Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
File: nSAoCNH5FFVeG9WcFncof_mztZA.mft (raw, json)
Hash identifier: wa8kxp4egy2WFFLNBdNOScCEe36ww57uBQjDWy+SLMY=
Subject key identifier: 88:8A:BF:D6:BD:E9:79:17:76:8F:CA:8B:8C:D3:60:3C:F1:09:D7:3D
Authority key identifier: 9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
Certificate issuer: /CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Certificate serial: 019FAD5230E1952252AC5FDB46F67B556B7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
Manifest number: 13DF
Signing time: Wed 29 Jul 2026 10:01:12 +0000
Manifest this update: Wed 29 Jul 2026 10:01:12 +0000
Manifest next update: Thu 30 Jul 2026 10:01:12 +0000
Files and hashes: 1: 8hQk0KTYs3g5ZR66-EC5Vv0X6G8.roa (hash: xP2My60JlMvvPw+zYTcbdyBWhfmdlTseIN2HIlpIMRY=)
2: nSAoCNH5FFVeG9WcFncof_mztZA.crl (hash: jIcbouUAqq6BKqSEIIYehlsvZ9M31N/Wjmf9zI8S/d4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:52:30:e1:95:22:52:ac:5f:db:46:f6:7b:55:6b:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d202808d1f914555e1bd59c1677287ff9b3b590
Validity
Not Before: Jul 29 10:01:12 2026 GMT
Not After : Jul 30 10:01:12 2026 GMT
Subject: CN=888abfd6bde97917768fca8b8cd3603cf109d73d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:08:5d:cd:56:e2:00:89:e0:87:6e:66:1d:11:
1e:86:ad:5b:a6:89:87:20:c2:3d:78:53:a9:34:4e:
6f:e8:75:a5:07:a2:77:e0:52:29:f8:72:a8:79:0c:
d9:71:fa:3e:3a:32:72:a9:5c:59:33:96:37:b2:4c:
bc:a6:db:b6:12:96:02:73:d2:96:5c:17:11:e9:da:
c5:58:7e:48:98:18:d7:45:6f:71:24:c2:f0:69:80:
7b:3c:01:e9:b1:89:8c:24:e2:d6:b8:31:e9:0a:31:
cf:d8:5b:f2:58:00:d0:41:24:2a:e0:a9:ed:00:bd:
85:41:1f:b2:98:d3:d8:4d:9c:56:ed:a1:cc:79:09:
ad:95:c4:b5:a3:7d:b3:97:bf:55:04:ed:09:79:76:
a4:92:c2:6a:84:c9:8d:7d:ef:fd:27:27:98:e4:58:
c0:54:fa:8b:50:d5:3c:6b:87:74:d9:40:19:f4:d9:
ed:21:44:f8:d7:cb:24:cb:b4:28:92:79:4b:49:be:
f5:4e:16:24:e7:6a:27:4c:bd:02:5f:d6:64:c5:73:
ac:48:3c:42:49:a0:62:8a:4c:d8:fc:6c:e5:59:ba:
3d:a4:4b:18:74:ca:43:46:b9:37:26:fb:33:dd:83:
3a:22:44:11:43:2c:10:85:cf:15:5b:c5:3c:5c:a7:
98:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:8A:BF:D6:BD:E9:79:17:76:8F:CA:8B:8C:D3:60:3C:F1:09:D7:3D
X509v3 Authority Key Identifier:
keyid:9D:20:28:08:D1:F9:14:55:5E:1B:D5:9C:16:77:28:7F:F9:B3:B5:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSAoCNH5FFVeG9WcFncof_mztZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/a5c069-8061-4dee-9568-880b2df57f25/1/nSAoCNH5FFVeG9WcFncof_mztZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:32:34:51:89:ea:21:96:d3:f6:e1:b8:75:ff:20:17:b8:87:
82:b6:3e:6c:3a:ae:ec:96:91:eb:96:30:92:6e:67:2f:a3:fe:
77:71:57:07:d0:6d:d0:51:8d:52:be:b8:9c:51:d8:e5:79:25:
7c:df:f7:d1:19:a1:2d:b3:16:e7:85:14:27:a3:93:c0:7c:3d:
32:ab:15:71:18:04:14:c5:58:18:01:cd:b8:63:14:3d:e3:34:
7c:6d:9a:6c:28:fe:d3:81:95:bf:0d:ef:19:be:69:dc:cb:d6:
14:80:f9:2f:78:71:37:22:f9:61:d2:47:af:60:3e:f1:36:28:
88:72:39:8d:ce:4a:c2:7f:1c:b6:d7:9d:80:93:fc:77:51:b6:
f2:7b:fb:09:9d:c6:c5:ad:53:cd:99:78:e0:c5:e9:5c:c3:87:
39:61:74:76:91:42:db:7a:df:db:39:14:e6:2e:a5:ac:de:e0:
2a:dc:ee:2e:65:9f:2d:6a:fa:5b:b6:56:8f:de:e6:90:d0:db:
1d:06:15:91:0e:c9:3a:a0:72:49:dc:d4:dd:45:eb:61:73:a8:
af:b4:1a:96:29:42:5b:25:22:2f:4c:e5:98:17:21:5e:a4:a5:
40:bc:4c:75:e3:b2:ba:ae:ae:b4:b0:15:ae:fc:76:95:13:a8:
30:66:16:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tUjDhlSJSrF/bRvZ7VWt7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjAyODA4ZDFmOTE0NTU1ZTFiZDU5YzE2NzcyODdmZjli
M2I1OTAwHhcNMjYwNzI5MTAwMTEyWhcNMjYwNzMwMTAwMTEyWjAzMTEwLwYDVQQD
Eyg4ODhhYmZkNmJkZTk3OTE3NzY4ZmNhOGI4Y2QzNjAzY2YxMDlkNzNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5whdzVbiAIngh25mHREehq1bpomH
IMI9eFOpNE5v6HWlB6J34FIp+HKoeQzZcfo+OjJyqVxZM5Y3sky8ptu2EpYCc9KW
XBcR6drFWH5ImBjXRW9xJMLwaYB7PAHpsYmMJOLWuDHpCjHP2FvyWADQQSQq4Knt
AL2FQR+ymNPYTZxW7aHMeQmtlcS1o32zl79VBO0JeXakksJqhMmNfe/9JyeY5FjA
VPqLUNU8a4d02UAZ9NntIUT418sky7QoknlLSb71ThYk52onTL0CX9ZkxXOsSDxC
SaBiikzY/GzlWbo9pEsYdMpDRrk3Jvsz3YM6IkQRQywQhc8VW8U8XKeYCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIiKv9a96XkXdo/Ki4zTYDzxCdc9MB8GA1UdIwQY
MBaAFJ0gKAjR+RRVXhvVnBZ3KH/5s7WQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1Njgt
ODgwYjJkZjU3ZjI1LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9hNWMwNjktODA2MS00ZGVlLTk1NjgtODgwYjJkZjU3ZjI1
LzEvblNBb0NOSDVGRlZlRzlXY0ZuY29mX216dFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoTI0UYnq
IZbT9uG4df8gF7iHgrY+bDqu7JaR65Ywkm5nL6P+d3FXB9Bt0FGNUr64nFHY5Xkl
fN/30RmhLbMW54UUJ6OTwHw9MqsVcRgEFMVYGAHNuGMUPeM0fG2abCj+04GVvw3v
Gb5p3MvWFID5L3hxNyL5YdJHr2A+8TYoiHI5jc5Kwn8cttedgJP8d1G28nv7CZ3G
xa1TzZl44MXpXMOHOWF0dpFC23rf2zkU5i6lrN7gKtzuLmWfLWr6W7ZWj97mkNDb
HQYVkQ7JOqBySdzU3UXrYXOor7QalilCWyUiL0zlmBchXqSlQLxMdeOyuq6utLAV
rvx2lROoMGYW+A==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:22 2026 by rpki-client