Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: vDZ4weiO73HW2wjyQzGW+P+JkTi44cwo9trQWFQL2iA=
Subject key identifier: B1:D6:EA:12:CE:64:16:D8:44:A3:2B:85:67:29:31:7C:A3:20:F5:65
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 01A11D51976FE7C256C7CE9EA8A095192952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 1A96
Signing time: Thu 08 Oct 2026 21:00:48 +0000
Manifest this update: Thu 08 Oct 2026 21:00:48 +0000
Manifest next update: Fri 09 Oct 2026 21:00:48 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: 5bk0pdQT3xsy3+9KvPuoQK8HIw0LIPaF+5BAIM11Ebk=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:51:97:6f:e7:c2:56:c7:ce:9e:a8:a0:95:19:29:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Oct 8 21:00:48 2026 GMT
Not After : Oct 9 21:00:48 2026 GMT
Subject: CN=b1d6ea12ce6416d844a32b856729317ca320f565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:83:f0:ab:bc:e0:5f:29:21:19:9e:5a:c8:d7:
8a:11:bb:8f:c4:81:4d:d1:41:47:9f:fc:d4:ec:bd:
1e:8b:23:9a:f0:5b:28:ee:93:01:35:ea:3b:fe:a7:
82:09:8a:da:1f:ba:08:16:77:4c:2e:cc:4e:e4:05:
87:10:48:30:38:39:e6:c6:62:b2:d9:6c:9e:22:dc:
7c:6f:96:28:90:9d:93:f1:4d:a7:c9:ae:ab:fc:ec:
16:0f:ea:4e:ac:dc:c5:1a:23:41:4c:0e:5b:f7:71:
51:ad:60:37:bd:91:8d:2f:76:2e:07:12:a4:ab:35:
c8:1f:be:78:2b:0b:02:76:95:15:44:94:59:73:f6:
3d:3a:17:be:6d:04:37:27:48:4e:25:e4:a9:be:f3:
1f:9f:9f:c7:64:b3:ac:e6:ff:7d:86:ee:8f:e0:75:
ec:6d:6b:e7:64:66:5b:f8:a9:18:9e:53:d5:24:62:
f1:b6:72:d5:04:2c:55:b4:4d:7f:08:0d:79:ed:9b:
4c:e1:d6:02:35:da:a2:f3:f9:9a:29:cc:74:5a:0a:
23:16:a5:fb:12:b6:a7:54:44:cc:2c:4e:26:14:63:
70:f3:77:a2:6f:8c:77:e3:09:d0:76:bc:b7:d6:ed:
e4:a7:b5:4e:78:4a:58:77:e2:a9:08:bd:01:05:6e:
8b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D6:EA:12:CE:64:16:D8:44:A3:2B:85:67:29:31:7C:A3:20:F5:65
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:3d:ad:7e:b5:1f:8c:96:25:c3:5f:8a:bf:a0:d7:8b:f3:b3:
27:00:30:bf:89:98:f5:ed:d1:3b:1c:29:a3:8d:ea:bf:7a:e0:
7a:d2:ba:be:a8:9f:6b:ee:38:c7:dd:2f:9e:13:85:65:cc:98:
81:01:e9:76:56:69:7f:6f:e9:a9:ff:b8:43:bd:7c:05:df:3e:
5f:95:05:bc:ad:12:9d:70:b3:d3:68:6d:9f:01:98:58:b2:ae:
88:5d:1b:ea:c8:72:42:ec:e5:79:47:2e:e0:3c:1c:a6:87:a7:
1b:2c:60:28:56:c9:eb:78:42:42:fc:16:52:db:48:9a:79:f9:
2c:65:ed:29:f6:51:97:4f:42:35:28:b9:6b:f3:78:26:48:10:
46:15:95:90:4b:05:55:20:76:f8:49:a6:ba:80:db:df:e0:1d:
32:9c:b5:f6:48:24:17:a1:20:26:4a:a3:3e:22:c4:aa:e2:b9:
44:15:68:3c:a4:f5:58:75:30:28:85:a5:7f:88:c4:e0:7e:9d:
43:b7:e3:9c:f4:4e:1f:93:16:ae:29:58:c3:45:32:ef:ff:db:
6e:f9:bd:d4:31:90:3a:3e:72:a2:46:99:ef:e3:df:9c:85:79:
83:da:8f:79:54:87:be:67:18:41:5b:c0:09:e7:f2:8b:13:95:
8e:26:98:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEdUZdv58JWx86eqKCVGSlSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjU3MTkwODIxZjcwNThhOGVhZmQ0ODE5Njk3NDM2OGJh
ZDhmMTQwHhcNMjYxMDA4MjEwMDQ4WhcNMjYxMDA5MjEwMDQ4WjAzMTEwLwYDVQQD
EyhiMWQ2ZWExMmNlNjQxNmQ4NDRhMzJiODU2NzI5MzE3Y2EzMjBmNTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5YPwq7zgXykhGZ5ayNeKEbuPxIFN
0UFHn/zU7L0eiyOa8Fso7pMBNeo7/qeCCYraH7oIFndMLsxO5AWHEEgwODnmxmKy
2WyeItx8b5YokJ2T8U2nya6r/OwWD+pOrNzFGiNBTA5b93FRrWA3vZGNL3YuBxKk
qzXIH754KwsCdpUVRJRZc/Y9Ohe+bQQ3J0hOJeSpvvMfn5/HZLOs5v99hu6P4HXs
bWvnZGZb+KkYnlPVJGLxtnLVBCxVtE1/CA157ZtM4dYCNdqi8/maKcx0WgojFqX7
EranVETMLE4mFGNw83eib4x34wnQdry31u3kp7VOeEpYd+KpCL0BBW6L1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHW6hLOZBbYRKMrhWcpMXyjIPVlMB8GA1UdIwQY
MBaAFJ0lcZCCH3BYqOr9SBlpdDaLrY8UMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAt
Mzc0MGIwOTQxZGI4LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS82NmY4MjktNTEyOS00ODQyLWE1YzAtMzc0MGIwOTQxZGI4
LzEvblNWeGtJSWZjRmlvNnYxSUdXbDBOb3V0anhRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEj2tfrUf
jJYlw1+Kv6DXi/OzJwAwv4mY9e3ROxwpo43qv3rgetK6vqifa+44x90vnhOFZcyY
gQHpdlZpf2/pqf+4Q718Bd8+X5UFvK0SnXCz02htnwGYWLKuiF0b6shyQuzleUcu
4DwcpoenGyxgKFbJ63hCQvwWUttImnn5LGXtKfZRl09CNSi5a/N4JkgQRhWVkEsF
VSB2+EmmuoDb3+AdMpy19kgkF6EgJkqjPiLEquK5RBVoPKT1WHUwKIWlf4jE4H6d
Q7fjnPROH5MWrilYw0Uy7//bbvm91DGQOj5yokaZ7+PfnIV5g9qPeVSHvmcYQVvA
CefyixOVjiaYYw==
-----END CERTIFICATE-----
Generated at Fri Oct 9 02:28:52 2026 by rpki-client