Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: ptwd+0fRzvE4QNcYKsTdfGXjY90oOOeRbYfxKz7a+qg=
Subject key identifier: 9B:C1:64:FF:8F:7A:D1:04:A4:B0:42:B2:55:A7:84:6C:07:00:96:72
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019D99628616A1BEA4AC4DC6EC9A348E92CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 03:01:03 +0000
Manifest this update: Fri 17 Apr 2026 03:01:03 +0000
Manifest next update: Sat 18 Apr 2026 03:01:03 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: EKS5WjsVsGuOGHDre9gKqTOjT779/cGnjM+OuSEmmGw=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:86:16:a1:be:a4:ac:4d:c6:ec:9a:34:8e:92:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Apr 17 03:01:03 2026 GMT
Not After : Apr 18 03:01:03 2026 GMT
Subject: CN=9bc164ff8f7ad104a4b042b255a7846c07009672
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:b2:fd:8b:53:6a:8b:cd:d7:a8:52:1c:58:
23:24:6e:9e:e8:e6:49:66:3a:20:24:84:2d:0f:68:
1b:38:6e:da:b4:85:7d:e7:82:19:77:06:70:05:83:
e7:22:ef:ac:a7:de:d5:25:a9:da:18:c9:26:07:a0:
17:f9:6f:2e:b3:94:a7:37:a5:62:4a:71:18:5c:13:
0d:be:cd:40:08:38:91:ef:4d:f0:bb:4c:45:13:92:
8a:1e:11:b4:11:b9:33:aa:8e:fe:4b:77:91:da:1c:
05:08:70:8c:47:51:0a:a5:82:7c:5d:40:81:2a:a0:
98:1f:93:00:9c:ed:e0:06:31:24:f9:3b:8b:a2:8b:
92:ba:dc:74:73:ce:dd:43:03:d9:ff:2e:75:47:f3:
eb:91:02:00:7d:17:e4:83:06:c2:a4:03:95:15:8a:
c9:a6:fe:98:cf:e4:fc:80:57:f8:e5:7b:8f:d7:be:
d2:7e:5d:6b:fa:4b:ce:4e:a6:33:01:6c:cc:3b:d0:
83:e8:8b:35:a1:5e:df:db:6e:5b:94:93:91:55:59:
41:6e:48:12:b7:b1:95:68:08:6a:bc:49:d7:e6:f8:
10:ee:e1:68:cf:ae:77:0a:43:a9:fb:0f:3b:f0:ff:
bc:c3:eb:c0:65:99:75:b8:54:7f:81:cd:e4:04:60:
99:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:C1:64:FF:8F:7A:D1:04:A4:B0:42:B2:55:A7:84:6C:07:00:96:72
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:62:1b:5c:5f:93:4b:ad:9b:e8:f5:71:fa:9a:33:bd:01:7b:
9f:f4:30:f3:83:ac:60:dc:92:3d:c3:46:a8:13:eb:27:73:ee:
87:1e:8a:27:1b:16:54:dd:48:bd:2a:4d:e7:03:2d:aa:2e:54:
48:4a:87:58:09:2d:5e:eb:4c:0a:4d:dc:20:f4:f3:c1:1a:2f:
2a:53:b1:75:ef:e8:43:80:d4:49:a5:77:21:b1:32:d6:bb:cb:
c2:c4:2e:3b:d9:b4:30:72:3f:f0:5c:fa:cd:41:a5:78:99:6b:
eb:15:86:b2:f8:9c:3f:39:d6:0d:2c:eb:74:48:df:c5:9f:31:
a1:f6:d5:3a:7e:fb:b8:39:85:b1:c9:06:8b:df:48:0f:8f:22:
6d:37:75:b3:1a:49:55:1d:66:47:75:af:00:d0:05:9b:de:ef:
fe:e9:f3:71:8f:c6:64:22:10:f1:ac:45:54:ea:a0:b7:a1:ba:
0a:cc:40:b1:7c:31:ad:1a:3e:be:5f:f7:58:98:88:62:fd:ba:
06:45:12:f1:1a:7d:3b:04:20:66:9c:56:dc:d3:76:e0:f0:b5:
64:ad:5f:1f:33:2b:13:1e:af:23:b3:13:cb:f2:4e:ff:9d:e2:
5e:6e:f5:a4:87:27:dd:ce:5c:ea:7e:bb:61:14:40:2b:6c:f3:
0b:67:0f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:06:50 2026 by rpki-client