Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier: G2/OrKTgefeqbDPmL3Mnuw1iJr9rHt/DDlgui8oei3A=
Subject key identifier: 88:2D:42:FB:B3:C1:A4:C6:16:18:2F:32:3F:89:53:FA:F6:47:D5:41
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial: 019CAC46932B1B74410DA7E6ACEF149FCA76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number: 0CB4
Signing time: Mon 02 Mar 2026 02:00:32 +0000
Manifest this update: Mon 02 Mar 2026 02:00:32 +0000
Manifest next update: Tue 03 Mar 2026 02:00:32 +0000
Files and hashes: 1: 3YrPqOPm2HTyKR3X-5RSXy5Hk4U.roa (hash: 5vGo/rzHCgJgztw1UHKfY47yWsIJL5OxKuVDeP97MLA=)
2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: Nq0rFv4P6gnCkmYYtJXHG0lm3AiW3CuWc9trIj3mAxc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:93:2b:1b:74:41:0d:a7:e6:ac:ef:14:9f:ca:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Validity
Not Before: Mar 2 02:00:32 2026 GMT
Not After : Mar 3 02:00:32 2026 GMT
Subject: CN=882d42fbb3c1a4c616182f323f8953faf647d541
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:34:f5:fa:9e:ad:bc:25:12:d1:17:1f:60:ef:
72:55:0e:8c:aa:8c:6f:a8:bb:7b:d6:be:b2:ea:6e:
32:7b:72:4a:b0:14:b1:64:89:cc:9e:fa:d4:c0:da:
5e:c5:60:c0:7f:e1:7e:2b:89:9e:f5:30:63:36:d5:
39:5d:5d:2e:55:06:b6:08:0b:b0:18:95:c8:9c:28:
e2:49:6e:4c:e5:d3:ff:0f:10:07:7f:4c:c0:ca:af:
0a:cb:0f:36:32:8f:3e:65:99:8b:2e:9c:2a:a6:e5:
f0:c4:cc:71:19:64:6a:3e:6a:8e:a5:6a:53:2d:1e:
33:3f:3c:d9:5c:7b:b9:4b:03:30:32:dd:1e:61:14:
38:83:69:5a:12:69:0f:c8:c7:6e:35:b3:b9:61:d6:
ec:da:67:db:0a:1a:e9:14:9c:fe:50:88:4b:38:a1:
31:95:5c:53:1c:ef:e3:6b:8b:34:bc:b0:59:f8:97:
9a:cc:aa:c9:f9:36:7f:46:37:0d:f8:7e:f7:c9:44:
a6:be:f0:14:9a:bc:f7:6e:84:05:7f:d5:54:cc:77:
a7:47:a6:19:70:e4:6b:9f:12:e5:ad:6a:a6:9f:1c:
3a:7a:af:ee:23:2e:27:45:42:66:71:32:91:56:66:
44:0f:ba:7c:67:b8:c0:b7:2d:e4:51:b8:27:97:8d:
68:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:2D:42:FB:B3:C1:A4:C6:16:18:2F:32:3F:89:53:FA:F6:47:D5:41
X509v3 Authority Key Identifier:
keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:d1:0e:a1:9a:db:20:a6:8b:a9:38:b0:81:8f:e5:0b:5e:
82:a8:47:0b:f4:a3:1c:67:0b:40:c8:ef:da:26:d1:03:70:4a:
00:ff:6f:9e:73:3c:1f:2d:6e:4c:19:3e:5a:c7:5b:03:10:5e:
ce:ec:92:f7:22:bf:78:ad:5c:01:f5:1b:4f:7a:12:28:b7:d2:
f4:ab:6c:e1:32:0c:cb:7c:c0:65:dd:ba:6f:bf:95:c0:9d:3e:
d9:29:bd:59:d1:eb:bc:cd:bb:61:5a:1e:c9:73:95:23:67:68:
ee:98:07:5a:c6:80:d2:71:08:ef:75:4d:ee:7b:23:71:0f:f3:
22:22:81:f5:59:3b:70:0d:49:1b:b3:52:02:cf:6f:6a:40:9d:
c9:d3:f9:6f:ab:20:31:81:1e:0d:c5:e0:8f:c2:15:d5:0b:2c:
8f:85:20:c2:a5:eb:e4:3f:e9:5c:28:15:a3:7f:75:d9:ea:33:
8a:2b:ce:74:64:7c:3e:19:33:ad:f8:6c:0c:4b:eb:47:71:09:
36:33:eb:c2:5f:1c:a3:69:0b:c3:a7:76:b0:72:ad:74:b4:b6:
93:5d:41:6a:b7:6b:36:3c:6e:fd:e1:47:cb:34:31:de:ae:52:
9f:be:48:87:c6:c1:d5:62:b8:2a:c5:62:87:b0:35:0d:63:01:
7b:86:86:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRpMrG3RBDafmrO8Un8p2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOGEzYzlhOWVkZjY0NDczNWE5NGViMDlmMDFjYWIzOTg1
NWQyNzgwHhcNMjYwMzAyMDIwMDMyWhcNMjYwMzAzMDIwMDMyWjAzMTEwLwYDVQQD
Eyg4ODJkNDJmYmIzYzFhNGM2MTYxODJmMzIzZjg5NTNmYWY2NDdkNTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDT1+p6tvCUS0RcfYO9yVQ6Mqoxv
qLt71r6y6m4ye3JKsBSxZInMnvrUwNpexWDAf+F+K4me9TBjNtU5XV0uVQa2CAuw
GJXInCjiSW5M5dP/DxAHf0zAyq8Kyw82Mo8+ZZmLLpwqpuXwxMxxGWRqPmqOpWpT
LR4zPzzZXHu5SwMwMt0eYRQ4g2laEmkPyMduNbO5Ydbs2mfbChrpFJz+UIhLOKEx
lVxTHO/ja4s0vLBZ+JeazKrJ+TZ/RjcN+H73yUSmvvAUmrz3boQFf9VUzHenR6YZ
cORrnxLlrWqmnxw6eq/uIy4nRUJmcTKRVmZED7p8Z7jAty3kUbgnl41oSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIgtQvuzwaTGFhgvMj+JU/r2R9VBMB8GA1UdIwQY
MBaAFJ+KPJqe32RHNalOsJ8ByrOYVdJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjIt
NjM2ZDZmYzAwNDhmLzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9hMTdiOTMtY2M4OS00ZDA4LWE1YjItNjM2ZDZmYzAwNDhm
LzEvbjRvOG1wN2ZaRWMxcVU2d253SEtzNWhWMG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMXRDqGa
2yCmi6k4sIGP5QtegqhHC/SjHGcLQMjv2ibRA3BKAP9vnnM8Hy1uTBk+WsdbAxBe
zuyS9yK/eK1cAfUbT3oSKLfS9Kts4TIMy3zAZd26b7+VwJ0+2Sm9WdHrvM27YVoe
yXOVI2do7pgHWsaA0nEI73VN7nsjcQ/zIiKB9Vk7cA1JG7NSAs9vakCdydP5b6sg
MYEeDcXgj8IV1Qssj4UgwqXr5D/pXCgVo3912eoziivOdGR8PhkzrfhsDEvrR3EJ
NjPrwl8co2kLw6d2sHKtdLS2k11BardrNjxu/eFHyzQx3q5Sn75Ih8bB1WK4KsVi
h7A1DWMBe4aGmQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:32 2026 by rpki-client