Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
File: nfToC0ytTlC3iO3xaXZxLe7_bA0.mft (raw, json)
Hash identifier: 3mKPnp51C6lh0RkL9ygahJ8kVDvJwe9iLu/MKONDmK4=
Subject key identifier: AD:2F:7E:C9:73:D2:68:F3:54:D1:EC:4A:A6:F7:2C:58:18:0A:77:6C
Authority key identifier: 9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
Certificate issuer: /CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Certificate serial: 019CAA589BD1658F21D05355921DCAFD4634
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
Manifest number: 111A
Signing time: Sun 01 Mar 2026 17:00:59 +0000
Manifest this update: Sun 01 Mar 2026 17:00:59 +0000
Manifest next update: Mon 02 Mar 2026 17:00:59 +0000
Files and hashes: 1: 6qyreawZF4fVMyWkw4FMT5_E4Cs.roa (hash: KqH2FCJeUYV2BaDFAOaLAJqNcjNFt24zga0dBBMyQAY=)
2: nfToC0ytTlC3iO3xaXZxLe7_bA0.crl (hash: Vmn+MHSrnLvZUfQwgbGKCSmCuqCQ6R/M4x07wQGY5Ms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:9b:d1:65:8f:21:d0:53:55:92:1d:ca:fd:46:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df4e80b4cad4e50b788edf16976712deeff6c0d
Validity
Not Before: Mar 1 17:00:59 2026 GMT
Not After : Mar 2 17:00:59 2026 GMT
Subject: CN=ad2f7ec973d268f354d1ec4aa6f72c58180a776c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:75:e8:ad:d0:e7:c5:1e:4f:05:6a:2a:40:9c:
9f:75:0f:86:de:76:1d:85:82:7c:98:c2:b6:f5:d0:
3a:08:54:10:37:36:cd:e4:08:5c:f4:9e:a6:04:27:
a9:ac:9f:bb:9b:df:cf:b6:05:8f:92:21:30:cb:89:
d4:00:4e:18:83:05:82:5b:10:ff:51:09:f4:b8:e7:
a0:62:29:7d:c7:af:df:b9:96:6c:8d:54:28:48:10:
36:9b:33:39:54:2a:65:32:3a:4e:b0:c7:53:ea:a4:
6d:4e:6d:0c:0d:c6:40:eb:17:59:85:24:39:7f:42:
d8:cd:2e:b5:85:b9:41:27:36:6b:15:2a:27:11:f1:
31:28:0a:9c:ea:0b:b0:47:f3:07:e0:88:c8:6d:8b:
e4:14:df:0f:48:e5:b9:e5:76:8c:b0:01:dc:9a:d5:
58:a5:86:21:9f:ca:fc:f4:55:16:d2:cb:7e:c7:3a:
66:3d:6c:1c:8f:6f:b5:b8:96:5e:81:88:17:18:bf:
f7:c4:5d:b1:43:1c:4a:41:e2:3d:44:4d:14:d6:ff:
1f:ef:dc:42:1a:09:e9:a2:73:45:7e:17:07:4c:ba:
6d:74:17:4a:74:a1:c1:d3:00:19:b4:2a:5b:b7:55:
76:75:07:ff:58:12:f7:33:5d:45:e6:5b:f5:67:13:
41:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2F:7E:C9:73:D2:68:F3:54:D1:EC:4A:A6:F7:2C:58:18:0A:77:6C
X509v3 Authority Key Identifier:
keyid:9D:F4:E8:0B:4C:AD:4E:50:B7:88:ED:F1:69:76:71:2D:EE:FF:6C:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfToC0ytTlC3iO3xaXZxLe7_bA0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/34011d-01bf-48a1-a8c3-c9fc5f452995/1/nfToC0ytTlC3iO3xaXZxLe7_bA0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:23:32:d0:99:56:16:6c:b1:e4:af:d3:52:10:5a:97:13:a9:
41:6d:c9:bc:5b:b0:b3:34:5f:1e:c8:4b:e2:df:ab:fd:3e:f2:
d3:af:2d:34:b4:1a:ca:62:13:77:bd:cd:67:14:1a:22:5a:af:
47:1f:53:dd:b6:94:68:3f:a1:57:b2:25:a9:28:15:63:db:41:
b0:d4:54:fc:aa:39:02:40:03:e6:97:00:83:db:be:e2:de:3b:
ba:65:ad:17:1b:2c:2f:db:f7:1d:8b:4a:c3:6e:51:89:66:d7:
ef:5d:ef:75:34:9d:ba:49:c3:bf:4b:80:f8:91:f4:50:32:50:
c7:97:c9:a2:e1:5e:6a:af:0d:d6:65:fa:f6:44:24:0f:2a:60:
e3:57:b7:75:40:4b:95:6e:fe:a0:92:74:f8:0e:a6:f8:cb:6c:
27:92:70:71:d5:1c:d8:b3:15:79:71:39:7a:e6:31:56:29:fb:
8d:a7:cb:b5:ff:0d:60:f2:11:e7:91:1d:60:a4:75:18:9e:32:
c1:9d:c0:0c:bf:1c:05:a9:5f:39:a2:e8:bf:42:36:c7:ee:3f:
0c:12:39:b7:c1:17:2f:ca:ec:cd:c9:86:28:92:1b:d0:2e:35:
20:2f:f2:72:db:ff:ff:ac:29:5a:1b:ed:24:a7:98:e8:5e:a9:
af:82:06:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWJvRZY8h0FNVkh3K/UY0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkZjRlODBiNGNhZDRlNTBiNzg4ZWRmMTY5NzY3MTJkZWVm
ZjZjMGQwHhcNMjYwMzAxMTcwMDU5WhcNMjYwMzAyMTcwMDU5WjAzMTEwLwYDVQQD
EyhhZDJmN2VjOTczZDI2OGYzNTRkMWVjNGFhNmY3MmM1ODE4MGE3NzZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtHXordDnxR5PBWoqQJyfdQ+G3nYd
hYJ8mMK29dA6CFQQNzbN5Ahc9J6mBCeprJ+7m9/PtgWPkiEwy4nUAE4YgwWCWxD/
UQn0uOegYil9x6/fuZZsjVQoSBA2mzM5VCplMjpOsMdT6qRtTm0MDcZA6xdZhSQ5
f0LYzS61hblBJzZrFSonEfExKAqc6guwR/MH4IjIbYvkFN8PSOW55XaMsAHcmtVY
pYYhn8r89FUW0st+xzpmPWwcj2+1uJZegYgXGL/3xF2xQxxKQeI9RE0U1v8f79xC
GgnponNFfhcHTLptdBdKdKHB0wAZtCpbt1V2dQf/WBL3M11F5lv1ZxNB8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0vfslz0mjzVNHsSqb3LFgYCndsMB8GA1UdIwQY
MBaAFJ306AtMrU5Qt4jt8Wl2cS3u/2wNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMt
YzlmYzVmNDUyOTk1LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8zNDAxMWQtMDFiZi00OGExLWE4YzMtYzlmYzVmNDUyOTk1
LzEvbmZUb0MweXRUbEMzaU8zeGFYWnhMZTdfYkEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAESMy0JlW
Fmyx5K/TUhBalxOpQW3JvFuwszRfHshL4t+r/T7y068tNLQaymITd73NZxQaIlqv
Rx9T3baUaD+hV7IlqSgVY9tBsNRU/Ko5AkAD5pcAg9u+4t47umWtFxssL9v3HYtK
w25RiWbX713vdTSduknDv0uA+JH0UDJQx5fJouFeaq8N1mX69kQkDypg41e3dUBL
lW7+oJJ0+A6m+MtsJ5JwcdUc2LMVeXE5euYxVin7jafLtf8NYPIR55EdYKR1GJ4y
wZ3ADL8cBalfOaLov0I2x+4/DBI5t8EXL8rszcmGKJIb0C41IC/yctv//6wpWhvt
JKeY6F6pr4IG1w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:10:11 2026 by rpki-client