Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: fM37iP7+3Mzn4JsnJcuSGrhL5xOeNdJo0K2BUeOvrQo=
Subject key identifier: 14:7B:38:55:CC:6C:F0:7F:65:B6:D8:2D:A2:05:24:1E:3A:A1:09:44
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 01A1220A608C9B5AD492FE03FC1D17D5455F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 06B9
Signing time: Fri 09 Oct 2026 19:01:07 +0000
Manifest this update: Fri 09 Oct 2026 19:01:07 +0000
Manifest next update: Sat 10 Oct 2026 19:01:07 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: d7F5QlEGSgQ8Kj+ufECSSBf+gZfGGGYVa6c9GYMT2RM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 10 Oct 2026 13:28:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:22:0a:60:8c:9b:5a:d4:92:fe:03:fc:1d:17:d5:45:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Oct 9 19:01:07 2026 GMT
Not After : Oct 10 19:01:07 2026 GMT
Subject: CN=147b3855cc6cf07f65b6d82da205241e3aa10944
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8c:8a:9a:f8:fb:dd:61:72:fe:5c:45:b3:82:
c2:32:0e:3d:27:1f:ae:77:8d:1e:c8:60:a9:ac:ca:
19:70:50:9d:4a:11:3a:1f:a2:43:5f:12:b6:5d:7b:
b1:03:fe:f5:1d:7d:27:93:ae:19:33:e5:3c:dc:5d:
24:65:7d:35:6e:75:6f:01:f1:fb:68:fb:87:15:00:
b2:71:52:e1:4e:cc:e6:25:ce:15:17:dd:bd:f1:c9:
59:00:41:12:f1:03:89:32:b1:23:28:ff:6e:a4:5d:
38:18:91:77:08:ec:b7:4f:72:90:74:fc:c7:ff:0f:
8d:33:91:3a:23:9c:40:22:7c:77:84:a2:f3:28:9f:
af:87:b3:d4:38:83:03:c7:e8:f7:95:8a:5e:d9:89:
82:33:5c:7d:69:ac:d0:54:30:c6:63:75:7c:7b:37:
60:9c:d7:26:42:90:b4:7a:ea:97:68:e9:7c:c4:07:
0d:7c:78:e3:78:27:98:38:b5:ad:da:41:a3:ae:53:
6e:7b:04:2b:f5:db:e1:0c:eb:ee:43:81:b7:56:3f:
f7:f4:7c:a4:94:2d:e8:19:9d:b3:1c:b8:dc:7e:87:
cc:aa:e3:51:cf:14:d8:fd:3e:be:43:4f:52:a4:5d:
87:bc:2d:be:98:7e:98:05:14:3f:f7:bb:ee:25:3c:
32:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:7B:38:55:CC:6C:F0:7F:65:B6:D8:2D:A2:05:24:1E:3A:A1:09:44
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:71:fb:9c:65:8a:30:ac:bd:30:fa:bd:6e:36:a0:e2:8f:6e:
31:2c:95:63:93:1b:2c:48:1a:24:ce:c3:72:45:97:59:d2:20:
e0:dc:6d:d4:a9:04:fb:3e:20:96:b2:97:6e:7c:f1:7f:4e:b1:
66:45:ce:e3:b6:1d:62:d2:d3:49:a8:eb:4f:a8:16:61:bf:4a:
22:b9:96:49:c9:82:e4:3a:08:1d:ff:d4:1e:46:fe:13:83:67:
9a:9d:84:41:5f:e3:16:da:67:e7:95:02:ab:f6:8e:12:c4:21:
a4:3b:0d:19:e9:b6:88:be:2a:e3:80:04:30:8c:98:f6:40:ad:
ee:c2:10:4d:0f:aa:5f:a5:8c:30:88:39:2e:19:8a:ab:10:76:
77:bf:c3:de:22:9a:0f:7f:a3:ac:51:fb:8f:8f:23:5c:4d:56:
37:9d:38:ac:34:54:07:6b:de:1f:48:3b:2e:b4:b9:2f:a6:5f:
a4:4c:23:2b:66:bc:47:8d:73:a0:e3:18:20:13:a8:d1:05:dd:
16:37:88:1c:ac:b2:b3:09:5d:5a:62:16:9c:54:c9:42:3d:7c:
f8:a6:7b:30:ff:fd:87:9b:6d:01:b7:83:d6:4b:f0:a5:82:8f:
08:3a:74:48:53:8f:9e:be:06:76:ff:19:f9:0d:ce:7c:8f:81:
6f:b9:a6:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEiCmCMm1rUkv4D/B0X1UVfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjYxMDA5MTkwMTA3WhcNMjYxMDEwMTkwMTA3WjAzMTEwLwYDVQQD
EygxNDdiMzg1NWNjNmNmMDdmNjViNmQ4MmRhMjA1MjQxZTNhYTEwOTQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04yKmvj73WFy/lxFs4LCMg49Jx+u
d40eyGCprMoZcFCdShE6H6JDXxK2XXuxA/71HX0nk64ZM+U83F0kZX01bnVvAfH7
aPuHFQCycVLhTszmJc4VF9298clZAEES8QOJMrEjKP9upF04GJF3COy3T3KQdPzH
/w+NM5E6I5xAInx3hKLzKJ+vh7PUOIMDx+j3lYpe2YmCM1x9aazQVDDGY3V8ezdg
nNcmQpC0euqXaOl8xAcNfHjjeCeYOLWt2kGjrlNuewQr9dvhDOvuQ4G3Vj/39Hyk
lC3oGZ2zHLjcfofMquNRzxTY/T6+Q09SpF2HvC2+mH6YBRQ/97vuJTwymQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR7OFXMbPB/ZbbYLaIFJB46oQlEMB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3H7nGWK
MKy9MPq9bjag4o9uMSyVY5MbLEgaJM7DckWXWdIg4Nxt1KkE+z4glrKXbnzxf06x
ZkXO47YdYtLTSajrT6gWYb9KIrmWScmC5DoIHf/UHkb+E4Nnmp2EQV/jFtpn55UC
q/aOEsQhpDsNGem2iL4q44AEMIyY9kCt7sIQTQ+qX6WMMIg5LhmKqxB2d7/D3iKa
D3+jrFH7j48jXE1WN504rDRUB2veH0g7LrS5L6ZfpEwjK2a8R41zoOMYIBOo0QXd
FjeIHKyyswldWmIWnFTJQj18+KZ7MP/9h5ttAbeD1kvwpYKPCDp0SFOPnr4Gdv8Z
+Q3OfI+Bb7mmrA==
-----END CERTIFICATE-----
Generated at Fri Oct 9 23:06:14 2026 by rpki-client