Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
File: Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft (raw, json)
Hash identifier: t3GAiFFTk7NkXtJV6xLoUTweP6yeKjJDw9PSwlgs1DU=
Subject key identifier: 6D:D1:73:A1:38:0C:9F:C2:0F:85:51:73:9C:47:09:DD:EF:9E:DD:2A
Authority key identifier: 36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
Certificate issuer: /CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Certificate serial: 01A0BCC2072B585667903CA00A8723FB1DF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
Manifest number: DB
Signing time: Sun 20 Sep 2026 03:00:27 +0000
Manifest this update: Sun 20 Sep 2026 03:00:27 +0000
Manifest next update: Mon 21 Sep 2026 03:00:27 +0000
Files and hashes: 1: Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl (hash: LbiMy4GlEoVGUrWABhyCm1ZlU4lYHqPVzYsW/eH8hgk=)
2: a4y_KA-8E2Xvk9Flsk-gKj60kM0.roa (hash: fmCY+qTeS8bDabH+aUH61mLLbXxPfSRcAGvLlcj8OlM=)
3: oHsAIsY3K_cptDSyVkp0H0HXWxg.asa (hash: O1iswhvBCi8e0ADs7zbMpKEtTvdXvwFLXzFqvApLrkw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 03:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:bc:c2:07:2b:58:56:67:90:3c:a0:0a:87:23:fb:1d:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367e3e632229c7b2539ce5006344d6ada5f7bc12
Validity
Not Before: Sep 20 03:00:27 2026 GMT
Not After : Sep 21 03:00:27 2026 GMT
Subject: CN=6dd173a1380c9fc20f8551739c4709ddef9edd2a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:bb:a8:65:35:f4:2e:31:11:41:30:68:d9:e7:
94:75:13:23:18:f8:dd:9d:e6:9d:2a:f3:be:c0:7b:
93:8a:28:1d:31:f4:9f:e5:98:c5:48:3d:8d:47:95:
0c:18:3d:20:87:92:47:12:34:06:23:96:1c:6a:3a:
dc:c2:14:c3:08:6f:50:48:3a:d1:29:53:30:8d:ed:
2f:d1:98:0d:fd:79:c1:ad:27:a6:84:bc:ce:54:9d:
52:87:5e:c4:14:1f:7f:41:df:17:97:2a:07:85:ab:
36:36:2d:69:b2:1a:d2:af:fd:9e:f5:8b:8e:f8:d9:
74:a9:6d:02:07:e4:10:8a:f0:3d:dc:72:b5:2a:40:
ae:60:35:90:7d:68:46:1a:35:74:1f:ee:c8:43:8e:
06:04:8f:c9:13:65:69:a2:5d:16:54:65:b0:36:32:
5f:83:67:cd:b2:a4:52:9d:33:af:f9:04:a2:1b:2a:
bc:00:c6:33:dd:b5:f6:12:ac:69:88:88:25:54:9d:
a2:0e:07:54:48:97:09:84:a4:0b:00:4f:12:02:02:
2a:20:9c:53:e9:47:97:b0:00:32:29:4d:9c:0c:41:
ea:3a:9e:f1:bb:0c:3d:ac:fb:77:53:38:69:e7:db:
f0:68:68:62:de:68:c9:da:57:37:75:43:21:38:d7:
c0:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:D1:73:A1:38:0C:9F:C2:0F:85:51:73:9C:47:09:DD:EF:9E:DD:2A
X509v3 Authority Key Identifier:
keyid:36:7E:3E:63:22:29:C7:B2:53:9C:E5:00:63:44:D6:AD:A5:F7:BC:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nn4-YyIpx7JTnOUAY0TWraX3vBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/a6c7eb-b72f-4833-a528-6b49a3893c79/1/Nn4-YyIpx7JTnOUAY0TWraX3vBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:33:9e:b6:75:f6:6c:62:07:81:ad:23:3e:c5:93:d8:bf:c4:
20:ff:a2:0c:a6:c0:5a:2d:01:12:78:d9:56:e5:89:9c:34:9e:
22:cf:c5:a8:45:0d:2d:9e:2f:26:07:9f:57:c9:c3:6b:9f:d9:
ce:51:cd:49:0c:e5:c0:64:6a:ad:70:0c:a2:f9:9f:91:95:85:
6f:a4:0b:f0:f6:d4:bb:41:2e:c9:56:aa:19:4c:4c:4a:5e:40:
91:2f:24:18:b6:53:fa:90:9c:6f:b3:1a:50:4a:7d:69:21:4a:
f7:f3:d0:04:12:19:a5:83:5c:6c:93:87:df:e8:b3:24:8b:a4:
58:6a:7a:a3:2a:aa:0c:b7:61:96:1d:55:ca:7c:5b:a2:0b:65:
c2:8b:14:ac:a2:38:84:4d:7b:54:f7:81:d0:2e:b9:38:71:32:
ff:7e:bd:fe:a7:11:0d:e0:a0:5b:ad:36:8e:58:bb:c5:bb:92:
21:28:ff:e1:80:0f:e4:92:6f:0e:bc:b2:ef:3f:d4:82:80:dc:
38:fc:8f:2a:7f:5a:a4:60:07:c9:b6:55:24:04:8c:a1:3e:d5:
e0:22:77:00:af:26:fd:54:b2:27:30:b3:44:6d:58:f6:aa:21:
2f:1c:82:69:b1:13:32:83:c1:d0:6c:02:a2:20:7d:40:c5:ff:
cf:d6:d2:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaC8wgcrWFZnkDygCocj+x3wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2N2UzZTYzMjIyOWM3YjI1MzljZTUwMDYzNDRkNmFkYTVm
N2JjMTIwHhcNMjYwOTIwMDMwMDI3WhcNMjYwOTIxMDMwMDI3WjAzMTEwLwYDVQQD
Eyg2ZGQxNzNhMTM4MGM5ZmMyMGY4NTUxNzM5YzQ3MDlkZGVmOWVkZDJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4buoZTX0LjERQTBo2eeUdRMjGPjd
neadKvO+wHuTiigdMfSf5ZjFSD2NR5UMGD0gh5JHEjQGI5YcajrcwhTDCG9QSDrR
KVMwje0v0ZgN/XnBrSemhLzOVJ1Sh17EFB9/Qd8XlyoHhas2Ni1pshrSr/2e9YuO
+Nl0qW0CB+QQivA93HK1KkCuYDWQfWhGGjV0H+7IQ44GBI/JE2Vpol0WVGWwNjJf
g2fNsqRSnTOv+QSiGyq8AMYz3bX2EqxpiIglVJ2iDgdUSJcJhKQLAE8SAgIqIJxT
6UeXsAAyKU2cDEHqOp7xuww9rPt3Uzhp59vwaGhi3mjJ2lc3dUMhONfAQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG3Rc6E4DJ/CD4VRc5xHCd3vnt0qMB8GA1UdIwQY
MBaAFDZ+PmMiKceyU5zlAGNE1q2l97wSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm40LVl5SXB4N0pUbk9VQVkwVFdyYVgzdkJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1Mjgt
NmI0OWEzODkzYzc5LzEvTm40LVl5SXB4N0pUbk9VQVkwVFdyYVgzdkJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9hNmM3ZWItYjcyZi00ODMzLWE1MjgtNmI0OWEzODkzYzc5
LzEvTm40LVl5SXB4N0pUbk9VQVkwVFdyYVgzdkJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAezOetnX2
bGIHga0jPsWT2L/EIP+iDKbAWi0BEnjZVuWJnDSeIs/FqEUNLZ4vJgefV8nDa5/Z
zlHNSQzlwGRqrXAMovmfkZWFb6QL8PbUu0EuyVaqGUxMSl5AkS8kGLZT+pCcb7Ma
UEp9aSFK9/PQBBIZpYNcbJOH3+izJIukWGp6oyqqDLdhlh1VynxbogtlwosUrKI4
hE17VPeB0C65OHEy/369/qcRDeCgW602jli7xbuSISj/4YAP5JJvDryy7z/UgoDc
OPyPKn9apGAHybZVJASMoT7V4CJ3AK8m/VSyJzCzRG1Y9qohLxyCabETMoPB0GwC
oiB9QMX/z9bSWA==
-----END CERTIFICATE-----
Generated at Sun Sep 20 12:54:35 2026 by rpki-client