Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
File: nm0dxsqkHTvv_o0domcaUOf3mjA.mft (raw, json)
Hash identifier: pSJMtacAe3VRk+Ghv+XfW3B5ADP9qocHvlBp1giF6II=
Subject key identifier: 9B:52:9B:E8:4D:50:11:CA:D8:48:3C:A7:45:F5:45:80:87:D2:24:91
Authority key identifier: 9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
Certificate issuer: /CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Certificate serial: 01A0BDD4679EA05D07C212052E7C9B61EF24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
Manifest number: 0288
Signing time: Sun 20 Sep 2026 08:00:08 +0000
Manifest this update: Sun 20 Sep 2026 08:00:08 +0000
Manifest next update: Mon 21 Sep 2026 08:00:08 +0000
Files and hashes: 1: 9GWtob8gDYTaaXzFtY4-R_Ltq60.roa (hash: UfkACGVQICdskEEsRgiioCKceX/ZPk2dcaJodps3dBU=)
2: D7Ftq2g9-nuBkPDLtnTN4UT9JWs.roa (hash: xOgE5eN7Sz3nR1yh7WbORGdrTe/pPL/oJdcf2mc0R+8=)
3: DacPm-YXkZdvUQRrf3Qqh3BeD-Y.asa (hash: CPSOx+UyYinuFDF/QuUrZzIjQpXtSrKBAj6FAYVvMhs=)
4: FxriiADH64pGG1zD3zUikiOKUcE.asa (hash: lkseEofmwz4DDPcfYxtAtq6a4Jle34tF50siz0w+Y6k=)
5: PJ-F3Qyitp5W4P_JmuXEhDwj95A.roa (hash: b6sH2r0w/lWXF9PFk3rc40IsaEaHPz3g/VKzI2NYj4g=)
6: hHJ87o4bLWZr5Obd9ma4VbvzSD0.roa (hash: HHYqHL1PR6NZvqmrvZRC/xJgU4FJLjO/lta48BDUKJI=)
7: jX3fw7eJSzn5u2QXnMF7tzf6_ko.roa (hash: zoYmUBR+VSbWQ2pCs9eEdFC60x/8RjnIrN7CIf5PVaw=)
8: nm0dxsqkHTvv_o0domcaUOf3mjA.crl (hash: /Ea1MCqtez7eznsnyW6bKJBYDbESsiRINIoAE7BTd78=)
9: vAmeNYoQrcHgLfD-RRXBc97W490.roa (hash: 7pJsQLIQRKIePikXbYfq53oCT2QS0NJt51wKKaCurVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:d4:67:9e:a0:5d:07:c2:12:05:2e:7c:9b:61:ef:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6d1dc6caa41d3beffe8d1da2671a50e7f79a30
Validity
Not Before: Sep 20 08:00:08 2026 GMT
Not After : Sep 21 08:00:08 2026 GMT
Subject: CN=9b529be84d5011cad8483ca745f5458087d22491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:37:01:af:b2:e7:bf:fc:7f:2d:8a:e5:ac:81:
26:26:76:c4:f3:3b:c1:f1:a3:62:47:8b:33:3b:78:
25:85:8f:33:96:54:eb:e5:6c:f8:8a:9d:73:13:85:
85:79:0f:81:7a:08:a9:11:ae:cb:e3:e4:88:31:6f:
0f:d2:19:63:7f:17:89:2e:0f:c7:c5:08:5d:7c:04:
42:3e:0a:18:7a:1b:06:0a:34:ed:1f:44:da:09:c7:
d1:70:8a:f3:43:fe:5c:6c:f2:94:ea:e6:57:f8:58:
ce:67:ec:07:79:ff:da:64:bc:f7:49:72:0c:f0:a1:
43:42:8c:15:e6:ca:07:53:3a:61:e4:b8:ae:4c:f5:
10:9d:61:dd:51:64:99:f1:36:07:8e:3b:6f:87:51:
9a:0f:f9:7f:fd:91:42:1f:bc:0b:76:5e:50:64:b9:
f0:ba:2d:46:15:8a:d6:1e:89:1f:7b:7c:03:05:fe:
d4:e0:4c:f3:a2:c9:4a:d2:30:2d:f0:d2:1c:09:1c:
ff:3e:c4:42:00:ff:f3:d1:59:2e:aa:cd:8c:25:7d:
c4:fb:67:5f:2d:d5:57:26:81:0e:6f:a4:2b:0c:be:
0c:c8:28:ca:06:4c:61:2e:67:73:e7:59:e6:94:d9:
81:fb:12:5b:ad:ce:37:b2:e1:2f:3d:82:9d:c0:08:
6a:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:52:9B:E8:4D:50:11:CA:D8:48:3C:A7:45:F5:45:80:87:D2:24:91
X509v3 Authority Key Identifier:
keyid:9E:6D:1D:C6:CA:A4:1D:3B:EF:FE:8D:1D:A2:67:1A:50:E7:F7:9A:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm0dxsqkHTvv_o0domcaUOf3mjA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/1491f9-dc76-4777-b5be-83f9a8d1d4d6/1/nm0dxsqkHTvv_o0domcaUOf3mjA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:11:d9:db:4c:0b:07:0a:36:e3:1c:15:88:fe:d4:67:f1:51:
20:03:de:3e:a0:d1:50:e8:9d:bb:62:ee:fb:83:c3:53:d2:fa:
10:c0:8f:72:64:f9:d4:c7:a3:0d:58:6e:0d:53:9d:a1:20:59:
38:51:c5:f7:79:44:e1:8e:eb:89:f2:ed:98:72:84:44:94:5d:
d5:7c:24:bb:78:09:cd:3b:44:60:98:7b:ce:92:aa:9c:c0:10:
7d:5c:64:e1:5e:a9:94:86:15:d6:e0:f4:11:85:90:b1:24:79:
04:b6:dd:44:a0:30:11:a7:83:49:6a:64:d2:41:46:b5:0b:c3:
2f:30:7b:2d:fb:c0:9b:ed:3d:34:d3:9b:06:9a:51:85:f5:28:
a4:c0:bf:66:a2:c0:f5:5e:60:f2:05:af:96:e6:d4:bc:57:c6:
e2:49:f0:73:ea:1c:17:7e:fe:f6:c8:d3:4c:a4:03:b1:1c:69:
02:48:5d:22:94:d0:39:9d:d7:ce:56:8f:e6:c1:49:4d:8a:50:
87:42:b3:f3:78:02:0d:22:19:0a:b2:8d:21:9a:b8:e3:ef:00:
4c:ea:1d:c6:48:68:53:d5:61:25:89:50:1b:82:b5:79:a7:bf:
b8:bc:d3:3e:05:52:d1:c0:de:22:11:e2:9f:cd:20:d3:c0:74:
12:51:be:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC91GeeoF0HwhIFLnybYe8kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNmQxZGM2Y2FhNDFkM2JlZmZlOGQxZGEyNjcxYTUwZTdm
NzlhMzAwHhcNMjYwOTIwMDgwMDA4WhcNMjYwOTIxMDgwMDA4WjAzMTEwLwYDVQQD
Eyg5YjUyOWJlODRkNTAxMWNhZDg0ODNjYTc0NWY1NDU4MDg3ZDIyNDkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9TcBr7Lnv/x/LYrlrIEmJnbE8zvB
8aNiR4szO3glhY8zllTr5Wz4ip1zE4WFeQ+BegipEa7L4+SIMW8P0hljfxeJLg/H
xQhdfARCPgoYehsGCjTtH0TaCcfRcIrzQ/5cbPKU6uZX+FjOZ+wHef/aZLz3SXIM
8KFDQowV5soHUzph5LiuTPUQnWHdUWSZ8TYHjjtvh1GaD/l//ZFCH7wLdl5QZLnw
ui1GFYrWHokfe3wDBf7U4EzzoslK0jAt8NIcCRz/PsRCAP/z0Vkuqs2MJX3E+2df
LdVXJoEOb6QrDL4MyCjKBkxhLmdz51nmlNmB+xJbrc43suEvPYKdwAhqkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtSm+hNUBHK2Eg8p0X1RYCH0iSRMB8GA1UdIwQY
MBaAFJ5tHcbKpB077/6NHaJnGlDn95owMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUt
ODNmOWE4ZDFkNGQ2LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC8xNDkxZjktZGM3Ni00Nzc3LWI1YmUtODNmOWE4ZDFkNGQ2
LzEvbm0wZHhzcWtIVHZ2X28wZG9tY2FVT2YzbWpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhHZ20wL
Bwo24xwViP7UZ/FRIAPePqDRUOidu2Lu+4PDU9L6EMCPcmT51MejDVhuDVOdoSBZ
OFHF93lE4Y7rifLtmHKERJRd1Xwku3gJzTtEYJh7zpKqnMAQfVxk4V6plIYV1uD0
EYWQsSR5BLbdRKAwEaeDSWpk0kFGtQvDLzB7LfvAm+09NNObBppRhfUopMC/ZqLA
9V5g8gWvlubUvFfG4knwc+ocF37+9sjTTKQDsRxpAkhdIpTQOZ3XzlaP5sFJTYpQ
h0Kz83gCDSIZCrKNIZq44+8ATOodxkhoU9VhJYlQG4K1eae/uLzTPgVS0cDeIhHi
n80g08B0ElG+rA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:43:31 2026 by rpki-client