Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
File: NztHo87nmYKtsXA0HQICYCczICM.mft (raw, json)
Hash identifier: VP7IzEQAwuZrK7Lo5HBWjqCoXbg1AHSVeCBfLLWph1w=
Subject key identifier: 8E:E7:C4:3B:C0:2E:E4:59:8F:41:BF:7D:2D:5D:68:70:36:38:B1:54
Authority key identifier: 37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
Certificate issuer: /CN=373b47a3cee79982adb170341d02026027332023
Certificate serial: 019D9A3EC6B45FB6EC060E75214313EA24F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 07:01:38 +0000
Manifest this update: Fri 17 Apr 2026 07:01:38 +0000
Manifest next update: Sat 18 Apr 2026 07:01:38 +0000
Files and hashes: 1: EhbDV-ZEobAKZPJC0NEd9rEnh3M.roa (hash: 8dSJ4V344uYPfv20kAYh7+/QdkqmIXoZCP2MoBXPCpg=)
2: Fkfx-G5QL9i_y4t8EzraGT25sro.roa (hash: Z3pIWqwQsVYBQFolUdVnXyqDy8vnTGDvbMN3ug4bHxw=)
3: NztHo87nmYKtsXA0HQICYCczICM.crl (hash: +7SQhuIloLrH6wtRn68z7M0ufZuVNeAGRgGrKSis72Q=)
4: m0NQBZ6XvTWPMiWsX0wTun30DiM.roa (hash: 7AzW8C0oi0Ht7xq3BopOUhvowxO30E+ewpFpqQ9MzqY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:c6:b4:5f:b6:ec:06:0e:75:21:43:13:ea:24:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=373b47a3cee79982adb170341d02026027332023
Validity
Not Before: Apr 17 07:01:38 2026 GMT
Not After : Apr 18 07:01:38 2026 GMT
Subject: CN=8ee7c43bc02ee4598f41bf7d2d5d68703638b154
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:15:48:d7:48:68:a5:2b:54:2f:c4:91:e3:59:
b3:df:ab:b3:70:27:2e:20:c6:41:0f:64:1d:8b:da:
f6:b7:bc:dd:b3:ce:7b:c8:13:15:7d:fa:d8:cb:6d:
63:fe:aa:5a:56:7d:1a:ea:fd:e3:bd:c6:8a:e2:a4:
44:82:54:96:cf:bf:6c:b1:f0:cd:35:62:be:c5:6c:
50:e0:9e:7a:1b:9f:4f:bb:62:e8:da:cf:f9:e5:9c:
a1:e4:e9:16:86:77:ba:a5:c0:49:d1:f0:56:58:e7:
66:ff:a8:db:1f:2f:59:9b:d8:21:b9:7c:1c:d8:74:
cb:a8:a2:0b:18:3a:5d:2f:cc:5f:e9:30:b8:fd:bd:
71:0a:2e:2f:65:d3:80:6a:c0:62:f8:13:42:af:fc:
da:f9:cf:bd:c6:0e:6f:5e:2e:f2:9d:70:9c:9b:51:
15:39:b3:d0:98:a5:f1:a3:cb:25:31:2f:84:e8:91:
cc:6d:4e:8a:fc:05:19:eb:77:93:6b:0e:3d:1e:22:
11:97:2e:3b:ce:57:4a:c0:34:de:dd:99:e1:c1:23:
79:4c:91:0f:e3:7c:76:c8:cb:6f:8f:99:b2:0c:35:
81:55:96:4f:8c:52:24:10:10:19:97:b7:0a:8c:b5:
85:0b:85:81:1e:d0:47:06:9a:40:77:9b:29:72:3d:
3b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:E7:C4:3B:C0:2E:E4:59:8F:41:BF:7D:2D:5D:68:70:36:38:B1:54
X509v3 Authority Key Identifier:
keyid:37:3B:47:A3:CE:E7:99:82:AD:B1:70:34:1D:02:02:60:27:33:20:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NztHo87nmYKtsXA0HQICYCczICM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/7c2a15-ac4d-464a-a77e-32f9a282f56c/1/NztHo87nmYKtsXA0HQICYCczICM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:ed:d7:59:3d:4e:f8:c0:e6:90:08:8c:6b:fe:f3:a1:15:d2:
5f:81:e5:2e:50:77:4f:1b:13:c6:b1:bd:aa:4e:dc:e4:1c:2e:
be:5b:12:81:7a:c2:27:f6:8f:83:32:f1:0c:7e:be:c2:5e:b4:
00:5c:3e:33:8a:2a:e3:03:18:c4:88:e2:d2:49:51:1f:49:0e:
86:80:9a:21:a9:c6:e5:bf:14:c4:97:16:b7:78:cf:40:0f:ff:
9b:10:22:a9:00:38:d0:2c:56:c1:8b:10:43:f0:a2:40:86:55:
40:a8:cf:cc:87:98:f4:fd:7c:d3:12:7b:be:1a:88:79:f8:27:
52:87:78:5e:b6:81:a8:ea:23:85:12:f7:8a:75:7e:25:66:0c:
6c:7f:36:09:78:0e:40:31:ca:60:20:53:ec:3b:b1:33:09:e3:
68:1c:62:5c:6b:bf:64:98:2a:2c:a7:4a:71:a5:19:80:6d:5c:
52:de:9a:9f:78:ee:b1:94:6e:84:66:6b:6e:30:f7:0d:1b:fd:
ec:bf:0e:16:f8:6e:45:89:8c:64:a2:d7:2a:e7:c9:25:0a:70:
34:05:fb:39:40:59:2e:93:77:53:1a:86:9c:b6:52:f2:2e:c8:
10:a2:c5:92:b6:f1:0e:57:2b:2f:29:c9:c1:73:96:52:bb:cd:
fb:d2:4d:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPsa0X7bsBg51IUMT6iTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3M2I0N2EzY2VlNzk5ODJhZGIxNzAzNDFkMDIwMjYwMjcz
MzIwMjMwHhcNMjYwNDE3MDcwMTM4WhcNMjYwNDE4MDcwMTM4WjAzMTEwLwYDVQQD
Eyg4ZWU3YzQzYmMwMmVlNDU5OGY0MWJmN2QyZDVkNjg3MDM2MzhiMTU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBVI10hopStUL8SR41mz36uzcCcu
IMZBD2Qdi9r2t7zds857yBMVffrYy21j/qpaVn0a6v3jvcaK4qREglSWz79ssfDN
NWK+xWxQ4J56G59Pu2Lo2s/55Zyh5OkWhne6pcBJ0fBWWOdm/6jbHy9Zm9ghuXwc
2HTLqKILGDpdL8xf6TC4/b1xCi4vZdOAasBi+BNCr/za+c+9xg5vXi7ynXCcm1EV
ObPQmKXxo8slMS+E6JHMbU6K/AUZ63eTaw49HiIRly47zldKwDTe3ZnhwSN5TJEP
43x2yMtvj5myDDWBVZZPjFIkEBAZl7cKjLWFC4WBHtBHBppAd5spcj07+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI7nxDvALuRZj0G/fS1daHA2OLFUMB8GA1UdIwQY
MBaAFDc7R6PO55mCrbFwNB0CAmAnMyAjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2Ut
MzJmOWEyODJmNTZjLzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC83YzJhMTUtYWM0ZC00NjRhLWE3N2UtMzJmOWEyODJmNTZj
LzEvTnp0SG84N25tWUt0c1hBMEhRSUNZQ2N6SUNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl+3XWT1O
+MDmkAiMa/7zoRXSX4HlLlB3TxsTxrG9qk7c5BwuvlsSgXrCJ/aPgzLxDH6+wl60
AFw+M4oq4wMYxIji0klRH0kOhoCaIanG5b8UxJcWt3jPQA//mxAiqQA40CxWwYsQ
Q/CiQIZVQKjPzIeY9P180xJ7vhqIefgnUod4XraBqOojhRL3inV+JWYMbH82CXgO
QDHKYCBT7DuxMwnjaBxiXGu/ZJgqLKdKcaUZgG1cUt6an3jusZRuhGZrbjD3DRv9
7L8OFvhuRYmMZKLXKufJJQpwNAX7OUBZLpN3UxqGnLZS8i7IEKLFkrbxDlcrLynJ
wXOWUrvN+9JNdg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:44 2026 by rpki-client