Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
File: nPReAK4WTmeqE1SFcjfQmt8nyVI.mft (raw, json)
Hash identifier: GRC3rbsA44i4r+oNQf3Lsuqhd1AUI1M3yHvrdo+9/sM=
Subject key identifier: 89:5B:8B:AE:72:C8:9F:91:2E:38:C4:C3:8D:8F:C7:32:C1:07:FE:C4
Authority key identifier: 9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
Certificate issuer: /CN=9cf45e00ae164e67aa1354857237d09adf27c952
Certificate serial: 019D97AAC86775D64C8B114D6899CE45AE8B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
Manifest number: 1399
Signing time: Thu 16 Apr 2026 19:00:45 +0000
Manifest this update: Thu 16 Apr 2026 19:00:45 +0000
Manifest next update: Fri 17 Apr 2026 19:00:45 +0000
Files and hashes: 1: nPReAK4WTmeqE1SFcjfQmt8nyVI.crl (hash: kazCpF1M5H1bOd6PekQKKBqUK3K0nOcbnWAujSIvW6k=)
2: yH0aijgaGO1sOyv5Jg6D95KfZ58.roa (hash: fSdLoz8/XDItScytuLveTLBHygsoLoVUMSB0Zg60LLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:c8:67:75:d6:4c:8b:11:4d:68:99:ce:45:ae:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf45e00ae164e67aa1354857237d09adf27c952
Validity
Not Before: Apr 16 19:00:45 2026 GMT
Not After : Apr 17 19:00:45 2026 GMT
Subject: CN=895b8bae72c89f912e38c4c38d8fc732c107fec4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:0b:6e:3c:ad:fc:3d:c8:27:52:78:8f:3d:17:
97:b0:6e:62:b7:c6:f1:5c:03:53:05:11:64:8b:d8:
45:b5:79:e2:9b:46:b8:6e:83:6f:2d:12:ec:5a:28:
f1:79:92:6d:0c:95:21:08:60:24:da:7f:9f:99:28:
34:c3:00:76:59:76:ab:f2:47:47:1e:7c:da:b0:c2:
1c:c0:65:53:c0:d3:aa:f8:5d:37:8f:81:92:6f:71:
f9:5f:68:3e:a1:14:6f:a3:65:17:f0:a3:7f:8c:1f:
fc:c1:e6:e6:56:60:e3:ab:77:8b:40:1b:ea:1a:f9:
86:66:b4:bc:ff:44:8c:40:a1:a9:fc:f1:78:2a:f8:
1b:4c:da:bc:92:36:2a:ff:59:a1:04:c7:0b:2a:72:
ce:9d:c9:59:4e:8a:6e:1f:17:76:3a:7c:82:ee:91:
2c:62:13:aa:23:fe:db:87:52:85:69:43:de:ad:9b:
7b:be:83:98:24:9e:42:a4:f1:19:98:76:95:7d:aa:
d9:19:ab:91:a6:bf:01:19:cf:0f:c5:16:d7:88:d1:
59:48:28:7c:ed:1b:41:a6:e0:0a:04:39:90:29:78:
b3:9d:58:34:07:73:bb:49:0f:4b:8c:d2:f0:00:96:
9e:0a:c0:be:4c:2d:ba:88:c4:35:e5:82:ef:f3:6c:
75:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:5B:8B:AE:72:C8:9F:91:2E:38:C4:C3:8D:8F:C7:32:C1:07:FE:C4
X509v3 Authority Key Identifier:
keyid:9C:F4:5E:00:AE:16:4E:67:AA:13:54:85:72:37:D0:9A:DF:27:C9:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPReAK4WTmeqE1SFcjfQmt8nyVI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/6fe110-2b31-4fed-a56b-5ad5d29d72dd/1/nPReAK4WTmeqE1SFcjfQmt8nyVI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:57:70:0d:ff:09:3e:74:fa:52:cf:9d:a6:80:62:0b:87:95:
66:83:dc:3e:43:77:f1:6f:45:dc:8e:77:71:97:e5:9f:22:3a:
51:1f:06:aa:d3:8b:28:78:32:82:77:b8:eb:5e:e4:aa:b9:2f:
84:dd:c8:c6:2c:aa:74:24:e3:8d:b7:d8:91:31:a2:6f:cd:f6:
13:6e:92:58:a0:2c:37:33:95:80:ce:a9:d8:a9:50:28:f4:ca:
b1:ed:6a:38:7e:f7:c5:dd:c5:14:cb:91:3f:8c:c7:fd:b6:57:
44:ab:04:a8:e4:70:35:77:34:b9:9a:bf:2c:02:ff:83:06:f9:
a0:cb:e6:3d:bd:4c:99:df:f8:27:be:28:80:17:7e:8f:33:3e:
ae:c9:27:75:21:24:00:d9:30:ed:62:aa:f9:34:4c:7b:7d:b4:
d2:15:e7:3d:12:be:80:b4:74:e9:f3:2e:fc:72:4d:f5:cd:17:
b1:9c:a7:3e:af:6d:af:86:99:34:2c:0d:f3:54:f2:20:97:e5:
a5:57:47:f1:5d:7d:a2:0f:fa:70:04:0c:90:5f:99:4b:62:a1:
c3:d6:a7:be:20:4a:40:c1:72:53:f5:5a:c5:25:12:15:d2:73:
de:07:29:10:83:4b:30:7f:8e:fd:ab:6f:1f:49:61:9b:71:ad:
8f:85:48:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2XqshnddZMixFNaJnORa6LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljZjQ1ZTAwYWUxNjRlNjdhYTEzNTQ4NTcyMzdkMDlhZGYy
N2M5NTIwHhcNMjYwNDE2MTkwMDQ1WhcNMjYwNDE3MTkwMDQ1WjAzMTEwLwYDVQQD
Eyg4OTViOGJhZTcyYzg5ZjkxMmUzOGM0YzM4ZDhmYzczMmMxMDdmZWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5gtuPK38PcgnUniPPReXsG5it8bx
XANTBRFki9hFtXnim0a4boNvLRLsWijxeZJtDJUhCGAk2n+fmSg0wwB2WXar8kdH
HnzasMIcwGVTwNOq+F03j4GSb3H5X2g+oRRvo2UX8KN/jB/8webmVmDjq3eLQBvq
GvmGZrS8/0SMQKGp/PF4KvgbTNq8kjYq/1mhBMcLKnLOnclZTopuHxd2OnyC7pEs
YhOqI/7bh1KFaUPerZt7voOYJJ5CpPEZmHaVfarZGauRpr8BGc8PxRbXiNFZSCh8
7RtBpuAKBDmQKXiznVg0B3O7SQ9LjNLwAJaeCsC+TC26iMQ15YLv82x1DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIlbi65yyJ+RLjjEw42PxzLBB/7EMB8GA1UdIwQY
MBaAFJz0XgCuFk5nqhNUhXI30JrfJ8lSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmIt
NWFkNWQyOWQ3MmRkLzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC82ZmUxMTAtMmIzMS00ZmVkLWE1NmItNWFkNWQyOWQ3MmRk
LzEvblBSZUFLNFdUbWVxRTFTRmNqZlFtdDhueVZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADFdwDf8J
PnT6Us+dpoBiC4eVZoPcPkN38W9F3I53cZflnyI6UR8GqtOLKHgygne4617kqrkv
hN3IxiyqdCTjjbfYkTGib832E26SWKAsNzOVgM6p2KlQKPTKse1qOH73xd3FFMuR
P4zH/bZXRKsEqORwNXc0uZq/LAL/gwb5oMvmPb1Mmd/4J74ogBd+jzM+rskndSEk
ANkw7WKq+TRMe3200hXnPRK+gLR06fMu/HJN9c0XsZynPq9tr4aZNCwN81TyIJfl
pVdH8V19og/6cAQMkF+ZS2Khw9anviBKQMFyU/VaxSUSFdJz3gcpEINLMH+O/atv
H0lhm3Gtj4VIqg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 05:14:36 2026 by rpki-client