Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: 1nUgXSW9WjeAvN6/rZQMJrid7e4AxrBamo92LFYDlts=
Subject key identifier: E9:EE:D9:FD:3F:3B:E7:95:6B:E5:28:10:F0:6D:D8:CD:52:19:21:DC
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 019CA9EB247E91C47F34581BBA1ECF0A7F3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 120B
Signing time: Sun 01 Mar 2026 15:01:25 +0000
Manifest this update: Sun 01 Mar 2026 15:01:25 +0000
Manifest next update: Mon 02 Mar 2026 15:01:25 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: HPZlnwVhW2L48gri2DUdbb6djil6FBp3k5u0lqETK3k=)
2: vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa (hash: pJtwgYaoF3xi2Mwr73dINom7FFrcw02MnipnSTRfmM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:24:7e:91:c4:7f:34:58:1b:ba:1e:cf:0a:7f:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Mar 1 15:01:25 2026 GMT
Not After : Mar 2 15:01:25 2026 GMT
Subject: CN=e9eed9fd3f3be7956be52810f06dd8cd521921dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:86:9e:d6:48:58:66:45:71:3a:e7:94:2e:b8:
08:67:18:fc:57:c3:9c:39:83:da:72:97:97:c7:51:
4a:88:36:36:8a:9d:b0:85:11:a7:79:24:f5:6b:9b:
b1:9b:8a:f1:a6:cd:68:2e:b3:86:e6:83:d5:1b:d2:
9a:76:a4:ab:55:44:c4:00:9a:3a:54:01:c4:4e:63:
d0:35:45:86:21:87:78:0d:15:63:51:17:da:ad:19:
bc:e7:c9:d1:15:90:a1:19:50:87:79:13:b6:ef:15:
26:89:c7:2a:51:ab:1b:c0:fe:0b:53:9e:40:10:f1:
dc:d1:48:c5:cb:17:6a:8f:e6:0d:f9:fb:6b:76:90:
66:9e:80:a8:79:95:20:80:ad:5a:ea:7c:b7:26:a4:
7b:18:81:5b:2a:41:76:1a:01:87:32:d2:a0:b8:2c:
55:15:59:56:c6:3f:aa:0e:c7:fb:c2:81:0b:58:e5:
53:d1:5b:0d:f6:6a:29:f0:39:96:27:6f:99:7a:70:
bd:e4:df:e8:d0:c2:26:4c:5e:76:60:91:76:69:dc:
da:5a:62:3d:59:39:fa:6b:c2:08:ec:26:ea:49:76:
08:71:ac:a0:98:b1:6b:ed:47:c3:55:64:db:0c:3a:
92:74:9f:d6:09:a9:3d:07:f4:1b:84:a6:99:98:ce:
8d:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:EE:D9:FD:3F:3B:E7:95:6B:E5:28:10:F0:6D:D8:CD:52:19:21:DC
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:93:95:c4:bf:db:a7:10:09:ba:33:04:53:a3:73:5d:8c:f2:
bd:9e:df:32:54:1a:3e:84:ba:2c:3c:ac:f4:c7:00:d9:6e:3b:
a3:39:f7:34:e5:9e:4d:eb:92:20:34:21:a1:2c:93:c1:81:e8:
11:73:21:ff:cf:ed:8f:32:1e:c5:d4:70:ee:e4:9d:6b:e1:66:
8a:db:2a:68:96:80:98:f2:7c:16:1e:85:f6:7c:61:69:ea:ef:
fe:d9:b4:ea:84:f7:84:62:56:24:6a:f7:7a:5a:db:fb:a3:d0:
48:f5:cf:a7:5a:52:1b:03:d8:0f:8b:84:db:86:58:60:fc:40:
2e:58:98:34:6e:e9:f4:bf:7a:23:b7:10:7e:63:e5:59:f6:07:
f9:c9:5b:89:58:cb:95:75:42:bd:ec:20:ab:fa:e5:25:65:72:
d0:86:a6:73:3a:ca:a6:43:72:c5:ae:5a:ed:46:95:c4:76:42:
9e:38:ac:88:c9:4f:14:68:9e:a6:4c:67:76:88:35:3b:f1:11:
7f:77:c0:35:72:da:42:1f:73:d9:98:e9:50:b8:5c:b0:57:2c:
79:61:f8:a2:45:0c:67:c5:9f:e9:b0:5b:41:b3:7c:b2:4b:58:
e6:74:cc:6e:ac:c9:00:48:4b:72:40:43:62:29:af:9a:17:0d:
5e:ee:ef:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp6yR+kcR/NFgbuh7PCn88MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZDM1ZTBkYTQzOWJlYTY1YzQ4MzI5Y2U5ZThiMTA5M2Y3
MjMwMGEwHhcNMjYwMzAxMTUwMTI1WhcNMjYwMzAyMTUwMTI1WjAzMTEwLwYDVQQD
EyhlOWVlZDlmZDNmM2JlNzk1NmJlNTI4MTBmMDZkZDhjZDUyMTkyMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxYae1khYZkVxOueULrgIZxj8V8Oc
OYPacpeXx1FKiDY2ip2whRGneST1a5uxm4rxps1oLrOG5oPVG9KadqSrVUTEAJo6
VAHETmPQNUWGIYd4DRVjURfarRm858nRFZChGVCHeRO27xUmiccqUasbwP4LU55A
EPHc0UjFyxdqj+YN+ftrdpBmnoCoeZUggK1a6ny3JqR7GIFbKkF2GgGHMtKguCxV
FVlWxj+qDsf7woELWOVT0VsN9mop8DmWJ2+ZenC95N/o0MImTF52YJF2adzaWmI9
WTn6a8II7CbqSXYIcaygmLFr7UfDVWTbDDqSdJ/WCak9B/QbhKaZmM6NiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOnu2f0/O+eVa+UoEPBt2M1SGSHcMB8GA1UdIwQY
MBaAFKzTXg2kOb6mXEgynOnosQk/cjAKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYt
NjViYjFhODlmMjU5LzEvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9hMWIxNWYtN2QzZC00YWY2LWI2NTYtNjViYjFhODlmMjU5
LzEvck5OZURhUTV2cVpjU0RLYzZlaXhDVDl5TUFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJOVxL/b
pxAJujMEU6NzXYzyvZ7fMlQaPoS6LDys9McA2W47ozn3NOWeTeuSIDQhoSyTwYHo
EXMh/8/tjzIexdRw7uSda+FmitsqaJaAmPJ8Fh6F9nxhaerv/tm06oT3hGJWJGr3
elrb+6PQSPXPp1pSGwPYD4uE24ZYYPxALliYNG7p9L96I7cQfmPlWfYH+clbiVjL
lXVCvewgq/rlJWVy0IamczrKpkNyxa5a7UaVxHZCnjisiMlPFGiepkxndog1O/ER
f3fANXLaQh9z2ZjpULhcsFcseWH4okUMZ8Wf6bBbQbN8sktY5nTMbqzJAEhLckBD
YimvmhcNXu7vlg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:49:58 2026 by rpki-client