Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: 8Y6fun5aYU0HI7/RnfONepD4fgG5btgqtzj87kQbL7U=
Subject key identifier: 82:B6:89:9E:7D:D2:C7:EE:06:70:EC:B6:F5:9B:06:66:A4:FC:08:41
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 01A12F8F07F0067E5C6EE4A7E6581CEC44B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 0554
Signing time: Mon 12 Oct 2026 10:01:05 +0000
Manifest this update: Mon 12 Oct 2026 10:01:05 +0000
Manifest next update: Tue 13 Oct 2026 10:01:05 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: TLbXQ6LRjo+uXkkM9Nslj/92vpa+kLqY/uNl1vWNUDo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:8f:07:f0:06:7e:5c:6e:e4:a7:e6:58:1c:ec:44:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Oct 12 10:01:05 2026 GMT
Not After : Oct 13 10:01:05 2026 GMT
Subject: CN=82b6899e7dd2c7ee0670ecb6f59b0666a4fc0841
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4c:36:76:87:7a:97:8a:09:a0:b6:98:7e:89:
24:76:74:92:d2:6f:aa:ee:7c:d0:a8:fc:f0:87:74:
8c:bc:b1:78:97:1a:88:37:4f:73:b3:d0:ed:c8:70:
81:12:5b:f8:57:30:67:7c:8d:85:f8:eb:2c:74:38:
c2:a0:d3:54:af:84:c7:63:d2:cc:a5:92:1b:c1:13:
01:f3:3d:fd:e8:a2:8d:1e:10:e4:4c:b3:1e:e8:25:
5a:57:8e:c0:68:4e:a6:53:b5:81:d0:5c:f5:19:84:
a5:1d:1e:d8:c1:18:d8:40:95:8e:e0:29:23:44:63:
98:07:2c:b9:0e:e4:b6:4a:35:79:af:90:e3:92:6c:
25:da:4f:37:97:f6:76:01:ab:fe:e2:b0:1f:d6:28:
6a:fe:4e:53:45:04:ca:34:f4:c3:7e:a4:47:fd:47:
30:06:0a:a5:ab:22:2c:2a:77:24:67:d3:69:41:df:
19:be:b8:49:a3:5d:29:c1:e3:3c:20:ae:d3:9d:76:
fd:ff:18:bf:de:97:39:f9:32:b5:df:d1:e6:3e:e8:
85:84:ec:f4:70:7d:bd:24:6b:89:6c:ee:cc:03:f5:
04:e7:0a:23:77:cd:8b:b1:b4:bc:3f:2e:05:ff:dc:
65:90:60:d2:53:82:7e:34:90:5d:e1:b1:0e:db:b8:
3e:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:B6:89:9E:7D:D2:C7:EE:06:70:EC:B6:F5:9B:06:66:A4:FC:08:41
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:85:3c:11:13:ff:7f:47:ac:75:54:2b:a3:64:d2:1a:1c:26:
6e:39:41:7d:09:2e:22:b5:87:3a:f2:20:09:07:4c:41:5e:33:
35:f0:70:2b:28:43:d0:53:c0:ff:35:62:be:6a:17:8c:2f:de:
e1:9b:61:b5:5c:6e:bf:17:bd:39:ea:68:32:be:2a:69:cc:a2:
7b:e7:31:4f:ab:f8:bf:e4:be:1d:e1:28:87:40:bb:bb:ed:3b:
6e:d1:41:47:9b:a0:dd:6f:d3:6f:12:8d:6b:82:e9:df:a0:07:
26:76:ce:06:f1:b6:2f:61:7f:91:e6:b9:55:b8:0d:2a:e7:50:
a9:c5:7c:ab:fc:a7:a6:70:95:c6:f6:35:3f:24:31:5a:44:c8:
0e:e0:d6:02:85:95:09:d3:05:93:2c:57:1b:44:94:3c:2c:3a:
00:77:f2:95:79:e0:62:8e:1d:b9:95:9d:02:dd:4f:2b:b8:d3:
db:41:11:21:d3:74:a1:9c:79:4a:d9:6c:0f:a7:40:38:5b:5e:
73:0c:ea:34:55:73:82:90:cc:98:1f:91:5f:ee:fe:8c:45:f2:
00:cc:65:08:3e:3f:2b:57:56:44:22:17:8e:5f:1e:86:b5:ba:
3b:ce:5a:4e:4c:a8:05:75:69:ba:90:eb:29:e8:5f:d8:d1:8a:
c0:aa:f6:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEvjwfwBn5cbuSn5lgc7ES4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNmZmY2I1YjVlMmRlNDU1MWFjZjliNDVhZjI0MmRiOTQ1
ODRlNWEwHhcNMjYxMDEyMTAwMTA1WhcNMjYxMDEzMTAwMTA1WjAzMTEwLwYDVQQD
Eyg4MmI2ODk5ZTdkZDJjN2VlMDY3MGVjYjZmNTliMDY2NmE0ZmMwODQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0w2dod6l4oJoLaYfokkdnSS0m+q
7nzQqPzwh3SMvLF4lxqIN09zs9DtyHCBElv4VzBnfI2F+OssdDjCoNNUr4THY9LM
pZIbwRMB8z396KKNHhDkTLMe6CVaV47AaE6mU7WB0Fz1GYSlHR7YwRjYQJWO4Ckj
RGOYByy5DuS2SjV5r5Djkmwl2k83l/Z2Aav+4rAf1ihq/k5TRQTKNPTDfqRH/Ucw
BgqlqyIsKnckZ9NpQd8ZvrhJo10pweM8IK7TnXb9/xi/3pc5+TK139HmPuiFhOz0
cH29JGuJbO7MA/UE5wojd82LsbS8Py4F/9xlkGDSU4J+NJBd4bEO27g+TQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIK2iZ590sfuBnDstvWbBmak/AhBMB8GA1UdIwQY
MBaAFJxv/LW14t5FUaz5tFryQtuUWE5aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2Et
ZjJmMDk1NWRhMWFkLzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi85ODQxZmYtYzg4Ni00ZGEwLTk1N2EtZjJmMDk1NWRhMWFk
LzEvbkdfOHRiWGkza1ZSclBtMFd2SkMyNVJZVGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjoU8ERP/
f0esdVQro2TSGhwmbjlBfQkuIrWHOvIgCQdMQV4zNfBwKyhD0FPA/zVivmoXjC/e
4ZthtVxuvxe9OepoMr4qacyie+cxT6v4v+S+HeEoh0C7u+07btFBR5ug3W/TbxKN
a4Lp36AHJnbOBvG2L2F/kea5VbgNKudQqcV8q/ynpnCVxvY1PyQxWkTIDuDWAoWV
CdMFkyxXG0SUPCw6AHfylXngYo4duZWdAt1PK7jT20ERIdN0oZx5StlsD6dAOFte
cwzqNFVzgpDMmB+RX+7+jEXyAMxlCD4/K1dWRCIXjl8ehrW6O85aTkyoBXVpupDr
Kehf2NGKwKr27A==
-----END CERTIFICATE-----
Generated at Mon Oct 12 13:37:11 2026 by rpki-client