Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: B1WG0Js9wx6iaO/5BNQ2dD1aTxXzooHWbzAnulTVYNk=
Subject key identifier: 89:1A:AA:68:D3:09:EE:B9:E8:94:3B:88:D0:6C:57:81:60:34:88:9E
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 01A0BD66A833CDB25B4CE17645ADEAB82546
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 076B
Signing time: Sun 20 Sep 2026 06:00:16 +0000
Manifest this update: Sun 20 Sep 2026 06:00:16 +0000
Manifest next update: Mon 21 Sep 2026 06:00:16 +0000
Files and hashes: 1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: CKYWJfs6QHmP8aqEg/vr739IgdKqE+bzRxRTQlpnh+I=)
2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bd:66:a8:33:cd:b2:5b:4c:e1:76:45:ad:ea:b8:25:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Sep 20 06:00:16 2026 GMT
Not After : Sep 21 06:00:16 2026 GMT
Subject: CN=891aaa68d309eeb9e8943b88d06c57816034889e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:fc:2a:35:89:02:de:eb:ed:85:21:be:77:08:
34:9f:03:3d:f8:ee:11:3a:58:55:f1:f7:2f:d5:2c:
60:41:ad:f8:3c:f2:20:06:17:4e:05:f0:ca:6d:ca:
ec:eb:6b:14:a4:9f:03:2c:b0:12:89:49:e1:50:7a:
07:73:a5:8b:e8:29:a1:e3:16:80:7f:ff:16:07:74:
61:f1:a5:4b:ac:fb:e0:9e:91:f3:a2:77:94:0a:b0:
2a:6c:6f:f8:c4:a1:82:d2:cb:9b:35:47:19:db:68:
f8:5d:f5:2a:a0:f4:6a:03:cf:5c:7e:2d:51:87:6b:
12:a7:39:4b:dc:1a:07:b8:5b:57:ad:db:7c:2e:e3:
35:04:98:ae:70:43:e4:4f:d4:8c:ab:30:9b:a6:35:
6c:0f:64:03:a6:d8:79:a6:f9:24:1c:1e:10:55:61:
5b:e2:d3:d7:e4:d9:d5:bc:89:4d:eb:e1:38:e7:ae:
91:c9:8d:73:5b:96:06:e8:84:c5:70:3c:8d:c1:96:
51:b3:89:b1:1a:26:16:8c:37:fd:75:8e:6f:60:b9:
76:34:0e:a6:39:55:1b:62:1b:02:60:5f:bb:6c:ac:
e5:4b:90:fa:3c:b2:50:6d:a0:85:7c:9b:d4:de:66:
78:2e:59:c1:0e:c2:ec:03:9d:fd:f1:72:97:c2:6c:
ad:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:1A:AA:68:D3:09:EE:B9:E8:94:3B:88:D0:6C:57:81:60:34:88:9E
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:ed:3c:4a:c7:b3:2f:47:b5:5a:d6:1f:0f:03:d8:f8:fb:e8:
c2:71:04:20:6f:9e:f0:58:cd:1a:ff:8d:76:91:9b:12:38:54:
f9:6e:a5:99:75:cd:b7:66:97:6b:b4:63:3c:68:4b:12:fe:5c:
22:a0:7a:bb:50:4d:3c:85:73:4a:87:75:71:0b:73:ef:07:96:
af:e3:15:93:28:f7:7c:d2:a3:e3:08:5b:2b:62:47:64:05:b7:
50:ba:e9:15:8b:f1:30:47:52:a9:64:a9:48:81:15:93:60:4e:
b8:e6:b5:01:9c:81:cc:09:48:c8:18:22:10:e7:82:a6:3c:7e:
98:d1:fd:97:8d:ef:b7:c6:2f:f4:ed:81:f5:37:db:ab:ca:d9:
b4:85:b6:fa:8e:c1:f3:26:35:44:dd:81:60:2a:59:4a:83:cc:
c4:ec:82:bb:59:b4:98:34:f3:fe:50:b9:01:d5:56:79:58:78:
fe:22:19:fc:f5:70:61:2c:55:84:04:88:25:fb:92:82:b1:e2:
4e:45:ad:83:45:18:b4:c7:58:f2:7c:74:d0:6c:f0:43:e2:91:
0e:8d:7e:96:e9:94:93:db:5b:d5:b1:37:6d:53:d6:7f:49:5b:
65:7c:7e:d6:fb:23:8f:b2:db:19:c2:44:1f:56:7f:38:50:6f:
32:ba:b7:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC9ZqgzzbJbTOF2Ra3quCVGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYmI2MjVhYTU1YmQ4ZWYzNTQxMGFmZGRkMmEyYmMzNThh
MjVlZDEwHhcNMjYwOTIwMDYwMDE2WhcNMjYwOTIxMDYwMDE2WjAzMTEwLwYDVQQD
Eyg4OTFhYWE2OGQzMDllZWI5ZTg5NDNiODhkMDZjNTc4MTYwMzQ4ODllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl/wqNYkC3uvthSG+dwg0nwM9+O4R
OlhV8fcv1SxgQa34PPIgBhdOBfDKbcrs62sUpJ8DLLASiUnhUHoHc6WL6Cmh4xaA
f/8WB3Rh8aVLrPvgnpHzoneUCrAqbG/4xKGC0subNUcZ22j4XfUqoPRqA89cfi1R
h2sSpzlL3BoHuFtXrdt8LuM1BJiucEPkT9SMqzCbpjVsD2QDpth5pvkkHB4QVWFb
4tPX5NnVvIlN6+E4566RyY1zW5YG6ITFcDyNwZZRs4mxGiYWjDf9dY5vYLl2NA6m
OVUbYhsCYF+7bKzlS5D6PLJQbaCFfJvU3mZ4LlnBDsLsA5398XKXwmytXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIkaqmjTCe656JQ7iNBsV4FgNIieMB8GA1UdIwQY
MBaAFJ27YlqlW9jvNUEK/d0qK8NYol7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQt
YTQ5YjcyYTFjZmUyLzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS9jMzNhMTMtYTU0Yi00NWJiLWIwZDQtYTQ5YjcyYTFjZmUy
LzEvbmJ0aVdxVmIyTzgxUVFyOTNTb3J3MWlpWHRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS+08Ssez
L0e1WtYfDwPY+PvownEEIG+e8FjNGv+NdpGbEjhU+W6lmXXNt2aXa7RjPGhLEv5c
IqB6u1BNPIVzSod1cQtz7weWr+MVkyj3fNKj4whbK2JHZAW3ULrpFYvxMEdSqWSp
SIEVk2BOuOa1AZyBzAlIyBgiEOeCpjx+mNH9l43vt8Yv9O2B9Tfbq8rZtIW2+o7B
8yY1RN2BYCpZSoPMxOyCu1m0mDTz/lC5AdVWeVh4/iIZ/PVwYSxVhASIJfuSgrHi
TkWtg0UYtMdY8nx00GzwQ+KRDo1+lumUk9tb1bE3bVPWf0lbZXx+1vsjj7LbGcJE
H1Z/OFBvMrq3qg==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:55:50 2026 by rpki-client