Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: 2R6W1HZ1AmVyOhibZr+Or29etoTHWCcn6DtQmKR+reU=
Subject key identifier: B9:EE:DC:E4:E5:A6:83:1A:2E:AD:CD:B2:9F:5B:C3:1E:B3:6E:70:76
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 019D9961F182D76CFC32C44871F4AE53D173
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 0FA2
Signing time: Fri 17 Apr 2026 03:00:25 +0000
Manifest this update: Fri 17 Apr 2026 03:00:25 +0000
Manifest next update: Sat 18 Apr 2026 03:00:25 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: 3U6o5MrL73+cTU2L0ONGI6lJlp+wdM0VnmA9aVrC3zc=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:f1:82:d7:6c:fc:32:c4:48:71:f4:ae:53:d1:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Apr 17 03:00:25 2026 GMT
Not After : Apr 18 03:00:25 2026 GMT
Subject: CN=b9eedce4e5a6831a2eadcdb29f5bc31eb36e7076
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:da:48:db:fa:85:de:90:a7:70:f5:6c:38:e8:
19:a3:18:6d:08:7e:f9:4c:33:10:ba:4f:13:b9:21:
46:d9:90:3b:15:e4:30:39:db:87:bb:8a:90:65:a2:
1d:b4:09:f2:83:b1:a1:c2:8f:1a:4b:60:19:45:b8:
a8:c3:88:d2:77:78:86:e8:a0:bc:4e:99:3f:a2:27:
28:62:0d:98:54:58:cb:e8:01:de:6b:8b:f8:f8:27:
21:8f:29:22:30:c3:18:7e:2a:d1:b7:96:6e:d4:f7:
3a:06:15:26:b5:60:72:e8:d5:71:b4:7f:bd:fa:09:
02:07:98:9c:01:61:2c:58:47:fd:f2:61:47:15:b6:
20:6c:1a:0d:56:b4:a4:f0:13:45:e8:22:30:55:3a:
a5:1e:a8:fd:4f:e9:74:1f:be:bc:32:96:d6:1b:8b:
c7:5b:5e:5b:10:ec:d6:2c:68:b3:ff:a8:a9:cb:4c:
71:59:0e:00:9d:e1:35:16:9a:81:04:83:17:2c:1c:
f9:8d:c9:43:87:5f:7d:7b:1f:c4:e3:26:e6:ec:c0:
10:6c:cf:16:c5:13:ef:84:55:f4:6a:92:d6:3a:5a:
8e:b0:db:20:03:a4:a0:26:31:5a:15:a3:27:a1:5b:
bd:b7:36:16:33:03:33:7a:d7:a7:1b:a4:81:c8:d7:
dc:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:EE:DC:E4:E5:A6:83:1A:2E:AD:CD:B2:9F:5B:C3:1E:B3:6E:70:76
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:54:11:aa:38:ca:6f:49:eb:fc:5e:35:51:a5:ec:fc:76:4c:
6b:f8:03:a9:56:18:bc:fd:49:e1:77:04:f1:a3:ea:72:57:58:
8d:17:44:40:ca:4d:4e:3a:13:c5:c6:d1:0f:db:f5:87:07:4b:
f9:92:8c:b3:8a:2b:5f:2c:18:2e:8b:0a:07:5c:3c:39:47:20:
03:2c:d5:f0:a7:56:36:79:47:ac:43:a6:83:f7:87:2d:7a:24:
91:c9:1d:d5:52:77:99:75:a1:be:dc:c1:72:30:08:9a:39:ea:
1f:3b:f9:0a:a8:dc:23:b5:b8:24:31:74:e8:57:9e:41:8d:7b:
ea:2c:58:15:c4:87:68:0c:80:9c:3b:89:cc:cc:e0:a5:33:d2:
17:e8:59:e1:9a:22:1a:0d:1f:9a:46:39:dd:38:fc:55:96:33:
f7:31:9f:06:ad:a2:60:ac:f6:af:ac:e9:e8:20:64:5e:97:c6:
37:a0:d8:0a:30:3b:ea:b8:fc:ec:0e:f7:4e:d0:2e:ae:b3:1b:
3c:b9:89:e6:d2:79:d6:71:83:48:7c:fa:65:ef:88:5e:9d:a5:
43:e7:4c:94:f8:22:bb:51:b2:a2:95:cc:9b:65:d9:f5:b2:35:
19:53:c4:65:24:bd:06:ee:d6:3a:d6:c5:83:7b:2a:ad:16:50:
5b:99:9c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYfGC12z8MsRIcfSuU9FzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni
MDY5ZTUwHhcNMjYwNDE3MDMwMDI1WhcNMjYwNDE4MDMwMDI1WjAzMTEwLwYDVQQD
EyhiOWVlZGNlNGU1YTY4MzFhMmVhZGNkYjI5ZjViYzMxZWIzNmU3MDc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9pI2/qF3pCncPVsOOgZoxhtCH75
TDMQuk8TuSFG2ZA7FeQwOduHu4qQZaIdtAnyg7Ghwo8aS2AZRbiow4jSd3iG6KC8
Tpk/oicoYg2YVFjL6AHea4v4+CchjykiMMMYfirRt5Zu1Pc6BhUmtWBy6NVxtH+9
+gkCB5icAWEsWEf98mFHFbYgbBoNVrSk8BNF6CIwVTqlHqj9T+l0H768MpbWG4vH
W15bEOzWLGiz/6ipy0xxWQ4AneE1FpqBBIMXLBz5jclDh199ex/E4ybm7MAQbM8W
xRPvhFX0apLWOlqOsNsgA6SgJjFaFaMnoVu9tzYWMwMzetenG6SByNfcowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnu3OTlpoMaLq3Nsp9bwx6zbnB2MB8GA1UdIwQY
MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt
NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm
LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFVQRqjjK
b0nr/F41UaXs/HZMa/gDqVYYvP1J4XcE8aPqcldYjRdEQMpNTjoTxcbRD9v1hwdL
+ZKMs4orXywYLosKB1w8OUcgAyzV8KdWNnlHrEOmg/eHLXokkckd1VJ3mXWhvtzB
cjAImjnqHzv5CqjcI7W4JDF06FeeQY176ixYFcSHaAyAnDuJzMzgpTPSF+hZ4Zoi
Gg0fmkY53Tj8VZYz9zGfBq2iYKz2r6zp6CBkXpfGN6DYCjA76rj87A73TtAurrMb
PLmJ5tJ51nGDSHz6Ze+IXp2lQ+dMlPgiu1GyopXMm2XZ9bI1GVPEZSS9Bu7WOtbF
g3sqrRZQW5mc0Q==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:09 2026 by rpki-client