Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
File: nL6cQ-51mJYAORlQhzRyM0a_cBY.mft (raw, json)
Hash identifier: OoLOpUiHxkUBW/xMh63vs8Bg6u00K5S23RsXUJXAuZo=
Subject key identifier: 1B:E7:24:C3:8C:73:DF:35:94:EF:F3:DF:0E:5F:D4:C4:87:78:91:78
Authority key identifier: 9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
Certificate issuer: /CN=9cbe9c43ee759896003919508734723346bf7016
Certificate serial: 019D9D3FC93588AD682E07CB55E14625C946
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
Manifest number: 1487
Signing time: Fri 17 Apr 2026 21:01:36 +0000
Manifest this update: Fri 17 Apr 2026 21:01:36 +0000
Manifest next update: Sat 18 Apr 2026 21:01:36 +0000
Files and hashes: 1: _ywMYxiU8NbIN1CGjVxjq4SDazI.roa (hash: epZRiBRCbCpE9Pbvl3sOJJDu8ewPmMS8D3a+HxpVf0g=)
2: nL6cQ-51mJYAORlQhzRyM0a_cBY.crl (hash: LNznTSWy+9XYmKKeg8gcydpYYO7lRhAPP1GoeceEV2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3f:c9:35:88:ad:68:2e:07:cb:55:e1:46:25:c9:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbe9c43ee759896003919508734723346bf7016
Validity
Not Before: Apr 17 21:01:36 2026 GMT
Not After : Apr 18 21:01:36 2026 GMT
Subject: CN=1be724c38c73df3594eff3df0e5fd4c487789178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:db:d0:3a:84:d4:28:c6:a6:4e:be:e7:f7:f1:
75:f1:2a:54:0b:cb:1e:c3:7c:37:3d:bb:43:de:f4:
84:c5:25:65:82:08:33:3f:f1:57:c1:cb:95:e7:f4:
3f:7a:ac:2b:6a:ca:94:3a:78:3f:39:2e:fa:7c:09:
10:94:7e:31:84:ce:34:d9:0d:33:29:f0:4c:72:f8:
e3:9b:24:41:62:71:98:0b:db:1d:8a:a2:93:89:3f:
6b:da:6a:f9:20:d5:13:97:a8:41:7f:ae:cf:c0:b9:
e2:63:ad:bc:af:1c:bc:1a:85:ab:78:a5:ef:1f:9b:
90:f7:21:aa:57:df:15:99:d3:cb:25:41:98:7d:c3:
7b:92:0b:ef:b8:71:0f:81:1a:59:75:c4:6a:ac:7c:
ae:f4:78:f6:f2:c2:8b:42:c1:60:d0:c5:ed:77:17:
17:dc:6d:37:da:a7:b4:de:f7:93:91:18:30:ed:0c:
d8:fe:c9:79:81:47:73:53:8c:e0:4b:66:06:51:b2:
1e:47:5e:83:01:d1:cf:a7:a9:89:ab:84:e3:62:2c:
f0:42:00:55:ce:2c:94:4b:3d:2a:a1:9a:d1:b3:02:
21:6d:9a:a7:da:1a:2d:48:38:c7:05:81:ba:08:7d:
3a:0a:4e:a3:9d:60:ae:9e:32:f5:37:3a:ab:45:9b:
cf:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:E7:24:C3:8C:73:DF:35:94:EF:F3:DF:0E:5F:D4:C4:87:78:91:78
X509v3 Authority Key Identifier:
keyid:9C:BE:9C:43:EE:75:98:96:00:39:19:50:87:34:72:33:46:BF:70:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nL6cQ-51mJYAORlQhzRyM0a_cBY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/f974e9-4743-46db-a348-1d1989f06618/1/nL6cQ-51mJYAORlQhzRyM0a_cBY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:37:d7:4e:c1:09:7a:37:aa:13:b3:64:ad:de:fd:98:9f:1a:
19:bd:49:ae:f2:10:10:f5:80:42:68:f1:18:10:ff:1d:cb:f0:
8b:3b:36:42:b4:33:db:2b:1f:ef:3e:4e:fb:fa:12:5c:37:8e:
22:c2:c0:e7:15:c8:25:8d:bc:1a:ec:17:74:e0:d5:54:56:af:
d8:c1:2c:e0:c3:1f:c8:15:32:ba:04:ba:16:ac:e7:94:c6:5f:
4e:a5:23:d3:f9:dc:ca:ce:36:26:ca:4f:96:e5:bd:8f:4a:16:
c7:c8:e2:b6:9b:21:2d:30:0a:ee:63:43:bd:fe:f0:76:14:6c:
ec:28:37:29:13:fb:1d:6f:5a:b4:be:1e:77:18:c5:7c:86:19:
08:8a:5a:6e:2f:71:f7:a7:62:ac:ad:06:b0:19:52:15:b2:d8:
6a:ca:6b:8b:2e:8b:7e:5e:12:65:b9:da:59:2e:08:a4:96:e1:
d1:28:90:bb:42:f8:2a:8e:d3:8f:c1:7d:56:20:a1:29:6c:e3:
dd:58:b1:6d:2b:8b:06:b7:78:e6:61:78:42:37:5b:ae:15:e5:
70:27:0e:59:91:81:c5:11:e7:c9:16:02:95:5f:b5:99:46:94:
68:37:d9:71:85:84:6d:4a:ba:d9:98:74:98:15:62:70:9f:04:
51:98:aa:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:02:14 2026 by rpki-client