Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
File: nAqMF3kR9kwwVXNogVueZ9j8PA8.mft (raw, json)
Hash identifier: ybGwyoRvsbn0uHFlzw4eLqpy9VCEOoVhwLGGdkn9JHs=
Subject key identifier: B6:35:E7:FC:86:97:62:51:A7:5A:3F:67:84:DA:31:C9:4B:3B:D9:5E
Authority key identifier: 9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
Certificate issuer: /CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Certificate serial: 019DA41CAE070A96781968AD6B287235EDAC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
Manifest number: 0ED9
Signing time: Sun 19 Apr 2026 05:00:36 +0000
Manifest this update: Sun 19 Apr 2026 05:00:36 +0000
Manifest next update: Mon 20 Apr 2026 05:00:36 +0000
Files and hashes: 1: apqOufkzZC3hvfLS0yrWU54SWG4.roa (hash: bdicC57sTedPfwJhANjdpge4Xu2b5dLjhbZNF/3RXQM=)
2: nAqMF3kR9kwwVXNogVueZ9j8PA8.crl (hash: LigPL4IZmIBM/NSBfwqNRdSngt7fY26ptnXQNA2qGiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:ae:07:0a:96:78:19:68:ad:6b:28:72:35:ed:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0a8c177911f64c30557368815b9e67d8fc3c0f
Validity
Not Before: Apr 19 05:00:36 2026 GMT
Not After : Apr 20 05:00:36 2026 GMT
Subject: CN=b635e7fc86976251a75a3f6784da31c94b3bd95e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:7d:2c:dd:c1:4d:b3:d7:3d:fe:f2:d0:da:ac:
6c:38:6b:8d:a7:23:55:36:4f:46:1b:52:36:65:09:
76:9f:b2:89:3d:f3:a3:75:fa:91:08:5f:18:dd:7f:
7f:24:b3:00:eb:64:90:30:bf:c7:34:f3:32:79:7c:
46:0e:c7:61:07:69:42:4a:ce:55:42:64:38:68:c7:
f7:14:8e:85:ee:2a:21:ea:f4:bc:cf:0c:ef:c8:f8:
6d:e2:6a:4e:f8:71:f9:76:e8:15:2c:18:ce:06:03:
00:44:2d:e1:f0:a0:5b:0c:61:ca:de:7a:a1:d3:01:
4e:36:ef:84:f8:28:d1:d4:00:c6:50:b7:91:15:f0:
1f:72:59:b4:24:a2:b0:2a:18:57:c3:bd:28:89:49:
dc:e1:8e:22:a5:1f:05:6b:4e:6b:fa:2e:25:48:c8:
13:01:88:18:07:dd:42:26:12:12:55:38:b5:2b:4d:
7b:33:bf:38:de:38:80:60:56:3b:57:9b:e1:b8:71:
aa:06:74:68:68:c5:0e:d4:cb:e7:c8:1f:c0:7d:37:
f2:62:18:a2:8b:51:e0:d5:b9:a9:e4:d9:b7:1b:80:
00:82:0b:0d:8b:8e:a4:66:8c:76:cd:50:c4:fa:c5:
dd:ac:e3:ba:77:d4:c5:27:4b:50:3b:a4:64:e9:e5:
65:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:35:E7:FC:86:97:62:51:A7:5A:3F:67:84:DA:31:C9:4B:3B:D9:5E
X509v3 Authority Key Identifier:
keyid:9C:0A:8C:17:79:11:F6:4C:30:55:73:68:81:5B:9E:67:D8:FC:3C:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAqMF3kR9kwwVXNogVueZ9j8PA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/4c7379-3649-41de-89f7-d56374e1157a/1/nAqMF3kR9kwwVXNogVueZ9j8PA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:a5:72:85:79:e9:08:d1:84:f5:13:78:db:04:e6:82:41:bc:
62:4e:f3:c7:5e:71:df:f9:7e:61:55:5e:a6:fb:3b:f2:38:7f:
c8:a7:26:6e:62:45:ff:8b:00:b0:7b:ae:6b:89:13:e1:a9:a7:
a6:ba:1e:8b:2d:47:b8:90:b9:4f:e1:e6:35:c3:e1:cb:16:bd:
c8:41:bf:3a:b3:3a:91:4f:dd:83:21:2a:07:ce:9c:74:a4:dc:
0c:91:f7:80:de:68:e4:0e:6e:6b:55:c8:c4:d4:27:88:48:bb:
8d:b9:2c:a3:1a:3d:66:5e:92:54:ed:ec:2c:dc:38:e5:14:e2:
4f:d8:66:9c:48:8f:b3:ab:e2:8b:30:22:49:8b:3b:15:a8:74:
5a:13:0f:ad:71:ad:1e:99:c6:02:56:ae:dd:c4:06:bb:48:c4:
63:a1:04:14:e3:b5:4b:78:99:15:34:49:ec:a2:24:f5:49:59:
5f:05:fd:3d:bf:7e:e3:6a:5c:42:81:6e:3d:85:84:74:8a:a7:
00:1c:ed:df:7f:a7:55:1b:99:f5:64:d1:34:9a:06:91:6e:cc:
94:55:8e:7f:10:36:8f:ac:3a:f4:a4:61:46:d6:fa:81:2a:f3:
8e:dc:d3:75:84:d1:eb:f4:b1:3f:d4:da:08:b0:fd:64:d5:30:
32:2a:9c:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2kHK4HCpZ4GWitayhyNe2sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljMGE4YzE3NzkxMWY2NGMzMDU1NzM2ODgxNWI5ZTY3ZDhm
YzNjMGYwHhcNMjYwNDE5MDUwMDM2WhcNMjYwNDIwMDUwMDM2WjAzMTEwLwYDVQQD
EyhiNjM1ZTdmYzg2OTc2MjUxYTc1YTNmNjc4NGRhMzFjOTRiM2JkOTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6n0s3cFNs9c9/vLQ2qxsOGuNpyNV
Nk9GG1I2ZQl2n7KJPfOjdfqRCF8Y3X9/JLMA62SQML/HNPMyeXxGDsdhB2lCSs5V
QmQ4aMf3FI6F7ioh6vS8zwzvyPht4mpO+HH5dugVLBjOBgMARC3h8KBbDGHK3nqh
0wFONu+E+CjR1ADGULeRFfAfclm0JKKwKhhXw70oiUnc4Y4ipR8Fa05r+i4lSMgT
AYgYB91CJhISVTi1K017M7843jiAYFY7V5vhuHGqBnRoaMUO1MvnyB/AfTfyYhii
i1Hg1bmp5Nm3G4AAggsNi46kZox2zVDE+sXdrOO6d9TFJ0tQO6Rk6eVl3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY15/yGl2JRp1o/Z4TaMclLO9leMB8GA1UdIwQY
MBaAFJwKjBd5EfZMMFVzaIFbnmfY/DwPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5Zjct
ZDU2Mzc0ZTExNTdhLzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80YzczNzktMzY0OS00MWRlLTg5ZjctZDU2Mzc0ZTExNTdh
LzEvbkFxTUYza1I5a3d3VlhOb2dWdWVaOWo4UEE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADaVyhXnp
CNGE9RN42wTmgkG8Yk7zx15x3/l+YVVepvs78jh/yKcmbmJF/4sAsHuua4kT4amn
proeiy1HuJC5T+HmNcPhyxa9yEG/OrM6kU/dgyEqB86cdKTcDJH3gN5o5A5ua1XI
xNQniEi7jbksoxo9Zl6SVO3sLNw45RTiT9hmnEiPs6viizAiSYs7Fah0WhMPrXGt
HpnGAlau3cQGu0jEY6EEFOO1S3iZFTRJ7KIk9UlZXwX9Pb9+42pcQoFuPYWEdIqn
ABzt33+nVRuZ9WTRNJoGkW7MlFWOfxA2j6w69KRhRtb6gSrzjtzTdYTR6/SxP9Ta
CLD9ZNUwMiqc1A==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:13:43 2026 by rpki-client