:c6:83:c3:5a:71:9f:2f:ae:e4:ab:bf:55:
4d:0e:43:96:cf:0a:d5:16:fb:41:4e:5d:2a:c6:67:78:44:9f:
2f:65:b5:3a:fc:dc:6f:79:97:b6:c5:d1:cb:e5:c0:74:8c:bb:
fa:33:55:78:da:46:bb:77:61:93:6e:a4:a0:0b:fe:e8:27:a8:
77:bf:55:0d:20:ee:37:a5:1b:e0:6c:00:57:1b:12:c4:df:d7:
6b:ee:ca:49:b6:d5:13:58:b8:5f:75:ce:7b:ca:5c:61:cc:f0:
9b:a4:d9:fc:19:2e:d5:7a:19:81:08:33:f5:46:b9:00:73:02:
de:46:2a:3c:bc:47:9f:2d:5c:3d:18:ee:08:a2:40:d1:b3:4e:
5b:65:3d:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2Y9H7PzdD7sJInvkp5VAyzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDU1NGIzYTY5MDc3Y2IyNjI5ZGE0ODA3YzNlMDJhNTYx
YWQ5NGEwHhcNMjYwNDE3MDEwMDUyWhcNMjYwNDE4MDEwMDUyWjAzMTEwLwYDVQQD
Eyg2ZjdhOGVlYmZjNDIwNDJhOTY1Y2Y2ZmJiMWVhYjUwZDU4ODczZmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDcsIT7/M5lmAVfYOeZ/uiFXXfQd
gw9JZYIfPhV1tW7HJLwxaWZOH5i7xS6TNQlQhRII9TZcZ+aYLTq75Fa5rV94fN8h
78gylB25N6NgWXvZJEQpH4lMCOstR9Zwp7BIPbKSsrU/9HIp7MP7nCGWAy5wKgZG
HbIprJMpiTSXzR40BC3yOmV+lCbEOXO1A8O02kpzd5P85V6T90tIZGwo10E7lo7H
lxa83G1Rl2BMPrMeNRhfWDzY9mBprSWYGkM2+Mo8SyckcjCK40jtCi7uerRPLrD7
j1UxhkQDoI9OIxDYcPnxYytHtCzFBM4SbECLzjgiw7uVzYm0bGRSmRuXvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG96juv8QgQqllz2+7HqtQ1Yhz/fMB8GA1UdIwQY
MBaAFJwFVLOmkHfLJinaSAfD4CpWGtlKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgt
NDA4MjBjODQyNmI0LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS81ZjI4YjYtNjA4Mi00YTM1LWEzMjgtNDA4MjBjODQyNmI0
LzEvbkFWVXM2YVFkOHNtS2RwSUI4UGdLbFlhMlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhNqGNb+s
nCbC6O/C8jlvdA/nUQmBrwVvGRAwYGSPsyfFWPKBno0Q18SSFC9PuNrzAeqlG8kN
HmaoSgdBaUBav9MzuLjrpku7gZAbuhPaO5pYOj7cJ0nBL+DkojXkVrPcu6YowDlI
6y2+xAYWIGtcf3UHxoPDWnGfL67kq79VTQ5Dls8K1Rb7QU5dKsZneESfL2W1Ovzc
b3mXtsXRy+XAdIy7+jNVeNpGu3dhk26koAv+6Ceod79VDSDuN6Ub4GwAVxsSxN/X
a+7KSbbVE1i4X3XOe8pcYczwm6TZ/Bku1XoZgQgz9Ua5AHMC3kYqPLxHny1cPRju
CKJA0bNOW2U9Ig==
-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:55 2026 by rpki-client