Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
File: n-mO5s-z-6g7lyrhJlO12fxwcC4.mft (raw, json)
Hash identifier: G4w7jDZPGQmXX34O4NQzSgMVP0jrcENlzdDbyPnwLgc=
Subject key identifier: FA:5C:78:24:67:2C:ED:61:55:88:48:8D:68:C2:2C:4F:C4:A4:54:8C
Authority key identifier: 9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
Certificate issuer: /CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Certificate serial: 019D9AAC2F68A48F2B8C6195909D02BAEB81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
Manifest number: 0F96
Signing time: Fri 17 Apr 2026 09:01:08 +0000
Manifest this update: Fri 17 Apr 2026 09:01:08 +0000
Manifest next update: Sat 18 Apr 2026 09:01:08 +0000
Files and hashes: 1: Qqa4Xw7uDETbeUhxEJYV1RcGxGI.roa (hash: jln1MbdeKaOyBgT7+wfLZLWLANQbRohXKREO1JAvQQU=)
2: j6yoIF9AWUp9UFDKXH65rXLEiss.roa (hash: YAXw+V8+kO2QpRAGh9PLZOBVimIgU4loSZgv6+jbYAg=)
3: n-mO5s-z-6g7lyrhJlO12fxwcC4.crl (hash: wpU4pK+b80BNLs5pRLDsNMMQgZck/T2CbYHOBhJlnXk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2f:68:a4:8f:2b:8c:61:95:90:9d:02:ba:eb:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe98ee6cfb3fba83b972ae12653b5d9fc70702e
Validity
Not Before: Apr 17 09:01:08 2026 GMT
Not After : Apr 18 09:01:08 2026 GMT
Subject: CN=fa5c7824672ced615588488d68c22c4fc4a4548c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:93:75:90:49:b6:b2:65:76:b2:cf:49:b1:c0:
b4:e9:73:16:b6:e1:31:39:fd:a1:b1:3b:92:92:89:
b4:20:0a:b6:a1:8e:68:29:ea:51:97:cb:4b:e5:54:
36:e5:7d:62:cf:f9:41:68:7c:d4:a5:de:2f:e2:dc:
e7:a6:fb:07:97:b3:fe:b6:33:47:23:e3:c9:81:03:
6f:7b:ae:64:5a:d8:4c:c2:27:d2:6b:fc:ac:30:be:
8c:22:e3:6f:c3:ee:18:81:6a:64:24:30:b4:6d:6d:
2d:f9:31:a9:8a:0c:89:3d:f6:02:dd:35:0d:75:2e:
45:01:fe:28:c9:d7:43:9d:62:e1:bf:4b:2d:0a:35:
bf:3b:31:a5:0a:0f:9b:a1:95:bd:bf:07:06:db:81:
29:66:45:63:47:eb:06:c3:c0:4d:ca:b5:00:cd:39:
18:f0:19:94:30:45:4c:b9:be:1e:2f:db:09:8e:89:
24:d5:e6:b5:22:3a:55:79:c5:8f:f0:e6:0d:d7:81:
ad:fa:15:4c:b9:c6:2f:51:e2:24:9d:5a:e0:6b:4b:
92:07:da:78:bf:39:25:33:c6:80:0b:d6:39:80:7d:
89:03:52:33:1b:40:40:cd:75:86:0c:33:a0:ef:14:
e7:7c:6a:a1:b1:04:ea:24:82:6f:75:46:73:a6:69:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5C:78:24:67:2C:ED:61:55:88:48:8D:68:C2:2C:4F:C4:A4:54:8C
X509v3 Authority Key Identifier:
keyid:9F:E9:8E:E6:CF:B3:FB:A8:3B:97:2A:E1:26:53:B5:D9:FC:70:70:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-mO5s-z-6g7lyrhJlO12fxwcC4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/4a02af-d548-44cf-9df8-13f898bc7d0e/1/n-mO5s-z-6g7lyrhJlO12fxwcC4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:83:63:d5:9e:47:5b:6e:4d:0d:90:ea:c1:23:99:b0:12:1e:
d0:78:a6:e1:44:b8:b1:43:bd:e5:77:4d:81:aa:09:8b:10:c7:
30:23:98:3f:9e:80:3a:80:d0:2d:19:c8:d7:2f:8b:31:7d:ae:
72:b9:d1:2b:bc:03:92:ea:5b:aa:38:be:65:e6:f9:9d:04:cd:
e9:8b:a0:8f:1d:65:7b:0c:31:4c:74:9e:b3:a6:7b:d1:85:d0:
48:79:3b:db:54:3d:3e:4f:ef:3c:40:64:88:9f:a1:e3:a9:aa:
ea:94:bd:e5:5c:b0:61:f1:2e:21:b6:94:eb:20:85:56:68:53:
6c:b6:e9:1e:9c:a0:c0:55:aa:fd:0f:12:70:43:39:f6:fc:5e:
7c:74:58:0c:df:4f:91:c4:09:b7:46:d5:b6:16:7d:f7:7f:ca:
f0:dd:1c:66:55:af:32:c7:a4:25:5a:e9:50:d2:b5:9b:1d:4e:
40:3b:c3:ef:7c:5b:80:3f:2e:78:6d:e6:b8:10:cf:3f:b5:04:
09:59:d6:cb:9a:97:2e:01:24:8a:68:78:69:3f:35:87:80:05:
3e:df:6e:2d:b8:91:f4:7a:2d:3c:e7:7c:34:5e:5c:50:21:46:
6b:63:27:51:21:de:0e:f8:7d:dd:c6:f2:f4:18:e9:d9:0a:dd:
42:18:6f:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2arC9opI8rjGGVkJ0CuuuBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZTk4ZWU2Y2ZiM2ZiYTgzYjk3MmFlMTI2NTNiNWQ5ZmM3
MDcwMmUwHhcNMjYwNDE3MDkwMTA4WhcNMjYwNDE4MDkwMTA4WjAzMTEwLwYDVQQD
EyhmYTVjNzgyNDY3MmNlZDYxNTU4ODQ4OGQ2OGMyMmM0ZmM0YTQ1NDhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl5N1kEm2smV2ss9JscC06XMWtuEx
Of2hsTuSkom0IAq2oY5oKepRl8tL5VQ25X1iz/lBaHzUpd4v4tznpvsHl7P+tjNH
I+PJgQNve65kWthMwifSa/ysML6MIuNvw+4YgWpkJDC0bW0t+TGpigyJPfYC3TUN
dS5FAf4oyddDnWLhv0stCjW/OzGlCg+boZW9vwcG24EpZkVjR+sGw8BNyrUAzTkY
8BmUMEVMub4eL9sJjokk1ea1IjpVecWP8OYN14Gt+hVMucYvUeIknVrga0uSB9p4
vzklM8aAC9Y5gH2JA1IzG0BAzXWGDDOg7xTnfGqhsQTqJIJvdUZzpmmCVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPpceCRnLO1hVYhIjWjCLE/EpFSMMB8GA1UdIwQY
MBaAFJ/pjubPs/uoO5cq4SZTtdn8cHAuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgt
MTNmODk4YmM3ZDBlLzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS80YTAyYWYtZDU0OC00NGNmLTlkZjgtMTNmODk4YmM3ZDBl
LzEvbi1tTzVzLXotNmc3bHlyaEpsTzEyZnh3Y0M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPINj1Z5H
W25NDZDqwSOZsBIe0Him4US4sUO95XdNgaoJixDHMCOYP56AOoDQLRnI1y+LMX2u
crnRK7wDkupbqji+Zeb5nQTN6Yugjx1lewwxTHSes6Z70YXQSHk721Q9Pk/vPEBk
iJ+h46mq6pS95VywYfEuIbaU6yCFVmhTbLbpHpygwFWq/Q8ScEM59vxefHRYDN9P
kcQJt0bVthZ993/K8N0cZlWvMsekJVrpUNK1mx1OQDvD73xbgD8ueG3muBDPP7UE
CVnWy5qXLgEkimh4aT81h4AFPt9uLbiR9HotPOd8NF5cUCFGa2MnUSHeDvh93cby
9Bjp2QrdQhhvhg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:51:59 2026 by rpki-client