Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
File: NtYESWbFdDmq9SAxCIX4HUUnWyo.mft (raw, json)
Hash identifier: T4+RqD47ujuB25sE+go9N/UXlFxuHIWGKC/MmepU5d8=
Subject key identifier: CF:15:16:52:2D:58:29:CF:97:DE:23:31:CB:36:6F:4C:56:29:02:8F
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A0BF8C6B75E1C2111F6121E1610A95264C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
Manifest number: 01AE
Signing time: Sun 20 Sep 2026 16:00:45 +0000
Manifest this update: Sun 20 Sep 2026 16:00:45 +0000
Manifest next update: Mon 21 Sep 2026 16:00:45 +0000
Files and hashes: 1: IoID25YMHzy5rGEknb3wQAVRHUs.roa (hash: xjFXrUDyDmwMICYOMxUGhitt6oRwwFy1kBO+XV0ISs4=)
2: NNK9R7yF6XrFwMG8nuM3r4JWCV4.roa (hash: 9ZUvYzRXn0Klpg5dQm6gHdmQvA0GHc1xDFASadUC4cY=)
3: NtYESWbFdDmq9SAxCIX4HUUnWyo.crl (hash: 4ipAfTdutsm5k3TrZBtvB6pm799VtjEBVFd8iexURNM=)
4: QCfA9DhW_LqfFX-Esz5kIwPYAzg.roa (hash: M69ZqcFPRJj+KBGgBu0O+FBYsQKc3GPhvLHPwKiBGjM=)
5: cLV16e4v7vV_S6eQOLOte7hxj18.roa (hash: +SlaR3Q3bjh0sZBb6PtJ7UqrBqBFULhBuOS6bf52Z+0=)
6: nRBo528tP43KmAQk4RnVYbDzWU0.roa (hash: ERhWqSONU8VMSUZjvA4OcBhlxRgbgXHAnBJ/a2qEElc=)
7: ykoL6Yw1_hgazdwSxBD8-ctDSFk.roa (hash: YqQ9BDswI1/tllb0ynCRch8xMH2OE551/Vqt20k8iIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bf:8c:6b:75:e1:c2:11:1f:61:21:e1:61:0a:95:26:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Sep 20 16:00:45 2026 GMT
Not After : Sep 21 16:00:45 2026 GMT
Subject: CN=cf1516522d5829cf97de2331cb366f4c5629028f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a2:4b:a2:be:6d:83:ef:8f:2d:08:f3:01:1a:
db:88:49:74:18:a5:58:86:d2:3b:71:eb:63:29:b3:
5d:12:c8:b5:c8:20:d1:a5:87:f8:0e:8a:8e:6e:0b:
b6:a4:e8:12:5d:40:9d:65:60:ae:6a:c5:fe:bf:5a:
5b:be:e1:d9:e2:df:0c:0c:af:35:73:51:70:ce:1c:
64:59:49:8b:0f:a6:c2:3a:b7:89:4d:01:4f:4e:15:
8b:f3:af:d4:5c:b3:9c:8f:3e:f4:43:a3:57:6a:d0:
8c:47:f7:13:20:50:92:6b:6c:1b:9c:da:2a:3d:70:
5a:04:88:85:02:67:df:35:98:93:a6:bb:d3:f1:83:
d3:89:37:c0:3f:51:03:f4:a9:ba:b4:c1:f7:64:9c:
ad:ea:c4:d3:49:e8:62:0d:8c:3e:b9:e4:31:a7:98:
be:e7:c6:80:81:2b:d1:84:f0:2f:f0:dc:42:ee:48:
4b:63:90:9b:29:4d:de:83:ac:d5:3a:9c:cd:f6:5f:
1e:f1:44:c7:13:50:58:cf:b3:94:3f:7f:5e:95:e4:
ea:b9:fc:93:18:c1:8f:cd:05:f2:ff:ac:6c:42:3f:
4a:30:ef:d9:21:14:78:77:27:8e:ae:15:31:19:26:
ce:d3:e2:7e:9f:c4:10:08:c1:66:a1:fe:2e:a5:87:
04:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:15:16:52:2D:58:29:CF:97:DE:23:31:CB:36:6F:4C:56:29:02:8F
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:04:1a:af:14:80:8a:be:c7:80:f4:ef:fa:4d:10:ed:ab:19:
da:21:0a:fb:a4:93:18:83:ee:b2:5e:66:28:58:1e:1c:1f:9e:
b8:55:d2:af:7a:f8:55:1f:18:12:88:33:80:da:75:88:2d:b7:
db:ed:ca:b2:36:34:1e:e5:8b:cd:54:99:c4:81:15:02:d6:2e:
bd:1c:be:95:c8:d8:3c:b8:a2:1e:7a:de:6e:f9:f0:91:fb:68:
84:01:f0:ba:4a:10:d2:4b:20:90:b1:7a:78:fc:1e:62:69:c3:
8b:d4:08:21:38:be:c3:fe:6a:27:54:db:5e:f6:1e:88:4f:6a:
95:5a:10:b3:43:1b:0d:05:3f:38:ad:cf:85:35:13:66:b9:35:
c3:3a:8f:3c:bb:06:69:88:ab:34:41:fd:28:d3:ba:5b:02:b9:
f7:f7:bd:0d:2b:90:88:a2:6c:c5:f8:75:64:0e:7f:9f:71:3a:
bc:c7:a6:2d:1c:ef:70:ff:82:d3:4d:79:24:1e:9d:3c:51:c1:
b4:ba:c1:01:d9:dd:fd:db:90:e9:fe:9c:02:0e:50:2c:60:62:
c5:9a:82:db:4a:f8:73:9c:48:21:a5:49:e1:0c:5c:d1:c3:3a:
5a:f6:33:b3:dc:26:b2:af:1e:7d:60:b9:98:44:87:de:41:db:
39:09:aa:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC/jGt14cIRH2Eh4WEKlSZMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDYwNDQ5NjZjNTc0MzlhYWY1MjAzMTA4ODVmODFkNDUy
NzViMmEwHhcNMjYwOTIwMTYwMDQ1WhcNMjYwOTIxMTYwMDQ1WjAzMTEwLwYDVQQD
EyhjZjE1MTY1MjJkNTgyOWNmOTdkZTIzMzFjYjM2NmY0YzU2MjkwMjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqaJLor5tg++PLQjzARrbiEl0GKVY
htI7cetjKbNdEsi1yCDRpYf4DoqObgu2pOgSXUCdZWCuasX+v1pbvuHZ4t8MDK81
c1FwzhxkWUmLD6bCOreJTQFPThWL86/UXLOcjz70Q6NXatCMR/cTIFCSa2wbnNoq
PXBaBIiFAmffNZiTprvT8YPTiTfAP1ED9Km6tMH3ZJyt6sTTSehiDYw+ueQxp5i+
58aAgSvRhPAv8NxC7khLY5CbKU3eg6zVOpzN9l8e8UTHE1BYz7OUP39eleTqufyT
GMGPzQXy/6xsQj9KMO/ZIRR4dyeOrhUxGSbO0+J+n8QQCMFmof4upYcEFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM8VFlItWCnPl94jMcs2b0xWKQKPMB8GA1UdIwQY
MBaAFDbWBElmxXQ5qvUgMQiF+B1FJ1sqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUt
YTFkNjA1NDM1MGQyLzEvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUtYTFkNjA1NDM1MGQy
LzEvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAigQarxSA
ir7HgPTv+k0Q7asZ2iEK+6STGIPusl5mKFgeHB+euFXSr3r4VR8YEogzgNp1iC23
2+3KsjY0HuWLzVSZxIEVAtYuvRy+lcjYPLiiHnrebvnwkftohAHwukoQ0ksgkLF6
ePweYmnDi9QIITi+w/5qJ1TbXvYeiE9qlVoQs0MbDQU/OK3PhTUTZrk1wzqPPLsG
aYirNEH9KNO6WwK59/e9DSuQiKJsxfh1ZA5/n3E6vMemLRzvcP+C0015JB6dPFHB
tLrBAdnd/duQ6f6cAg5QLGBixZqC20r4c5xIIaVJ4Qxc0cM6WvYzs9wmsq8efWC5
mESH3kHbOQmqzA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 23:54:16 2026 by rpki-client