Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
File: nAN1ranF4BAN22M7Kht0fhnC7Fs.mft (raw, json)
Hash identifier: KyKz7PJV6HFH2h7KcUWAMtYG8pVC1YuRNvdIZuZSDAs=
Subject key identifier: 25:61:83:F0:6A:A1:CD:AB:17:8C:A4:F1:1A:44:00:B0:E5:03:6E:3E
Authority key identifier: 9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
Certificate issuer: /CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Certificate serial: 019CAAC708580607BA3BFE0E7CE3CB06CF0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
Manifest number: 070B
Signing time: Sun 01 Mar 2026 19:01:36 +0000
Manifest this update: Sun 01 Mar 2026 19:01:36 +0000
Manifest next update: Mon 02 Mar 2026 19:01:36 +0000
Files and hashes: 1: fEeplWw_YpRC4Ay1QIQCqiNzEng.roa (hash: Twh3oQrfCjhr2qTmHSOUea5jfVO2MWIW03LajOLIrEA=)
2: nAN1ranF4BAN22M7Kht0fhnC7Fs.crl (hash: BemDjLMiQSfqq2Y2xSfHP+IZYYAokgvyppAMfbxg4MY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 19:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c7:08:58:06:07:ba:3b:fe:0e:7c:e3:cb:06:cf:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0375ada9c5e0100ddb633b2a1b747e19c2ec5b
Validity
Not Before: Mar 1 19:01:36 2026 GMT
Not After : Mar 2 19:01:36 2026 GMT
Subject: CN=256183f06aa1cdab178ca4f11a4400b0e5036e3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d0:e6:0a:1d:36:22:36:11:10:c2:b2:a5:a1:
b7:ae:2c:0c:32:5b:b3:67:ba:79:e5:89:6a:39:76:
00:78:01:b9:36:9b:5b:c5:00:0a:f5:da:fc:26:c5:
65:92:d8:38:33:c4:9b:28:b9:f4:41:90:7f:48:8d:
eb:66:94:13:f2:35:d9:d0:9b:fd:f8:f1:6a:67:2a:
2d:1f:32:77:03:42:0b:62:e9:a1:54:46:7c:d6:3a:
6c:77:f5:eb:53:1d:ad:84:7d:45:00:14:1e:aa:02:
1c:c9:c1:63:0d:c4:f8:aa:40:c3:66:54:c0:ec:1a:
b2:be:1e:f4:35:6e:05:b5:96:3c:2a:6c:14:f1:3d:
89:03:40:a7:07:1b:de:5e:5a:28:cc:4c:5f:e3:3b:
53:7c:c2:4f:58:45:35:aa:60:a3:75:88:e2:93:10:
e7:d8:3c:49:a3:a9:e9:9b:a6:95:2d:51:00:1a:af:
da:27:5d:9a:72:cc:c8:bc:b8:99:50:de:3c:fe:9a:
4a:fa:d4:62:06:fa:09:f8:8d:24:05:42:27:f6:ca:
b6:44:fb:57:f8:98:01:3b:80:b1:76:b8:cc:29:2e:
89:37:95:74:7e:4d:64:10:44:6e:ce:60:ee:d5:2b:
e8:97:63:e9:fd:30:a6:50:c3:cb:ba:b2:52:66:2b:
0a:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:61:83:F0:6A:A1:CD:AB:17:8C:A4:F1:1A:44:00:B0:E5:03:6E:3E
X509v3 Authority Key Identifier:
keyid:9C:03:75:AD:A9:C5:E0:10:0D:DB:63:3B:2A:1B:74:7E:19:C2:EC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAN1ranF4BAN22M7Kht0fhnC7Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/ee84f7-af2a-46dc-b6c6-1fc89e99a0a1/1/nAN1ranF4BAN22M7Kht0fhnC7Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:d1:a1:3b:59:d6:cb:b1:d9:f3:5c:d5:97:0a:89:ac:04:26:
97:24:ea:9b:a5:cd:5d:e8:b1:e1:ea:f5:11:ce:1e:cc:a6:4b:
76:3b:ca:b4:87:03:9b:6b:a9:bd:72:fd:dd:50:06:29:e1:b2:
32:ab:6d:72:37:82:9a:ba:14:fe:5c:1b:c9:c4:50:1c:d8:87:
85:c7:bb:cb:b3:ba:0d:d9:76:36:2c:df:a9:5c:88:34:e0:1f:
71:df:6e:2a:3b:63:3f:5c:ea:06:a8:37:24:49:a5:fe:22:bf:
72:6d:7d:36:dc:7c:fb:10:e9:9f:56:f9:eb:f2:9c:51:d6:1c:
2c:80:f2:1f:39:44:fb:40:c6:ba:be:76:de:f6:da:31:bc:ad:
d2:4d:00:8e:5f:b7:9f:78:6b:64:77:69:58:45:9f:44:be:af:
e7:38:f8:6f:e2:2e:e7:f0:14:09:d9:c9:a2:99:18:5f:1b:a7:
da:7f:f5:fb:44:ae:e4:40:90:28:93:8c:e2:ab:a8:aa:45:49:
27:26:72:65:64:68:4d:86:2b:a6:1f:23:40:78:c5:1b:dd:ff:
0f:8e:60:62:c3:41:8e:3c:3a:68:32:90:57:47:7c:7e:a9:f6:
61:f8:f5:21:03:62:61:c0:d8:f2:6d:3e:3e:c6:c4:c5:10:bf:
96:60:f0:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqxwhYBge6O/4OfOPLBs8MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMDM3NWFkYTljNWUwMTAwZGRiNjMzYjJhMWI3NDdlMTlj
MmVjNWIwHhcNMjYwMzAxMTkwMTM2WhcNMjYwMzAyMTkwMTM2WjAzMTEwLwYDVQQD
EygyNTYxODNmMDZhYTFjZGFiMTc4Y2E0ZjExYTQ0MDBiMGU1MDM2ZTNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+NDmCh02IjYREMKypaG3riwMMluz
Z7p55YlqOXYAeAG5NptbxQAK9dr8JsVlktg4M8SbKLn0QZB/SI3rZpQT8jXZ0Jv9
+PFqZyotHzJ3A0ILYumhVEZ81jpsd/XrUx2thH1FABQeqgIcycFjDcT4qkDDZlTA
7Bqyvh70NW4FtZY8KmwU8T2JA0CnBxveXloozExf4ztTfMJPWEU1qmCjdYjikxDn
2DxJo6npm6aVLVEAGq/aJ12acszIvLiZUN48/ppK+tRiBvoJ+I0kBUIn9sq2RPtX
+JgBO4CxdrjMKS6JN5V0fk1kEERuzmDu1Svol2Pp/TCmUMPLurJSZisK2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCVhg/Bqoc2rF4yk8RpEALDlA24+MB8GA1UdIwQY
MBaAFJwDda2pxeAQDdtjOyobdH4ZwuxbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYt
MWZjODllOTlhMGExLzEvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9lZTg0ZjctYWYyYS00NmRjLWI2YzYtMWZjODllOTlhMGEx
LzEvbkFOMXJhbkY0QkFOMjJNN0todDBmaG5DN0ZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAENGhO1nW
y7HZ81zVlwqJrAQmlyTqm6XNXeix4er1Ec4ezKZLdjvKtIcDm2upvXL93VAGKeGy
MqttcjeCmroU/lwbycRQHNiHhce7y7O6Ddl2NizfqVyINOAfcd9uKjtjP1zqBqg3
JEml/iK/cm19Ntx8+xDpn1b56/KcUdYcLIDyHzlE+0DGur523vbaMbyt0k0Ajl+3
n3hrZHdpWEWfRL6v5zj4b+Iu5/AUCdnJopkYXxun2n/1+0Su5ECQKJOM4quoqkVJ
JyZyZWRoTYYrph8jQHjFG93/D45gYsNBjjw6aDKQV0d8fqn2Yfj1IQNiYcDY8m0+
PsbExRC/lmDw9A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:38:16 2026 by rpki-client