Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: 5LgVvedH6ISYhZKuVAnb+SdiztHsqWE9GOGUef1eJ+A=
Subject key identifier: 9E:C6:C7:8C:BE:6D:2B:B5:9D:3A:4E:F5:8C:2F:55:8B:F4:24:71:E4
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019CAAC6493EDE3DB3AEC0DDE8EC641A825F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 1846
Signing time: Sun 01 Mar 2026 19:00:47 +0000
Manifest this update: Sun 01 Mar 2026 19:00:47 +0000
Manifest next update: Mon 02 Mar 2026 19:00:47 +0000
Files and hashes: 1: Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa (hash: 5hCbvviVC6DjaUoU7fXbjYQV9Lo078pPrQ3MKFzmu/U=)
2: UMRm0dtRz3FJANd_M4r6isxg5pc.roa (hash: hL7WSRr8WKYlMsBe+yWHzd7U1Dc511hpxbpyKw8/AI8=)
3: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: dMiaTxPqcfTYnaIyVfMjjMz+IPFEnvUjNZCjhW2m+yA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:49:3e:de:3d:b3:ae:c0:dd:e8:ec:64:1a:82:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Mar 1 19:00:47 2026 GMT
Not After : Mar 2 19:00:47 2026 GMT
Subject: CN=9ec6c78cbe6d2bb59d3a4ef58c2f558bf42471e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:84:cc:90:10:9d:45:56:31:fb:bd:57:a8:2c:
a4:78:c1:42:83:7b:a4:8d:2a:01:0d:0f:59:9a:50:
53:2d:13:e1:05:76:eb:05:8c:61:46:ed:ad:ec:58:
61:fb:bd:9e:93:01:a6:39:ec:88:f7:c2:94:a4:e1:
d6:6b:d1:61:59:5f:8c:0f:3e:c2:f0:1e:7e:ad:cd:
37:77:e1:70:e4:64:d9:d4:3b:0e:09:9e:31:42:55:
7a:ba:1f:e2:05:54:46:e8:57:b8:9e:2e:ca:da:2b:
e1:ac:df:b0:a0:45:b3:33:73:4e:e6:a2:54:8a:82:
86:92:bc:95:65:70:06:44:1c:27:fc:b1:5e:e9:be:
3c:0f:bf:9e:05:53:4c:e2:6b:2a:3e:61:eb:da:1c:
a5:e4:31:91:80:5f:61:6c:26:6e:18:9a:5c:8d:f3:
ab:25:65:68:42:f7:b7:d6:e2:95:4a:73:ea:ce:89:
d1:a3:56:18:f4:fb:e1:42:ae:3c:b2:4f:82:d7:53:
f6:e8:e6:ee:de:0a:d1:d9:b4:26:0e:2a:9e:6c:12:
40:d8:60:63:ec:99:b9:80:dc:68:76:93:e3:70:e6:
93:da:03:c2:2a:48:0d:62:61:6d:78:47:e0:39:3f:
27:a8:4f:a2:e8:80:fa:ea:bd:b3:81:fa:99:fe:1e:
a4:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:C6:C7:8C:BE:6D:2B:B5:9D:3A:4E:F5:8C:2F:55:8B:F4:24:71:E4
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:61:d0:4c:5f:9e:8c:4e:13:b6:37:cb:ea:23:56:26:3d:b7:
f8:dd:10:8e:c4:71:3f:4f:a6:a0:20:81:d9:60:f6:66:79:44:
38:d3:cf:2b:f6:01:91:5e:0c:b0:b0:76:b8:e3:26:7f:d4:4a:
5c:ff:93:95:04:a6:7e:d6:14:b8:fc:d3:20:9f:2f:98:71:ad:
a1:83:56:6d:62:67:42:f2:3b:40:15:78:45:34:3b:bc:e5:2c:
b8:b1:87:25:df:02:7a:30:b9:aa:91:3f:9f:e6:a4:61:47:38:
d7:a7:2b:fd:36:d1:64:16:0d:be:28:29:7b:82:e6:66:46:81:
9f:e2:7a:c6:6e:24:d0:ae:f0:b6:93:54:c6:c3:e5:b6:5b:d9:
7b:53:d5:6c:75:6a:66:9b:08:3f:35:8c:cf:48:74:35:d9:26:
17:8c:61:dc:84:3e:81:7c:92:09:48:90:84:75:d5:83:3f:84:
77:21:c9:1b:5e:35:70:67:e2:53:98:a7:7e:77:61:c7:02:2b:
29:8d:fd:f8:0d:6e:75:62:36:83:66:6e:4e:45:c9:f6:be:58:
bf:8d:d3:fb:6f:21:9d:2c:fb:9e:d1:b5:19:73:0f:46:c3:22:
6d:94:d4:f6:ec:a2:a1:f0:07:dc:de:49:8b:fd:f3:d0:11:ee:
72:21:44:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxkk+3j2zrsDd6OxkGoJfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOWEwYzg0YjMwNzIwZjRkNGNlNGJkYmEwMWRkMDU0NGQw
MjhlY2QwHhcNMjYwMzAxMTkwMDQ3WhcNMjYwMzAyMTkwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZWM2Yzc4Y2JlNmQyYmI1OWQzYTRlZjU4YzJmNTU4YmY0MjQ3MWU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjITMkBCdRVYx+71XqCykeMFCg3uk
jSoBDQ9ZmlBTLRPhBXbrBYxhRu2t7Fhh+72ekwGmOeyI98KUpOHWa9FhWV+MDz7C
8B5+rc03d+Fw5GTZ1DsOCZ4xQlV6uh/iBVRG6Fe4ni7K2ivhrN+woEWzM3NO5qJU
ioKGkryVZXAGRBwn/LFe6b48D7+eBVNM4msqPmHr2hyl5DGRgF9hbCZuGJpcjfOr
JWVoQve31uKVSnPqzonRo1YY9PvhQq48sk+C11P26Obu3grR2bQmDiqebBJA2GBj
7Jm5gNxodpPjcOaT2gPCKkgNYmFteEfgOT8nqE+i6ID66r2zgfqZ/h6kJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7Gx4y+bSu1nTpO9YwvVYv0JHHkMB8GA1UdIwQY
MBaAFJ2aDISzByD01M5L26Ad0FRNAo7NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMt
NTJjYWQ2Njc1ZmM2LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8xZThkNGQtNTNiZi00YWNiLWJjMGMtNTJjYWQ2Njc1ZmM2
LzEvblpvTWhMTUhJUFRVemt2Ym9CM1FWRTBDanMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGHQTF+e
jE4TtjfL6iNWJj23+N0QjsRxP0+moCCB2WD2ZnlEONPPK/YBkV4MsLB2uOMmf9RK
XP+TlQSmftYUuPzTIJ8vmHGtoYNWbWJnQvI7QBV4RTQ7vOUsuLGHJd8CejC5qpE/
n+akYUc416cr/TbRZBYNvigpe4LmZkaBn+J6xm4k0K7wtpNUxsPltlvZe1PVbHVq
ZpsIPzWMz0h0NdkmF4xh3IQ+gXySCUiQhHXVgz+EdyHJG141cGfiU5infndhxwIr
KY39+A1udWI2g2ZuTkXJ9r5Yv43T+28hnSz7ntG1GXMPRsMibZTU9uyiofAH3N5J
i/3z0BHuciFEuA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:32 2026 by rpki-client