Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
File: ncKK6ZN_9-SexPEjTlPYud1pRUE.mft (raw, json)
Hash identifier: qME4P5w9/v6H2pP+j/OJPAdMd55W8rEolD6O7Nqz3VU=
Subject key identifier: 1B:6C:33:B7:B5:47:98:7B:3E:7D:41:DF:0B:5E:D5:46:E4:08:6B:FD
Authority key identifier: 9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
Certificate issuer: /CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Certificate serial: 019D9B51270278C6D90D396C59FFB2176998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
Manifest number: 11EE
Signing time: Fri 17 Apr 2026 12:01:19 +0000
Manifest this update: Fri 17 Apr 2026 12:01:19 +0000
Manifest next update: Sat 18 Apr 2026 12:01:19 +0000
Files and hashes: 1: 5NU_Bz7TM0Xx1UCwOa94wjouZ28.roa (hash: FtybLvKivSpK252mVw33U1au3xqedi7sR2qRl63uFV0=)
2: OpAkBC82UuZ6_uPhsClAgR04OrA.roa (hash: jvGwsGYtfL1wQSZ1E3o/pGpMdvuW5pNpKlZNP0EP2N4=)
3: TxNd5pJ27uJYq-599NEcjd3YSFE.roa (hash: MKliCQJ8R1hwAnZ4kj94ssCz7Pi63lFdJSsHyJKq8Ko=)
4: i36Jf0otjIUM44IckCvrtFhsBoQ.roa (hash: 3ojfojzzQ8UJ1AeZRV6ZbRzBsjn2EMGjCIfI+x66Ej0=)
5: n40CCy1BCpX5ifrwLsN1Fp8w7ds.roa (hash: /JhVDNsRShoOF1QQGZ1KsnS3HBPKbos6MVT0/yuqhx0=)
6: ncKK6ZN_9-SexPEjTlPYud1pRUE.crl (hash: v2HvQyaJcgdPUW/ebPh6IaAiX77gT4V0hUmsvzJ7M7Y=)
7: pVWucn62UZlUYEkLwtnRBuH29Ec.roa (hash: fEeXmrTbxDWYxdEIPNB+dmTYd1gfRV01N5PsV9sWN7U=)
8: sXBz39NOPSejJw3Fq-kGV_ghVyQ.roa (hash: e/lxi3HZyMD+gT/NBbYEuKqzwsHBh03+J0mPNEI0CnM=)
9: tkJi06CdYjIn25noZIzPiK0yCl0.roa (hash: IkxgtkhmUM5LssyhZXIyc64/KZNYMJ70cHRl8QpXTfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:27:02:78:c6:d9:0d:39:6c:59:ff:b2:17:69:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dc28ae9937ff7e49ec4f1234e53d8b9dd694541
Validity
Not Before: Apr 17 12:01:19 2026 GMT
Not After : Apr 18 12:01:19 2026 GMT
Subject: CN=1b6c33b7b547987b3e7d41df0b5ed546e4086bfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:94:b0:7c:bd:4c:8f:1d:9b:7f:a9:3e:2f:23:
bc:ce:99:c1:fb:c1:0a:73:91:44:77:90:d1:5b:d6:
03:b6:d4:f9:cd:5f:65:27:3a:f9:18:91:df:fd:16:
78:09:12:dc:15:7f:04:15:91:4c:aa:b1:b8:3d:a1:
f0:b8:b2:d1:84:36:5b:a1:93:f4:6c:1d:2e:00:f3:
6c:8a:f8:cb:a9:66:80:ad:ed:e4:60:65:59:7e:b6:
78:bb:7c:b6:ad:29:65:96:b9:95:46:50:1f:e1:f7:
57:d0:cc:29:53:08:2b:6f:9a:6c:fa:a6:57:8e:8f:
a3:ef:1f:ea:f4:0b:bb:02:1e:1a:a5:d8:e3:53:b3:
5f:08:22:48:28:c6:3f:56:d0:bd:1e:fe:72:e1:73:
58:e5:78:98:89:85:0a:c4:07:27:c1:58:9b:6c:bc:
ed:52:ee:28:b1:58:94:20:4f:d5:91:89:b2:d3:fe:
35:2d:3d:c1:6c:af:db:a7:f4:a5:ef:20:66:a9:2b:
78:0d:f5:ea:18:69:07:b3:f3:29:6e:34:ce:54:2c:
a9:98:a0:18:e4:6a:2e:0c:33:39:93:3a:62:f2:ae:
89:32:a1:11:22:26:ff:91:86:98:71:85:98:ae:1c:
d2:e4:4a:79:fd:4a:75:b3:d3:64:d3:5f:77:45:44:
02:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6C:33:B7:B5:47:98:7B:3E:7D:41:DF:0B:5E:D5:46:E4:08:6B:FD
X509v3 Authority Key Identifier:
keyid:9D:C2:8A:E9:93:7F:F7:E4:9E:C4:F1:23:4E:53:D8:B9:DD:69:45:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ncKK6ZN_9-SexPEjTlPYud1pRUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/c0330c-9872-4ac6-a22c-192cbd08db51/1/ncKK6ZN_9-SexPEjTlPYud1pRUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:95:f4:38:25:67:2e:a9:c4:c0:87:77:1a:2a:54:3c:0e:a6:
90:12:87:aa:ef:81:e4:c0:a5:d6:a8:c3:9f:8d:0b:ea:51:b1:
6e:56:11:d1:79:9c:d4:cc:d5:8c:a1:6f:f6:3f:0c:9e:9d:09:
20:e7:c4:64:7b:70:d6:93:36:af:83:4e:2f:27:82:61:45:34:
74:87:20:90:c0:1a:06:9a:99:04:11:b2:02:ec:ed:c0:0d:65:
e4:a1:3c:6c:e5:af:0a:78:76:b4:bd:d5:e9:11:09:cb:8a:18:
9d:89:2c:85:d8:88:f2:ec:14:2d:db:91:45:93:8d:7f:b8:b9:
7a:1a:64:4d:42:30:b0:bf:c3:0c:99:dc:95:ea:03:1e:e0:aa:
19:76:63:e1:f2:e3:e2:ed:24:34:cf:df:97:ca:71:74:48:0f:
62:1d:70:87:83:8b:8f:17:e3:c6:d9:74:0b:7c:f9:1c:29:b7:
9f:46:a8:1f:5a:db:66:45:9d:62:3d:f8:4d:58:6e:b3:39:56:
0c:a1:4a:66:65:2a:74:e8:3d:1d:af:9e:51:f0:50:28:1e:cc:
59:35:32:38:cc:66:b8:d7:c6:49:3e:18:6c:1a:76:08:d3:02:
e0:f6:f1:fb:d6:b2:73:7b:e7:81:78:83:f7:35:ab:27:dc:b3:
61:11:70:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bUScCeMbZDTlsWf+yF2mYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkYzI4YWU5OTM3ZmY3ZTQ5ZWM0ZjEyMzRlNTNkOGI5ZGQ2
OTQ1NDEwHhcNMjYwNDE3MTIwMTE5WhcNMjYwNDE4MTIwMTE5WjAzMTEwLwYDVQQD
EygxYjZjMzNiN2I1NDc5ODdiM2U3ZDQxZGYwYjVlZDU0NmU0MDg2YmZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA05SwfL1Mjx2bf6k+LyO8zpnB+8EK
c5FEd5DRW9YDttT5zV9lJzr5GJHf/RZ4CRLcFX8EFZFMqrG4PaHwuLLRhDZboZP0
bB0uAPNsivjLqWaAre3kYGVZfrZ4u3y2rSlllrmVRlAf4fdX0MwpUwgrb5ps+qZX
jo+j7x/q9Au7Ah4apdjjU7NfCCJIKMY/VtC9Hv5y4XNY5XiYiYUKxAcnwVibbLzt
Uu4osViUIE/VkYmy0/41LT3BbK/bp/Sl7yBmqSt4DfXqGGkHs/MpbjTOVCypmKAY
5GouDDM5kzpi8q6JMqERIib/kYaYcYWYrhzS5Ep5/Up1s9Nk0193RUQCewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtsM7e1R5h7Pn1B3wte1UbkCGv9MB8GA1UdIwQY
MBaAFJ3CiumTf/fknsTxI05T2LndaUVBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMt
MTkyY2JkMDhkYjUxLzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9jMDMzMGMtOTg3Mi00YWM2LWEyMmMtMTkyY2JkMDhkYjUx
LzEvbmNLSzZaTl85LVNleFBFalRsUFl1ZDFwUlVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAApX0OCVn
LqnEwId3GipUPA6mkBKHqu+B5MCl1qjDn40L6lGxblYR0Xmc1MzVjKFv9j8Mnp0J
IOfEZHtw1pM2r4NOLyeCYUU0dIcgkMAaBpqZBBGyAuztwA1l5KE8bOWvCnh2tL3V
6REJy4oYnYkshdiI8uwULduRRZONf7i5ehpkTUIwsL/DDJncleoDHuCqGXZj4fLj
4u0kNM/fl8pxdEgPYh1wh4OLjxfjxtl0C3z5HCm3n0aoH1rbZkWdYj34TVhuszlW
DKFKZmUqdOg9Ha+eUfBQKB7MWTUyOMxmuNfGST4YbBp2CNMC4Pbx+9ayc3vngXiD
9zWrJ9yzYRFwJw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:24:44 2026 by rpki-client