Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
File: NnRl_9ujwFwhvlsV8NkV78ywaeU.mft (raw, json)
Hash identifier: fA9kiKyqlM5s3ohBfZg33KkgOjGRdzUXFfvyw9lRdbo=
Subject key identifier: 88:36:5D:90:23:99:09:F7:6E:BE:C6:EF:1C:A4:2B:F1:39:E5:0D:24
Authority key identifier: 36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
Certificate issuer: /CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Certificate serial: 01A0CA470464CD65275AF071E580AEBA0846
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
Manifest number: 1149
Signing time: Tue 22 Sep 2026 18:00:46 +0000
Manifest this update: Tue 22 Sep 2026 18:00:46 +0000
Manifest next update: Wed 23 Sep 2026 18:00:46 +0000
Files and hashes: 1: NnRl_9ujwFwhvlsV8NkV78ywaeU.crl (hash: JozQnJCYgiPSP9rLh/DZGQGIg4/ucdyuRe1RizYAI7I=)
2: d4grg2tvuefsoHmD0ZdaVonf75c.roa (hash: OXvdnvF2UW52gDEgFTfQ3VspznPh5gZEegyP1xQRgjQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:47:04:64:cd:65:27:5a:f0:71:e5:80:ae:ba:08:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=367465ffdba3c05c21be5b15f0d915efccb069e5
Validity
Not Before: Sep 22 18:00:46 2026 GMT
Not After : Sep 23 18:00:46 2026 GMT
Subject: CN=88365d90239909f76ebec6ef1ca42bf139e50d24
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:1d:c6:b1:86:b1:06:1b:81:f3:40:70:4a:5e:
76:01:49:81:0c:26:91:d6:20:c1:73:61:4a:82:69:
95:96:19:05:6c:ef:98:91:5b:fd:a2:28:75:25:9a:
63:68:c2:7c:d5:cb:77:37:cf:fa:05:7a:f8:38:02:
be:a5:aa:e1:4e:e0:c7:82:fc:99:11:00:f8:ae:1c:
8a:c1:43:1e:06:49:25:8a:31:56:f0:da:5e:40:0a:
b4:7f:b6:df:bd:0a:e0:e9:5f:cf:46:43:d8:4e:53:
a1:b1:9d:e1:10:89:dd:24:7c:45:1f:09:bc:6a:78:
8a:f6:05:33:d6:66:3c:cf:a5:5b:d2:fa:05:86:49:
03:90:0c:2c:60:93:ca:a6:6a:66:79:f3:0e:69:b7:
b2:e6:7c:e8:18:54:2f:8d:4a:4b:f8:dd:be:3e:37:
93:dc:ad:a2:20:bc:08:8b:6d:47:44:94:bc:a7:fb:
84:ae:44:b2:e4:9e:21:28:32:41:ff:45:e1:eb:79:
ac:f4:c3:c0:21:c2:be:23:93:65:be:49:36:24:30:
59:2b:1a:88:5f:61:15:e6:d0:f6:c6:09:9b:ec:8c:
41:3f:74:7b:d7:92:51:33:2f:b1:fe:05:be:bc:d6:
d5:30:37:a3:2b:45:82:36:86:63:d9:6d:03:c3:5c:
e7:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:36:5D:90:23:99:09:F7:6E:BE:C6:EF:1C:A4:2B:F1:39:E5:0D:24
X509v3 Authority Key Identifier:
keyid:36:74:65:FF:DB:A3:C0:5C:21:BE:5B:15:F0:D9:15:EF:CC:B0:69:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NnRl_9ujwFwhvlsV8NkV78ywaeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/75ca1a-6828-4e6d-9fea-5e47cf199dff/1/NnRl_9ujwFwhvlsV8NkV78ywaeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:1a:1d:c0:59:ae:05:78:79:8c:c0:1b:91:74:af:50:f5:5f:
a9:ef:35:f6:74:53:4c:6c:14:85:33:17:de:01:05:c3:11:80:
57:23:98:0d:f9:5c:0f:2a:c3:c4:02:e6:98:5c:12:e5:e9:1f:
53:3e:39:88:83:99:a5:82:ce:c8:44:fa:1e:b1:9c:e2:7e:7f:
c5:15:66:04:32:05:af:d4:dd:25:47:76:bc:6f:68:55:b9:93:
84:a7:02:ba:ec:64:63:ac:08:95:9e:1b:9b:8c:0e:b3:99:8d:
49:5f:78:ee:b4:74:90:1c:f1:b7:e0:b7:e6:fa:48:3a:2a:ad:
28:7f:89:e7:a4:ac:10:3f:43:7c:46:e5:10:c4:29:98:f2:e7:
7f:d8:16:82:08:49:84:65:a7:05:1a:b4:e2:08:07:bc:1f:9c:
be:90:65:ee:28:f5:b2:0b:1d:e8:1f:90:50:b0:38:b5:e4:95:
9f:00:2a:ab:60:61:de:64:6f:5a:a5:55:18:04:b7:62:01:74:
af:7e:c6:9b:37:46:38:66:d2:3b:25:74:13:c6:40:a3:5d:b4:
e2:44:b4:77:72:de:4a:fe:72:b6:1f:fc:96:ce:c9:e7:86:86:
1a:bd:c8:8a:6f:df:9c:76:62:01:76:16:03:c9:a8:ce:1c:83:
a8:6f:ed:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDKRwRkzWUnWvBx5YCuughGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2NzQ2NWZmZGJhM2MwNWMyMWJlNWIxNWYwZDkxNWVmY2Ni
MDY5ZTUwHhcNMjYwOTIyMTgwMDQ2WhcNMjYwOTIzMTgwMDQ2WjAzMTEwLwYDVQQD
Eyg4ODM2NWQ5MDIzOTkwOWY3NmViZWM2ZWYxY2E0MmJmMTM5ZTUwZDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3R3GsYaxBhuB80BwSl52AUmBDCaR
1iDBc2FKgmmVlhkFbO+YkVv9oih1JZpjaMJ81ct3N8/6BXr4OAK+parhTuDHgvyZ
EQD4rhyKwUMeBkklijFW8NpeQAq0f7bfvQrg6V/PRkPYTlOhsZ3hEIndJHxFHwm8
aniK9gUz1mY8z6Vb0voFhkkDkAwsYJPKpmpmefMOabey5nzoGFQvjUpL+N2+PjeT
3K2iILwIi21HRJS8p/uErkSy5J4hKDJB/0Xh63ms9MPAIcK+I5Nlvkk2JDBZKxqI
X2EV5tD2xgmb7IxBP3R715JRMy+x/gW+vNbVMDejK0WCNoZj2W0Dw1zntQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIg2XZAjmQn3br7G7xykK/E55Q0kMB8GA1UdIwQY
MBaAFDZ0Zf/bo8BcIb5bFfDZFe/MsGnlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEt
NWU0N2NmMTk5ZGZmLzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi83NWNhMWEtNjgyOC00ZTZkLTlmZWEtNWU0N2NmMTk5ZGZm
LzEvTm5SbF85dWp3RndodmxzVjhOa1Y3OHl3YWVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMRodwFmu
BXh5jMAbkXSvUPVfqe819nRTTGwUhTMX3gEFwxGAVyOYDflcDyrDxALmmFwS5ekf
Uz45iIOZpYLOyET6HrGc4n5/xRVmBDIFr9TdJUd2vG9oVbmThKcCuuxkY6wIlZ4b
m4wOs5mNSV947rR0kBzxt+C35vpIOiqtKH+J56SsED9DfEblEMQpmPLnf9gWgghJ
hGWnBRq04ggHvB+cvpBl7ij1sgsd6B+QULA4teSVnwAqq2Bh3mRvWqVVGAS3YgF0
r37GmzdGOGbSOyV0E8ZAo1204kS0d3LeSv5yth/8ls7J54aGGr3Iim/fnHZiAXYW
A8mozhyDqG/tlw==
-----END CERTIFICATE-----
Generated at Tue Sep 22 23:19:22 2026 by rpki-client