Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: JT0GuGgZNYRWEzDf1h/ZXn27Zh/CLv5avYNpCQ1hlDA=
Subject key identifier: 99:42:BA:4F:BC:42:20:A5:3B:E6:05:31:ED:6B:BF:2C:02:A1:C1:55
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 019CAB33EBA0732D57D28AD73CDD0BC77F7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 1847
Signing time: Sun 01 Mar 2026 21:00:32 +0000
Manifest this update: Sun 01 Mar 2026 21:00:32 +0000
Manifest next update: Mon 02 Mar 2026 21:00:32 +0000
Files and hashes: 1: 9mN_oHf4GD05-BUH6BsB01tvt3Y.roa (hash: ZuxdvlwmVs1w0KroWX43G/v/gBodCt7QRPbyICFM9A0=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: AXSy64/fg3kLmvk/qmm7P4HjyxrDPWjBMZbP3hpaSr4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:33:eb:a0:73:2d:57:d2:8a:d7:3c:dd:0b:c7:7f:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Mar 1 21:00:32 2026 GMT
Not After : Mar 2 21:00:32 2026 GMT
Subject: CN=9942ba4fbc4220a53be60531ed6bbf2c02a1c155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:77:3c:8c:7b:b5:e5:a6:49:f1:92:9f:6c:c6:
72:70:da:ea:0a:5f:da:0f:99:1a:65:e7:c0:ff:22:
ae:41:14:0d:47:53:e1:93:e6:f8:6b:9e:ca:02:d3:
bb:34:5d:98:c8:ec:a0:5c:e3:06:03:2c:35:3a:ed:
c3:3b:78:3e:d8:b8:8b:5c:d0:3e:36:2f:ed:c8:05:
da:ad:aa:b3:9e:48:4d:54:9f:5f:09:f3:71:e4:83:
7e:ff:e0:de:a6:f3:23:87:83:29:70:a9:34:49:c5:
41:17:99:2a:5c:3b:af:fc:3c:cd:35:26:5b:06:b7:
8c:c0:a6:4d:07:b0:9a:58:18:3c:9a:46:74:b1:6c:
aa:ff:65:bf:b9:cd:05:57:cb:5c:25:67:11:bc:c9:
ee:fc:f2:1e:1f:e2:38:6a:07:c8:13:e7:97:fb:6c:
e5:30:0e:99:d2:26:23:15:f8:ad:c3:93:7f:cf:fa:
ab:37:f8:39:a9:0b:a2:ed:0a:ac:a6:57:23:98:82:
50:e6:6a:13:e1:97:fc:b9:1e:54:1e:d6:9b:99:20:
a1:35:e3:4d:6f:9e:0f:62:a2:dc:8c:19:d0:a6:0a:
75:df:71:3b:e1:8a:7d:dd:9c:e8:a6:b2:6c:76:fd:
3e:d2:8e:78:e5:a7:da:9b:84:ec:fb:15:f3:ec:36:
fe:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:42:BA:4F:BC:42:20:A5:3B:E6:05:31:ED:6B:BF:2C:02:A1:C1:55
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:48:ab:3c:21:ff:e8:0f:c7:a8:99:b7:1d:13:67:d8:f4:a7:
05:69:99:2c:76:4b:b3:3a:b1:b6:d0:10:84:23:59:7a:89:69:
24:80:ea:99:15:a7:a7:20:ed:4f:32:e0:11:63:9c:ab:5a:28:
09:a4:21:4b:e9:73:a5:4b:ce:80:8a:85:a9:cf:77:24:e1:31:
d0:91:32:d3:0c:d1:0b:c8:0d:fa:64:a1:26:01:f6:81:b7:63:
92:6e:1b:39:64:5f:58:37:cf:dd:8d:05:fa:2b:3c:09:3d:b1:
b6:47:91:18:40:31:58:54:0e:d2:f0:2d:01:42:66:cd:ab:2f:
8b:e6:9b:f3:8e:d3:b9:8f:f5:2e:a3:6f:aa:b1:a3:5b:df:8c:
a7:66:c5:67:5b:39:da:ac:f3:7a:bf:6b:02:0c:32:05:c1:4e:
17:22:cf:83:66:13:9e:dc:1b:84:56:74:a5:c2:68:f0:ec:79:
69:7d:9f:fb:b1:6b:9a:d4:eb:a0:55:f5:bc:26:35:56:20:fe:
41:5c:e0:c1:ae:ab:8f:a9:e3:74:6c:ff:cd:f4:06:1d:b8:81:
06:5e:b3:08:1a:90:91:60:a1:91:5a:5b:99:57:38:e3:45:e9:
6c:60:c3:41:57:87:58:08:1c:7f:af:4d:8b:2e:6b:81:1a:6f:
62:ec:6a:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrM+ugcy1X0orXPN0Lx399MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNTJiNmEwNTE0NzFiZWM1MWRiNzRkNzI1NmU3YTMwYTU1
ZWNmMWEwHhcNMjYwMzAxMjEwMDMyWhcNMjYwMzAyMjEwMDMyWjAzMTEwLwYDVQQD
Eyg5OTQyYmE0ZmJjNDIyMGE1M2JlNjA1MzFlZDZiYmYyYzAyYTFjMTU1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkXc8jHu15aZJ8ZKfbMZycNrqCl/a
D5kaZefA/yKuQRQNR1Phk+b4a57KAtO7NF2YyOygXOMGAyw1Ou3DO3g+2LiLXNA+
Ni/tyAXaraqznkhNVJ9fCfNx5IN+/+DepvMjh4MpcKk0ScVBF5kqXDuv/DzNNSZb
BreMwKZNB7CaWBg8mkZ0sWyq/2W/uc0FV8tcJWcRvMnu/PIeH+I4agfIE+eX+2zl
MA6Z0iYjFfitw5N/z/qrN/g5qQui7QqsplcjmIJQ5moT4Zf8uR5UHtabmSChNeNN
b54PYqLcjBnQpgp133E74Yp93ZzoprJsdv0+0o545afam4Ts+xXz7Db+HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlCuk+8QiClO+YFMe1rvywCocFVMB8GA1UdIwQY
MBaAFJxStqBRRxvsUdt01yVuejClXs8aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAt
MjgyOWFhM2RmMjU4LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9mODQzNGMtMDIzMC00YWRmLWJkMDAtMjgyOWFhM2RmMjU4
LzEvbkZLMm9GRkhHLXhSMjNUWEpXNTZNS1ZlenhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEkirPCH/
6A/HqJm3HRNn2PSnBWmZLHZLszqxttAQhCNZeolpJIDqmRWnpyDtTzLgEWOcq1oo
CaQhS+lzpUvOgIqFqc93JOEx0JEy0wzRC8gN+mShJgH2gbdjkm4bOWRfWDfP3Y0F
+is8CT2xtkeRGEAxWFQO0vAtAUJmzasvi+ab847TuY/1LqNvqrGjW9+Mp2bFZ1s5
2qzzer9rAgwyBcFOFyLPg2YTntwbhFZ0pcJo8Ox5aX2f+7FrmtTroFX1vCY1ViD+
QVzgwa6rj6njdGz/zfQGHbiBBl6zCBqQkWChkVpbmVc440XpbGDDQVeHWAgcf69N
iy5rgRpvYuxqZw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:33 2026 by rpki-client