Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
File: NADZSQmD598yx88Xyh6tTwX3lkY.mft (raw, json)
Hash identifier: OZ/F39ENTexrM4C+zBEy0h7IvDq5+hB92Iws3bt+ePY=
Subject key identifier: D2:A4:BC:0E:AF:19:D5:C5:F3:FD:20:43:A9:F7:17:45:0C:82:67:00
Authority key identifier: 34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
Certificate issuer: /CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Certificate serial: 01A117F48525D564E790524F051F5E8153C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
Manifest number: 0C03
Signing time: Wed 07 Oct 2026 20:01:03 +0000
Manifest this update: Wed 07 Oct 2026 20:01:03 +0000
Manifest next update: Thu 08 Oct 2026 20:01:03 +0000
Files and hashes: 1: NADZSQmD598yx88Xyh6tTwX3lkY.crl (hash: e9mpQ8sABhiq5V4yC82nQVU8SBE4lvKxFvUbNuMSR6k=)
2: uaapElHUAVaZCvTQWY96RRO1BmE.roa (hash: YoDD+GqIi7yXJNJvp1uQ/eykR6jqDrzcDx3qks2vpKk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 13:17:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:17:f4:85:25:d5:64:e7:90:52:4f:05:1f:5e:81:53:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3400d9490983e7df32c7cf17ca1ead4f05f79646
Validity
Not Before: Oct 7 20:01:03 2026 GMT
Not After : Oct 8 20:01:03 2026 GMT
Subject: CN=d2a4bc0eaf19d5c5f3fd2043a9f717450c826700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:92:53:4b:b6:f2:e5:6b:b3:3b:08:f9:ce:ee:
11:44:bb:5d:ef:74:6b:77:27:0a:b7:e0:aa:3a:bc:
c5:54:89:cf:dd:4a:63:02:38:cb:98:68:c9:3e:0d:
ec:8a:7c:f2:6b:5f:f6:d9:04:73:ce:33:7d:be:71:
b6:73:ad:e7:43:5d:52:ad:89:45:8e:5c:78:88:d6:
b1:81:ad:bc:0c:6a:6a:fa:a9:d7:2a:fe:84:48:ac:
ff:4c:89:ab:41:21:c6:4c:53:05:fa:24:ef:83:8d:
e4:84:5f:ad:86:13:44:b7:45:3e:2c:25:b4:f0:ba:
a2:79:32:a4:87:23:5c:44:b8:86:d6:45:6b:ee:8b:
b5:19:6e:c4:05:9a:55:41:c6:c6:25:36:81:33:3a:
fa:33:6d:6e:a9:b1:dd:f7:aa:9d:40:64:18:ae:c1:
9d:20:5c:10:5a:e2:c5:9c:97:b9:59:88:83:fc:d2:
6f:b7:5a:c9:a1:d2:d3:40:75:bf:f3:74:1f:19:72:
13:17:bd:09:91:3b:05:da:34:6f:fc:e6:f7:a3:c9:
69:61:1b:dd:1a:36:67:3a:40:56:cd:c4:bb:e2:6f:
c7:50:67:18:65:43:a2:4f:83:fa:07:7a:8b:b5:3b:
7f:4e:38:83:3c:c5:cf:76:51:00:c3:f0:dc:bf:50:
f1:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A4:BC:0E:AF:19:D5:C5:F3:FD:20:43:A9:F7:17:45:0C:82:67:00
X509v3 Authority Key Identifier:
keyid:34:00:D9:49:09:83:E7:DF:32:C7:CF:17:CA:1E:AD:4F:05:F7:96:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NADZSQmD598yx88Xyh6tTwX3lkY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/fefc12-2fc2-430d-9606-f4946f03f542/1/NADZSQmD598yx88Xyh6tTwX3lkY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:d2:25:9a:ff:cb:55:53:1d:76:3f:99:07:1a:18:84:65:9b:
1a:38:0c:72:8b:db:53:98:00:e8:e1:6c:4b:64:5d:cb:50:5a:
66:15:cf:db:e4:5c:50:ec:c2:11:98:db:e3:9c:26:89:87:9a:
bb:5e:04:86:89:f0:4b:21:c8:63:09:c8:b6:e4:d4:a8:c8:e1:
ed:2a:13:aa:07:1d:9e:bb:c0:09:e8:ed:54:81:51:d1:59:ee:
7f:42:3c:05:88:63:88:f1:3c:64:87:ff:47:78:3b:60:63:8e:
c3:8e:4d:cb:5f:12:10:6f:9a:ba:0d:ad:d2:f0:32:e6:b6:6f:
4d:3c:e8:4b:a3:c8:6d:e1:5c:11:2a:1f:4e:ec:01:8b:ae:46:
70:82:94:57:b7:5d:6c:92:d7:bd:df:d8:af:79:c4:d7:03:b1:
45:f2:e5:1d:59:ec:4e:9b:7f:16:c5:8b:21:2e:bb:19:9f:ff:
c6:03:0a:3d:1a:b7:f3:ea:ee:a4:26:05:4d:0b:2f:6d:e2:93:
4d:0c:67:d3:81:04:1b:e1:11:df:93:5f:7c:05:ca:a7:84:6b:
91:ee:24:95:34:c4:b9:89:61:c0:23:b6:ef:1c:0a:01:a3:71:
94:25:9e:fc:3a:e8:97:15:c9:2b:03:da:70:87:b0:29:b8:1c:
ee:9a:c8:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEX9IUl1WTnkFJPBR9egVPJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDBkOTQ5MDk4M2U3ZGYzMmM3Y2YxN2NhMWVhZDRmMDVm
Nzk2NDYwHhcNMjYxMDA3MjAwMTAzWhcNMjYxMDA4MjAwMTAzWjAzMTEwLwYDVQQD
EyhkMmE0YmMwZWFmMTlkNWM1ZjNmZDIwNDNhOWY3MTc0NTBjODI2NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmpJTS7by5WuzOwj5zu4RRLtd73Rr
dycKt+CqOrzFVInP3UpjAjjLmGjJPg3sinzya1/22QRzzjN9vnG2c63nQ11SrYlF
jlx4iNaxga28DGpq+qnXKv6ESKz/TImrQSHGTFMF+iTvg43khF+thhNEt0U+LCW0
8LqieTKkhyNcRLiG1kVr7ou1GW7EBZpVQcbGJTaBMzr6M21uqbHd96qdQGQYrsGd
IFwQWuLFnJe5WYiD/NJvt1rJodLTQHW/83QfGXITF70JkTsF2jRv/Ob3o8lpYRvd
GjZnOkBWzcS74m/HUGcYZUOiT4P6B3qLtTt/TjiDPMXPdlEAw/Dcv1DxnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNKkvA6vGdXF8/0gQ6n3F0UMgmcAMB8GA1UdIwQY
MBaAFDQA2UkJg+ffMsfPF8oerU8F95ZGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYt
ZjQ5NDZmMDNmNTQyLzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9mZWZjMTItMmZjMi00MzBkLTk2MDYtZjQ5NDZmMDNmNTQy
LzEvTkFEWlNRbUQ1OTh5eDg4WHloNnRUd1gzbGtZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkNIlmv/L
VVMddj+ZBxoYhGWbGjgMcovbU5gA6OFsS2Rdy1BaZhXP2+RcUOzCEZjb45wmiYea
u14EhonwSyHIYwnItuTUqMjh7SoTqgcdnrvACejtVIFR0Vnuf0I8BYhjiPE8ZIf/
R3g7YGOOw45Ny18SEG+aug2t0vAy5rZvTTzoS6PIbeFcESofTuwBi65GcIKUV7dd
bJLXvd/Yr3nE1wOxRfLlHVnsTpt/FsWLIS67GZ//xgMKPRq38+rupCYFTQsvbeKT
TQxn04EEG+ER35NffAXKp4Rrke4klTTEuYlhwCO27xwKAaNxlCWe/DrolxXJKwPa
cIewKbgc7prIMw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 23:52:54 2026 by rpki-client