Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
File: NNDsesTDkeTsup0KN0kZGxjr-TQ.mft (raw, json)
Hash identifier: QGgLf/U20QOaRG6Q2cCG8YsYGRapRAarzB50X1mxBTk=
Subject key identifier: 4A:B7:67:30:64:20:B0:0E:36:69:8D:CD:B4:00:44:49:D9:53:3D:D9
Authority key identifier: 34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
Certificate issuer: /CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Certificate serial: 019D9AAB73428F72F42B1CF560F501B179B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
Manifest number: 1145
Signing time: Fri 17 Apr 2026 09:00:20 +0000
Manifest this update: Fri 17 Apr 2026 09:00:20 +0000
Manifest next update: Sat 18 Apr 2026 09:00:20 +0000
Files and hashes: 1: 5aUFJ1nRNDZXvDlW5Ib7ApLcjzU.roa (hash: CM2yuZbmUG7aD/W6YESLWl+Ll1dOOpDPDyQg/E7d6L8=)
2: NNDsesTDkeTsup0KN0kZGxjr-TQ.crl (hash: IH/OhKIGYYEb4AUvQI9bjPmo5ofHU4vt477xfn4pk5I=)
3: OXINEPIBnVaglpO2WDs_RqIzbkc.roa (hash: aSnB+0+0CnA11ivltYbXw+kEcjRN69vsEQ+sqlBivaA=)
4: PSJHF0T7csTccKL_3bcCSL4cmds.roa (hash: gSWHMoNkvXzeD2od1079ScFl5g/lvv5imGebCIsGgDs=)
5: WnoEZcRKFsEIGDrcD6eNi-NlUKc.roa (hash: 8G8cCnlz9tk6XzMq2zPRRygvIM2OH91XUUZ803rheUU=)
6: jBtjySCq2ld1Ntg6smiqyHDsdNs.roa (hash: zVyG6ZDReg9r2lMt4sCY0P5PMeh7pF+y9sNnS21ueDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:73:42:8f:72:f4:2b:1c:f5:60:f5:01:b1:79:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d0ec7ac4c391e4ecba9d0a3749191b18ebf934
Validity
Not Before: Apr 17 09:00:20 2026 GMT
Not After : Apr 18 09:00:20 2026 GMT
Subject: CN=4ab767306420b00e36698dcdb4004449d9533dd9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:d4:73:95:c7:da:f0:1d:7f:88:5f:c6:91:47:
1c:0c:bc:b4:7b:c4:1f:da:21:42:b3:06:1c:05:bf:
7e:f4:b2:d3:cd:43:92:c8:0c:f6:06:72:22:6d:d4:
2a:b8:e0:f5:56:89:28:03:ba:06:62:e8:6c:44:3d:
c9:30:24:a5:65:37:c8:00:cb:d6:64:cf:e9:a1:62:
f9:d0:7e:18:b5:ef:5c:71:2d:ad:0f:d2:2a:58:6a:
de:31:e7:d5:a3:07:4d:4b:87:2c:ac:78:9d:75:98:
47:0c:dc:2d:06:d6:fd:7f:78:3b:cd:d2:00:d0:45:
69:bd:69:fe:bd:0c:37:2e:b5:30:3c:91:72:15:ed:
ac:37:86:66:f7:e1:11:f4:9c:4f:41:83:09:36:62:
9e:a9:a7:96:ad:bb:18:f2:d3:32:e7:ed:b4:fa:6f:
57:dd:ef:6d:96:fc:8e:87:f6:6f:a5:97:7c:e1:94:
40:3a:68:c3:04:db:46:03:7e:aa:d1:73:72:ce:b4:
55:dd:da:5d:1d:ff:64:f0:75:db:5f:2a:30:87:23:
f0:57:e8:bc:97:7d:61:3c:f6:e6:20:aa:1d:2f:c5:
1b:a4:44:ce:e2:bb:f0:07:7f:0f:ec:a2:d7:1d:24:
fc:4d:db:89:f5:4e:36:2d:18:96:ec:5d:9f:ef:46:
2a:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B7:67:30:64:20:B0:0E:36:69:8D:CD:B4:00:44:49:D9:53:3D:D9
X509v3 Authority Key Identifier:
keyid:34:D0:EC:7A:C4:C3:91:E4:EC:BA:9D:0A:37:49:19:1B:18:EB:F9:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNDsesTDkeTsup0KN0kZGxjr-TQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/f7f53d-068c-444e-ad1e-b7c2696bae50/1/NNDsesTDkeTsup0KN0kZGxjr-TQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:fd:38:0a:e1:42:47:6d:9f:4f:ae:0c:fb:e8:19:3a:86:8f:
d5:ce:f6:f9:10:e0:54:93:85:bb:a8:02:8b:2c:6e:c9:b7:6a:
fe:b8:53:4a:3e:1a:7b:ed:81:e9:bc:58:9e:f1:12:f3:4c:e5:
42:92:e6:a1:00:8e:5f:d0:a9:f0:bf:81:07:ea:35:3f:2c:82:
b9:49:a6:39:47:5e:5a:c1:5e:4e:38:ab:c7:91:3f:4e:44:e0:
6d:31:46:bd:9e:06:fd:34:0f:7a:b9:04:1a:c3:7a:36:d9:d1:
60:a6:d5:74:f1:21:b9:12:66:59:9f:4b:76:e0:d9:32:cd:b5:
65:4b:2a:9e:41:97:9c:e3:ba:ab:5b:25:14:c9:8b:1d:ee:5a:
29:de:98:6a:78:54:ad:a5:84:78:c5:e8:5a:35:06:a0:ee:79:
90:3f:fb:0e:4d:6d:a9:7c:3a:18:cd:b5:84:5a:8e:a7:86:6e:
f1:67:4d:0f:b5:5b:3b:69:57:dc:81:13:4f:5b:f1:3f:b8:2a:
82:ee:e6:36:56:14:21:8b:79:6b:c3:08:e9:a2:ce:c2:89:ab:
e2:a3:ad:74:8b:c1:87:3d:97:66:25:28:e8:c0:55:c2:84:66:
19:b1:22:d8:b9:c9:b3:91:7b:c2:3c:20:68:2e:89:ec:36:a1:
87:81:08:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aq3NCj3L0Kxz1YPUBsXmzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0ZDBlYzdhYzRjMzkxZTRlY2JhOWQwYTM3NDkxOTFiMThl
YmY5MzQwHhcNMjYwNDE3MDkwMDIwWhcNMjYwNDE4MDkwMDIwWjAzMTEwLwYDVQQD
Eyg0YWI3NjczMDY0MjBiMDBlMzY2OThkY2RiNDAwNDQ0OWQ5NTMzZGQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNRzlcfa8B1/iF/GkUccDLy0e8Qf
2iFCswYcBb9+9LLTzUOSyAz2BnIibdQquOD1VokoA7oGYuhsRD3JMCSlZTfIAMvW
ZM/poWL50H4Yte9ccS2tD9IqWGreMefVowdNS4csrHiddZhHDNwtBtb9f3g7zdIA
0EVpvWn+vQw3LrUwPJFyFe2sN4Zm9+ER9JxPQYMJNmKeqaeWrbsY8tMy5+20+m9X
3e9tlvyOh/ZvpZd84ZRAOmjDBNtGA36q0XNyzrRV3dpdHf9k8HXbXyowhyPwV+i8
l31hPPbmIKodL8UbpETO4rvwB38P7KLXHST8TduJ9U42LRiW7F2f70Yq1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEq3ZzBkILAONmmNzbQAREnZUz3ZMB8GA1UdIwQY
MBaAFDTQ7HrEw5Hk7LqdCjdJGRsY6/k0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUt
YjdjMjY5NmJhZTUwLzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS9mN2Y1M2QtMDY4Yy00NDRlLWFkMWUtYjdjMjY5NmJhZTUw
LzEvTk5Ec2VzVERrZVRzdXAwS04wa1pHeGpyLVRRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFv04CuFC
R22fT64M++gZOoaP1c72+RDgVJOFu6gCiyxuybdq/rhTSj4ae+2B6bxYnvES80zl
QpLmoQCOX9Cp8L+BB+o1PyyCuUmmOUdeWsFeTjirx5E/TkTgbTFGvZ4G/TQPerkE
GsN6NtnRYKbVdPEhuRJmWZ9LduDZMs21ZUsqnkGXnOO6q1slFMmLHe5aKd6YanhU
raWEeMXoWjUGoO55kD/7Dk1tqXw6GM21hFqOp4Zu8WdND7VbO2lX3IETT1vxP7gq
gu7mNlYUIYt5a8MI6aLOwomr4qOtdIvBhz2XZiUo6MBVwoRmGbEi2LnJs5F7wjwg
aC6J7Dahh4EI8w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:39:58 2026 by rpki-client