Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
File: nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft (raw, json)
Hash identifier: 7V8DwjGQEbLl/GNZjbiuEu2uVQ4fpEVWnV46f6EtsYs=
Subject key identifier: D5:68:B2:B1:9F:24:33:FF:67:B5:B1:BE:8F:52:CC:5D:37:0A:9D:A7
Authority key identifier: 9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
Certificate issuer: /CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Certificate serial: 019D9B8761D32A0806BABD74FFA8A53CC1F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
Manifest number: 0917
Signing time: Fri 17 Apr 2026 13:00:33 +0000
Manifest this update: Fri 17 Apr 2026 13:00:33 +0000
Manifest next update: Sat 18 Apr 2026 13:00:33 +0000
Files and hashes: 1: nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl (hash: 58YlRoADemSJeYGdAhdZ0M3Xs8+Tx22XxGc3n+K4mD4=)
2: rZZQYoQ-ii1ULymg1gCODzd0s4o.roa (hash: sgyKwwfW2KwaDdlaRSgHtW+s4rE3CgoGYd/sjsljqxY=)
3: vJI0zjSupe8L2btdgObTHN_0uMI.roa (hash: t1tDTpvOlNLAVNfscJvGfDoocyToS/t9xpe8zMWNV3c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:61:d3:2a:08:06:ba:bd:74:ff:a8:a5:3c:c1:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb3143a2e73f209e69d97c4b8f78cda5f437005
Validity
Not Before: Apr 17 13:00:33 2026 GMT
Not After : Apr 18 13:00:33 2026 GMT
Subject: CN=d568b2b19f2433ff67b5b1be8f52cc5d370a9da7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ba:a0:da:21:0f:c7:7b:ab:91:c1:76:f8:ab:
96:f9:ca:92:77:e1:94:bc:bc:cd:45:8c:31:53:d6:
ca:d6:96:fb:f9:8d:5d:db:93:0b:3b:99:32:55:7c:
75:29:5e:9d:a5:13:ba:d6:be:db:30:87:dc:a9:47:
4d:92:e1:18:70:d6:32:fb:cb:9d:02:ac:4f:9c:78:
df:ce:16:e0:20:8f:e4:80:f3:1a:39:dd:62:47:20:
21:52:b6:6a:99:ed:ab:63:17:44:01:e1:67:a4:08:
1f:18:17:f4:76:ea:aa:10:da:34:61:90:06:2e:d7:
e2:2f:a5:60:39:63:d6:fe:7d:fd:63:43:55:80:9f:
79:9e:5b:8e:61:f5:c7:58:1a:9b:04:4b:1d:33:9a:
72:0b:d0:eb:98:89:8b:b7:6f:e6:d5:5f:dd:61:90:
bf:e9:6d:6c:3f:e2:43:43:25:c5:40:34:4d:b5:23:
2b:21:14:40:9b:46:74:90:cd:2f:96:df:fa:30:98:
1c:70:9f:f7:72:0c:e3:49:51:df:24:6c:6d:d7:19:
71:0f:a8:a3:38:10:85:6a:96:01:16:65:17:13:ad:
b0:36:5d:7c:6c:20:86:a6:39:56:a4:51:5f:9d:7c:
c4:3d:68:19:04:67:fc:ab:a3:5e:39:c7:27:71:11:
cd:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:68:B2:B1:9F:24:33:FF:67:B5:B1:BE:8F:52:CC:5D:37:0A:9D:A7
X509v3 Authority Key Identifier:
keyid:9E:B3:14:3A:2E:73:F2:09:E6:9D:97:C4:B8:F7:8C:DA:5F:43:70:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrMUOi5z8gnmnZfEuPeM2l9DcAU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9faf24-05e1-4db9-9aaf-501618411c76/1/nrMUOi5z8gnmnZfEuPeM2l9DcAU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:97:4c:34:ee:59:09:ca:87:b0:12:d3:73:fb:19:a4:5c:7f:
34:ff:a2:c2:50:eb:b8:fa:71:56:e3:a6:89:91:ca:7c:25:17:
a8:47:e6:f4:82:1b:52:87:0a:b8:71:6f:35:00:3f:81:06:ae:
e3:e5:2b:52:55:8f:87:ca:13:ce:1c:8c:20:8a:8a:e6:ba:27:
45:f6:70:0a:71:d7:bc:1a:df:e3:0f:25:03:84:3b:80:ab:3a:
33:92:9a:c0:b0:f7:de:30:e0:cb:8d:94:ed:dd:ea:5b:5e:4c:
a8:61:89:ec:b0:3a:08:e9:b5:0e:98:d4:f4:4c:bd:0a:1b:e6:
90:ee:c8:43:fc:65:3d:41:f7:8e:76:63:b8:10:a8:8b:77:11:
54:15:25:12:cc:5e:53:97:a7:6a:ac:9d:90:32:00:05:b0:e5:
e6:a5:07:dc:92:b5:6a:3c:46:49:c6:58:e0:4b:1f:7b:22:c8:
97:7a:ac:dd:1c:f0:b1:3f:c7:ce:c7:33:e1:3c:c3:da:53:38:
40:68:1a:89:6a:25:2c:4a:bd:43:ac:b0:86:8d:fe:af:a9:92:
8d:92:66:9a:6e:20:bd:9d:71:79:47:77:18:c4:b7:e1:c2:c6:
22:25:0d:8b:93:34:ea:d5:ef:61:ad:08:42:10:85:9b:d3:1d:
31:4c:cf:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh2HTKggGur10/6ilPMHyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllYjMxNDNhMmU3M2YyMDllNjlkOTdjNGI4Zjc4Y2RhNWY0
MzcwMDUwHhcNMjYwNDE3MTMwMDMzWhcNMjYwNDE4MTMwMDMzWjAzMTEwLwYDVQQD
EyhkNTY4YjJiMTlmMjQzM2ZmNjdiNWIxYmU4ZjUyY2M1ZDM3MGE5ZGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApbqg2iEPx3urkcF2+KuW+cqSd+GU
vLzNRYwxU9bK1pb7+Y1d25MLO5kyVXx1KV6dpRO61r7bMIfcqUdNkuEYcNYy+8ud
AqxPnHjfzhbgII/kgPMaOd1iRyAhUrZqme2rYxdEAeFnpAgfGBf0duqqENo0YZAG
LtfiL6VgOWPW/n39Y0NVgJ95nluOYfXHWBqbBEsdM5pyC9DrmImLt2/m1V/dYZC/
6W1sP+JDQyXFQDRNtSMrIRRAm0Z0kM0vlt/6MJgccJ/3cgzjSVHfJGxt1xlxD6ij
OBCFapYBFmUXE62wNl18bCCGpjlWpFFfnXzEPWgZBGf8q6NeOccncRHNEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNVosrGfJDP/Z7Wxvo9SzF03Cp2nMB8GA1UdIwQY
MBaAFJ6zFDouc/IJ5p2XxLj3jNpfQ3AFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYt
NTAxNjE4NDExYzc2LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85ZmFmMjQtMDVlMS00ZGI5LTlhYWYtNTAxNjE4NDExYzc2
LzEvbnJNVU9pNXo4Z25tblpmRXVQZU0ybDlEY0FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHZdMNO5Z
CcqHsBLTc/sZpFx/NP+iwlDruPpxVuOmiZHKfCUXqEfm9IIbUocKuHFvNQA/gQau
4+UrUlWPh8oTzhyMIIqK5ronRfZwCnHXvBrf4w8lA4Q7gKs6M5KawLD33jDgy42U
7d3qW15MqGGJ7LA6COm1DpjU9Ey9ChvmkO7IQ/xlPUH3jnZjuBCoi3cRVBUlEsxe
U5enaqydkDIABbDl5qUH3JK1ajxGScZY4EsfeyLIl3qs3RzwsT/Hzscz4TzD2lM4
QGgaiWolLEq9Q6ywho3+r6mSjZJmmm4gvZ1xeUd3GMS34cLGIiUNi5M06tXvYa0I
QhCFm9MdMUzPkA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:35:29 2026 by rpki-client