Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
File: nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft (raw, json)
Hash identifier: nTI/fBw8PIk5Ls5RRuEeME0X1V1pTVbDRCPimM/OlEU=
Subject key identifier: 84:6F:2D:C2:8D:E5:A0:4A:D8:AD:80:FF:17:9B:62:83:E0:4C:17:BD
Authority key identifier: 9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
Certificate issuer: /CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Certificate serial: 019CABA1FF32BD79C7F62C7EC92422AA782A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
Manifest number: 090D
Signing time: Sun 01 Mar 2026 23:00:46 +0000
Manifest this update: Sun 01 Mar 2026 23:00:46 +0000
Manifest next update: Mon 02 Mar 2026 23:00:46 +0000
Files and hashes: 1: nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl (hash: xCC4jvvoF8gAtqliXEecqvnPOLAEKsVqevZX2ALP/50=)
2: zaw-l3nyUygb03TlyeeZ5uNtuxc.roa (hash: vbvudETvvHbmCpQdctUZ1OuuVkp6d4krvgnH2TdlDSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a1:ff:32:bd:79:c7:f6:2c:7e:c9:24:22:aa:78:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c620f31b4997c7345bc66b46b43d686bf00931a
Validity
Not Before: Mar 1 23:00:46 2026 GMT
Not After : Mar 2 23:00:46 2026 GMT
Subject: CN=846f2dc28de5a04ad8ad80ff179b6283e04c17bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:14:40:c2:86:33:50:b0:4a:8c:90:38:96:d3:
05:9c:9d:70:40:b1:b7:63:1a:26:55:5a:41:e7:31:
94:55:1b:da:b6:5e:1f:18:4d:23:fb:00:02:2c:29:
93:56:d2:b3:88:8d:57:18:b9:59:d1:e7:56:e9:ca:
4b:3c:c0:39:72:5f:ec:10:c2:24:7c:ba:33:4e:48:
4c:a7:96:f6:73:5a:b2:bd:2b:4b:31:79:fc:ca:3d:
95:cd:37:84:35:24:c3:fd:3d:f6:8e:77:94:9f:88:
1e:94:04:42:43:c6:0f:a9:30:bd:0c:e0:08:22:76:
47:0e:c3:e6:4a:ea:64:8e:f5:cf:eb:ac:6c:7f:da:
32:d6:9a:3c:06:1f:d4:a0:e9:1c:15:9f:29:78:10:
37:a2:2b:dd:89:87:7d:a4:b4:88:68:06:e0:87:f2:
b5:3a:63:b4:97:ab:79:76:3e:a7:d9:78:4b:0f:1f:
f0:a0:0e:7d:36:86:f8:2e:75:d2:71:ab:10:1c:be:
ac:88:4e:5f:01:3a:0a:4d:ff:57:58:f2:55:7c:9f:
27:f5:db:29:c8:49:a1:67:d2:67:4b:38:f6:e6:61:
0d:99:d3:5b:28:95:82:dd:08:7d:6d:75:1b:07:b0:
da:a5:7a:5a:db:ae:f5:40:23:3c:09:5f:81:88:aa:
5a:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:6F:2D:C2:8D:E5:A0:4A:D8:AD:80:FF:17:9B:62:83:E0:4C:17:BD
X509v3 Authority Key Identifier:
keyid:9C:62:0F:31:B4:99:7C:73:45:BC:66:B4:6B:43:D6:86:BF:00:93:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nGIPMbSZfHNFvGa0a0PWhr8Akxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/8928f1-8618-4c19-9f3d-4b8793db7460/1/nGIPMbSZfHNFvGa0a0PWhr8Akxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:95:44:a5:a6:b7:1f:31:ac:1d:58:c4:2c:67:d1:03:5f:49:
03:42:30:88:12:8e:91:5b:3d:c8:65:9a:0f:fd:fe:e1:08:a9:
e3:ad:8e:1e:ec:2e:b3:3e:96:11:fd:f9:43:83:22:0d:40:6c:
86:98:38:af:de:b2:84:7a:3b:55:52:d4:02:77:a3:b6:9f:70:
67:87:16:ff:11:3c:9e:5b:b0:0f:c0:84:f7:3a:37:c5:f3:3e:
33:5a:be:7e:ed:66:1e:71:25:ad:1e:da:43:e2:ac:80:fe:48:
28:b5:be:07:ef:69:b7:f5:be:be:6e:6c:9c:73:9f:6c:4a:89:
a6:86:e8:3c:1a:ad:a4:0c:b9:c3:4f:f8:6c:77:2b:3b:68:28:
ba:ff:fc:d1:85:f1:fb:ed:00:f8:20:a5:b5:a1:d4:c1:7d:3d:
a5:ae:46:d2:00:6d:ba:83:c2:d7:58:30:9a:44:47:89:ba:b2:
16:f3:e0:42:af:63:fc:a1:61:37:d5:67:5e:a0:73:4f:61:eb:
38:05:83:e3:11:8d:51:64:bf:6b:42:93:f0:ec:03:a8:5c:6e:
17:57:54:63:57:d4:5a:7e:26:1a:5e:a9:14:f6:81:a9:89:96:
19:fe:25:8e:dc:32:66:35:4d:8f:93:35:68:bc:33:2a:fc:f9:
36:d1:27:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrof8yvXnH9ix+ySQiqngqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNjIwZjMxYjQ5OTdjNzM0NWJjNjZiNDZiNDNkNjg2YmYw
MDkzMWEwHhcNMjYwMzAxMjMwMDQ2WhcNMjYwMzAyMjMwMDQ2WjAzMTEwLwYDVQQD
Eyg4NDZmMmRjMjhkZTVhMDRhZDhhZDgwZmYxNzliNjI4M2UwNGMxN2JkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoBRAwoYzULBKjJA4ltMFnJ1wQLG3
YxomVVpB5zGUVRvatl4fGE0j+wACLCmTVtKziI1XGLlZ0edW6cpLPMA5cl/sEMIk
fLozTkhMp5b2c1qyvStLMXn8yj2VzTeENSTD/T32jneUn4gelARCQ8YPqTC9DOAI
InZHDsPmSupkjvXP66xsf9oy1po8Bh/UoOkcFZ8peBA3oivdiYd9pLSIaAbgh/K1
OmO0l6t5dj6n2XhLDx/woA59Nob4LnXScasQHL6siE5fAToKTf9XWPJVfJ8n9dsp
yEmhZ9JnSzj25mENmdNbKJWC3Qh9bXUbB7DapXpa2671QCM8CV+BiKpaTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIRvLcKN5aBK2K2A/xebYoPgTBe9MB8GA1UdIwQY
MBaAFJxiDzG0mXxzRbxmtGtD1oa/AJMaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2Qt
NGI4NzkzZGI3NDYwLzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni84OTI4ZjEtODYxOC00YzE5LTlmM2QtNGI4NzkzZGI3NDYw
LzEvbkdJUE1iU1pmSE5GdkdhMGEwUFdocjhBa3hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUpVEpaa3
HzGsHVjELGfRA19JA0IwiBKOkVs9yGWaD/3+4Qip462OHuwusz6WEf35Q4MiDUBs
hpg4r96yhHo7VVLUAnejtp9wZ4cW/xE8nluwD8CE9zo3xfM+M1q+fu1mHnElrR7a
Q+KsgP5IKLW+B+9pt/W+vm5snHOfbEqJpoboPBqtpAy5w0/4bHcrO2gouv/80YXx
++0A+CCltaHUwX09pa5G0gBtuoPC11gwmkRHibqyFvPgQq9j/KFhN9VnXqBzT2Hr
OAWD4xGNUWS/a0KT8OwDqFxuF1dUY1fUWn4mGl6pFPaBqYmWGf4ljtwyZjVNj5M1
aLwzKvz5NtEnEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:17:33 2026 by rpki-client