Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
File: nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft (raw, json)
Hash identifier: mUuTGDa9kaV6YPGpu3pRazXPKxGIdyForN4u4KrsrMs=
Subject key identifier: 3D:6A:69:B8:FA:1E:25:01:C1:DF:19:C7:D0:62:D4:82:D0:88:2E:3B
Authority key identifier: 9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
Certificate issuer: /CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Certificate serial: 019D9C2C8A1332400A4E638A5919E3FF0C6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
Manifest number: 04E6
Signing time: Fri 17 Apr 2026 16:00:57 +0000
Manifest this update: Fri 17 Apr 2026 16:00:57 +0000
Manifest next update: Sat 18 Apr 2026 16:00:57 +0000
Files and hashes: 1: lhZip7UvzYKdzGiZ0tPsdJoF6UE.roa (hash: n78Qk1sKl/U25w9WagO90oIcVWTzYwbz5zXkkQhwHOI=)
2: nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl (hash: qTjETnUh2jdX9VtHeRpfqzbJofW4xBzDFSiiBJryg4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:8a:13:32:40:0a:4e:63:8a:59:19:e3:ff:0c:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc5c35d98686f3d8a3874171b143287f5e3e733
Validity
Not Before: Apr 17 16:00:57 2026 GMT
Not After : Apr 18 16:00:57 2026 GMT
Subject: CN=3d6a69b8fa1e2501c1df19c7d062d482d0882e3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:bc:68:dc:61:38:38:68:99:fc:59:54:4a:a2:
08:03:b8:9a:bd:b7:8a:28:66:6e:4d:1a:f6:75:41:
54:76:f5:1f:96:8f:78:cb:ea:ad:ed:79:97:10:e9:
f1:7c:0a:85:57:54:d3:6b:04:46:32:1e:34:19:ca:
4b:d4:75:67:5d:9c:af:90:92:34:b6:eb:8d:ae:8f:
7c:64:16:9e:63:d5:19:34:6d:84:7e:8d:58:23:45:
b3:a3:93:89:48:eb:17:6e:ad:eb:cb:6b:e0:cf:4a:
1f:73:ed:4b:69:75:e3:56:1b:e7:d6:8d:e6:ae:cb:
3a:d3:3e:f6:2b:05:fb:19:e6:54:72:0e:1b:26:21:
64:b2:44:0f:fc:f4:2e:e4:ad:36:ce:99:67:3e:f1:
a5:c9:0b:cd:df:86:8c:fc:85:6f:20:76:4d:8c:3f:
d0:97:1a:03:2a:ed:91:8a:8c:29:5e:66:dc:eb:04:
08:46:58:17:91:1f:2e:09:9a:a7:82:e4:e1:2e:f9:
81:71:58:11:4f:07:f1:fd:a9:04:56:00:38:6d:38:
c3:0d:96:ef:cd:ad:43:e2:c5:c2:70:f2:84:58:7b:
dd:9a:72:a7:6d:c6:27:42:42:b3:2f:d6:f4:c1:16:
b1:a4:2d:4b:6f:8f:8a:84:59:82:ed:d2:37:22:91:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:6A:69:B8:FA:1E:25:01:C1:DF:19:C7:D0:62:D4:82:D0:88:2E:3B
X509v3 Authority Key Identifier:
keyid:9C:C5:C3:5D:98:68:6F:3D:8A:38:74:17:1B:14:32:87:F5:E3:E7:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMXDXZhobz2KOHQXGxQyh_Xj5zM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/1186e4-0c14-4b80-9981-e875103faf12/1/nMXDXZhobz2KOHQXGxQyh_Xj5zM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:35:0f:ac:60:a1:fa:24:a4:73:af:24:ce:9d:2c:a5:00:2b:
16:50:8c:9c:b7:69:df:fb:31:0d:97:3f:5a:da:d1:2c:2b:3d:
bc:93:db:0d:d6:77:6d:84:6e:dc:66:f6:4d:8f:6e:47:8a:5e:
66:b0:e6:53:9a:a3:39:42:2e:1a:04:0e:ae:dc:a5:2f:42:d9:
cd:cf:cb:fb:2b:05:6a:ec:6a:4f:fd:09:9f:47:71:7e:b7:01:
40:50:5e:38:f0:62:c0:6e:9c:4e:4d:5c:43:e7:67:46:7e:a6:
33:0f:0f:62:8b:ef:97:cb:ef:7f:3d:f5:4d:31:9c:fe:6e:fe:
20:ae:1d:cf:2a:e5:2e:ba:63:62:7f:5f:3a:0b:f5:95:2f:04:
06:9d:fc:fa:f3:ea:a1:4f:2c:da:a4:37:c4:18:ab:23:9a:8c:
3c:ec:b6:00:8f:8b:65:81:53:d8:d2:20:43:3c:c5:92:3b:ec:
af:34:dd:d9:c7:d2:82:b9:56:3f:05:da:9e:b6:2a:83:df:cb:
21:83:cc:ff:3c:7f:7b:c8:88:01:62:e5:4c:e5:56:f4:4d:ab:
61:96:49:29:74:03:28:42:97:2e:2f:98:d2:27:2d:41:37:68:
1b:7a:8f:e4:2e:74:30:ca:92:da:b9:b8:ca:f8:d4:d4:fd:59:
1b:60:90:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLIoTMkAKTmOKWRnj/wxuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljYzVjMzVkOTg2ODZmM2Q4YTM4NzQxNzFiMTQzMjg3ZjVl
M2U3MzMwHhcNMjYwNDE3MTYwMDU3WhcNMjYwNDE4MTYwMDU3WjAzMTEwLwYDVQQD
EygzZDZhNjliOGZhMWUyNTAxYzFkZjE5YzdkMDYyZDQ4MmQwODgyZTNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs7xo3GE4OGiZ/FlUSqIIA7iavbeK
KGZuTRr2dUFUdvUflo94y+qt7XmXEOnxfAqFV1TTawRGMh40GcpL1HVnXZyvkJI0
tuuNro98ZBaeY9UZNG2Efo1YI0Wzo5OJSOsXbq3ry2vgz0ofc+1LaXXjVhvn1o3m
rss60z72KwX7GeZUcg4bJiFkskQP/PQu5K02zplnPvGlyQvN34aM/IVvIHZNjD/Q
lxoDKu2RiowpXmbc6wQIRlgXkR8uCZqnguThLvmBcVgRTwfx/akEVgA4bTjDDZbv
za1D4sXCcPKEWHvdmnKnbcYnQkKzL9b0wRaxpC1Lb4+KhFmC7dI3IpFWFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1qabj6HiUBwd8Zx9Bi1ILQiC47MB8GA1UdIwQY
MBaAFJzFw12YaG89ijh0FxsUMof14+czMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEt
ZTg3NTEwM2ZhZjEyLzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi8xMTg2ZTQtMGMxNC00YjgwLTk5ODEtZTg3NTEwM2ZhZjEy
LzEvbk1YRFhaaG9iejJLT0hRWEd4UXloX1hqNXpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvzUPrGCh
+iSkc68kzp0spQArFlCMnLdp3/sxDZc/WtrRLCs9vJPbDdZ3bYRu3Gb2TY9uR4pe
ZrDmU5qjOUIuGgQOrtylL0LZzc/L+ysFauxqT/0Jn0dxfrcBQFBeOPBiwG6cTk1c
Q+dnRn6mMw8PYovvl8vvfz31TTGc/m7+IK4dzyrlLrpjYn9fOgv1lS8EBp38+vPq
oU8s2qQ3xBirI5qMPOy2AI+LZYFT2NIgQzzFkjvsrzTd2cfSgrlWPwXanrYqg9/L
IYPM/zx/e8iIAWLlTOVW9E2rYZZJKXQDKEKXLi+Y0ictQTdoG3qP5C50MMqS2rm4
yvjU1P1ZG2CQIA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:11 2026 by rpki-client