Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
File: NhrfV8jct7_TTprs2D42NC7Do8k.mft (raw, json)
Hash identifier: LMSIYSRUMWG//q8JjDlJJF2qVSe8ABHpg6FHFfTbpaE=
Subject key identifier: 5C:A5:C2:F8:DD:C8:5E:5A:D1:16:41:83:D0:06:30:A5:5F:4C:56:05
Authority key identifier: 36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
Certificate issuer: /CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Certificate serial: 019CAA8FF88BD6486FA5C3F34C46F0DCAAA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
Manifest number: 1603
Signing time: Sun 01 Mar 2026 18:01:27 +0000
Manifest this update: Sun 01 Mar 2026 18:01:27 +0000
Manifest next update: Mon 02 Mar 2026 18:01:27 +0000
Files and hashes: 1: 7HpWZ8JsTHRKitkQiB-HL7tVhQU.roa (hash: go++botqtIXYynK7T+rgO/KPJxpRmv9z/xVOLNzuEFk=)
2: 8vxStV176PVhHBrk8PFYjrws9_k.roa (hash: Li2gh8hFqhoK1B3KxIba5052K8TBHeXZ0m+Xe9NeavQ=)
3: NhrfV8jct7_TTprs2D42NC7Do8k.crl (hash: qhDLnxyb5oNpA05nWStCZ9iDuNR4GuR2Q8xc86RJLH4=)
4: ZZV4J0xzHJahvI9bkvvUlw3YqJ8.roa (hash: 2jraLRcOy/O0ieEHzHeWnifNeQVyP8qfUT2eUqJPbaA=)
5: Zu0kk3WOXaDw5gWMP5k-8qCbgec.roa (hash: XR0jb+xTVsWguTI1Vj79PXiuVJZlpNZfWK4CtdCSYxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:f8:8b:d6:48:6f:a5:c3:f3:4c:46:f0:dc:aa:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=361adf57c8dcb7bfd34e9aecd83e36342ec3a3c9
Validity
Not Before: Mar 1 18:01:27 2026 GMT
Not After : Mar 2 18:01:27 2026 GMT
Subject: CN=5ca5c2f8ddc85e5ad1164183d00630a55f4c5605
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:ab:5b:b8:db:76:bb:ab:96:e5:de:e5:90:67:
15:a4:93:05:26:09:ba:1f:25:9b:5e:c5:ec:b7:9f:
b0:c9:5a:43:0e:26:5d:f9:72:0c:b2:c2:65:5a:4a:
72:ec:0a:a6:ab:e7:36:f0:01:92:e4:08:56:68:62:
a1:a2:f7:9d:7f:92:29:d1:f5:5b:14:2b:67:a3:f3:
fd:86:e5:a0:24:90:bb:09:39:42:9b:68:c1:48:94:
d6:6e:13:75:b2:9a:e9:88:1f:b4:e0:23:bf:3c:88:
9f:d3:d9:86:24:a7:6a:ff:5b:a1:1c:83:05:7b:91:
19:a3:26:c6:6e:0d:4e:1f:8b:1d:38:67:c5:5f:1d:
46:69:f9:10:a9:48:2a:2a:3d:00:1c:16:26:fe:33:
53:00:8f:b5:8e:0a:8e:2c:1c:f5:65:6a:b0:8b:ea:
1b:05:b8:c9:c6:17:81:66:41:dd:d0:a2:e1:b5:69:
c5:39:0b:b8:c3:0d:6b:f6:00:ef:e5:27:fa:c4:37:
0e:68:51:a1:88:e2:39:1c:64:d2:62:e6:d5:91:27:
f4:d8:23:10:cc:9c:6d:45:7a:f9:87:f0:6d:d9:c9:
7f:d8:fb:b4:dc:89:6e:2f:20:b5:ae:1f:9f:d8:ed:
96:3b:4d:f2:59:e3:c5:b8:94:69:4b:77:72:b5:3f:
ce:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:A5:C2:F8:DD:C8:5E:5A:D1:16:41:83:D0:06:30:A5:5F:4C:56:05
X509v3 Authority Key Identifier:
keyid:36:1A:DF:57:C8:DC:B7:BF:D3:4E:9A:EC:D8:3E:36:34:2E:C3:A3:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhrfV8jct7_TTprs2D42NC7Do8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/e0f8c6-aadc-4c31-b92b-1a18738b4741/1/NhrfV8jct7_TTprs2D42NC7Do8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:af:02:c7:22:fe:84:11:78:9b:2f:a6:3a:0c:57:4b:b1:9a:
13:32:7d:66:99:cc:7f:74:26:e9:cd:e8:3e:84:2c:05:4c:5d:
b3:90:ca:df:d2:23:53:f8:d4:20:ef:51:35:2d:f3:fb:b6:2d:
29:37:30:6d:ca:84:ed:d0:b6:32:e5:79:7e:6d:92:2e:90:44:
8c:94:5b:b3:8d:2d:8f:f8:50:92:52:e7:e3:99:f5:4c:0a:78:
39:1f:a4:93:a1:12:e2:93:ba:23:9e:a9:c0:1c:5c:c4:b7:14:
c0:99:3c:15:2b:83:2c:9d:74:af:e4:e8:49:30:2c:80:b8:70:
8a:14:42:ab:02:29:6f:4b:70:63:ae:f1:fb:5b:f7:4a:3d:0a:
23:17:4b:91:29:e7:e5:c6:6e:cc:8e:f8:d8:3c:a0:d5:b8:1e:
76:80:29:43:3b:79:8c:9d:a7:3c:d3:9d:bf:09:f1:16:e6:ec:
cc:33:c8:d5:c8:f9:b7:ea:f7:16:57:79:3a:a3:59:70:5f:82:
7e:db:53:6c:f2:d8:de:cf:ce:68:91:0e:82:91:38:cf:50:a1:
ea:cc:e0:57:77:75:7e:11:5f:5b:90:90:ff:d7:1e:44:98:f4:
c9:84:9b:d7:bc:63:e5:d6:d0:1b:be:45:bd:bf:6e:9b:d6:ca:
44:d5:41:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqj/iL1khvpcPzTEbw3KqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2MWFkZjU3YzhkY2I3YmZkMzRlOWFlY2Q4M2UzNjM0MmVj
M2EzYzkwHhcNMjYwMzAxMTgwMTI3WhcNMjYwMzAyMTgwMTI3WjAzMTEwLwYDVQQD
Eyg1Y2E1YzJmOGRkYzg1ZTVhZDExNjQxODNkMDA2MzBhNTVmNGM1NjA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqtbuNt2u6uW5d7lkGcVpJMFJgm6
HyWbXsXst5+wyVpDDiZd+XIMssJlWkpy7Aqmq+c28AGS5AhWaGKhovedf5Ip0fVb
FCtno/P9huWgJJC7CTlCm2jBSJTWbhN1sprpiB+04CO/PIif09mGJKdq/1uhHIMF
e5EZoybGbg1OH4sdOGfFXx1GafkQqUgqKj0AHBYm/jNTAI+1jgqOLBz1ZWqwi+ob
BbjJxheBZkHd0KLhtWnFOQu4ww1r9gDv5Sf6xDcOaFGhiOI5HGTSYubVkSf02CMQ
zJxtRXr5h/Bt2cl/2Pu03IluLyC1rh+f2O2WO03yWePFuJRpS3dytT/OwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFylwvjdyF5a0RZBg9AGMKVfTFYFMB8GA1UdIwQY
MBaAFDYa31fI3Le/006a7Ng+NjQuw6PJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmIt
MWExODczOGI0NzQxLzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9lMGY4YzYtYWFkYy00YzMxLWI5MmItMWExODczOGI0NzQx
LzEvTmhyZlY4amN0N19UVHByczJENDJOQzdEbzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAa8CxyL+
hBF4my+mOgxXS7GaEzJ9ZpnMf3Qm6c3oPoQsBUxds5DK39IjU/jUIO9RNS3z+7Yt
KTcwbcqE7dC2MuV5fm2SLpBEjJRbs40tj/hQklLn45n1TAp4OR+kk6ES4pO6I56p
wBxcxLcUwJk8FSuDLJ10r+ToSTAsgLhwihRCqwIpb0twY67x+1v3Sj0KIxdLkSnn
5cZuzI742Dyg1bgedoApQzt5jJ2nPNOdvwnxFubszDPI1cj5t+r3Fld5OqNZcF+C
fttTbPLY3s/OaJEOgpE4z1Ch6szgV3d1fhFfW5CQ/9ceRJj0yYSb17xj5dbQG75F
vb9um9bKRNVBug==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:16:01 2026 by rpki-client