Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
File: nHIayAejJvhxu6oYSWPNYCtcwtY.mft (raw, json)
Hash identifier: BQ5EjJdrBrj7KBvGGbf30W1zaFKBVhx8+Cs2GwHJC3o=
Subject key identifier: 55:12:1D:A0:94:8F:51:A4:E2:45:A2:FB:EB:73:A6:3B:84:4C:77:D0
Authority key identifier: 9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
Certificate issuer: /CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Certificate serial: 019D9B19C40769FF089356882C561F60D9EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 11:00:50 +0000
Manifest this update: Fri 17 Apr 2026 11:00:50 +0000
Manifest next update: Sat 18 Apr 2026 11:00:50 +0000
Files and hashes: 1: Om7ZQ-8XCQlgOaJIlxkUZHdp1tc.roa (hash: bjl4aARKpgl6sPBL+R2cds28ZzucnTcBrTeFC8PyXIc=)
2: nHIayAejJvhxu6oYSWPNYCtcwtY.crl (hash: hK30RTp40vLY8Qnin8R05WLU8RB8IjVKbR9MD1QolvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:c4:07:69:ff:08:93:56:88:2c:56:1f:60:d9:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c721ac807a326f871bbaa184963cd602b5cc2d6
Validity
Not Before: Apr 17 11:00:50 2026 GMT
Not After : Apr 18 11:00:50 2026 GMT
Subject: CN=55121da0948f51a4e245a2fbeb73a63b844c77d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:50:dd:36:8b:ae:90:ab:b3:87:57:41:f8:e1:
09:3a:07:6a:a0:2d:41:e4:c1:f1:f0:46:ae:46:02:
5e:c9:a4:77:fe:d4:cf:6b:10:e6:e5:ff:5a:5f:75:
e1:24:6a:cd:05:2a:4e:bf:90:27:d5:a2:55:7e:85:
f5:5a:69:67:c0:0e:36:6f:6c:e5:ad:8d:ff:92:2b:
9a:7d:85:ae:68:c5:82:13:8e:9e:b5:a6:f4:f4:f9:
b7:03:32:1a:eb:02:83:29:a8:15:3b:f4:8e:9a:dd:
33:1c:d9:73:d3:d1:d8:12:fa:9d:e5:ea:b8:86:f0:
ed:ef:87:87:de:a4:f3:9c:68:7d:3c:dd:2f:4e:96:
cf:45:84:cb:6b:b3:c4:8d:77:c7:03:cc:56:0e:9c:
23:cf:6b:ad:d6:2c:bb:8a:8d:a7:d1:c4:16:3e:f3:
4d:94:db:00:9a:c5:47:6a:03:da:77:51:97:72:5e:
e0:f4:22:4a:55:be:27:cf:21:5f:10:8f:12:63:b1:
b4:67:6d:03:04:bf:29:bc:05:60:06:47:74:3b:9d:
0b:da:98:f9:86:fe:b8:48:9c:b4:a0:aa:05:58:88:
c4:45:7b:ed:34:94:f8:2a:77:3b:b5:dc:8d:68:f5:
4e:68:72:13:9b:58:a5:2a:95:56:84:98:e3:4b:c5:
76:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:12:1D:A0:94:8F:51:A4:E2:45:A2:FB:EB:73:A6:3B:84:4C:77:D0
X509v3 Authority Key Identifier:
keyid:9C:72:1A:C8:07:A3:26:F8:71:BB:AA:18:49:63:CD:60:2B:5C:C2:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHIayAejJvhxu6oYSWPNYCtcwtY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/464260-8d7e-4507-b44b-2864707b2b3f/1/nHIayAejJvhxu6oYSWPNYCtcwtY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:fe:43:c2:9f:eb:d1:88:7c:8e:6f:9a:0e:52:9f:ce:2c:88:
98:e3:29:8e:0f:a9:8d:ba:28:c8:9a:27:6e:2a:19:23:da:b8:
54:35:87:e4:9d:0d:3c:35:4f:c2:b4:f8:c3:db:16:a7:2c:5f:
f0:b8:40:13:c5:0a:64:8f:7e:54:c4:b2:31:8a:4f:04:53:ea:
dc:ed:34:19:b3:71:d3:c2:0b:6f:98:3f:c6:a1:7a:46:95:f3:
d9:32:33:20:97:95:f3:ec:c8:27:35:17:e5:9f:59:f6:91:07:
e2:0e:a0:fb:66:85:34:6a:53:b2:fb:a4:76:a4:27:89:23:99:
2b:0e:a0:88:1d:5f:58:f3:47:ea:de:77:20:69:6c:cd:38:74:
9a:f4:5c:f8:83:28:3c:e4:00:62:52:72:27:62:d9:64:dd:cf:
08:61:8a:43:9b:4c:ac:65:c7:01:0d:2c:f7:ed:9f:61:c7:99:
ef:89:68:13:10:44:23:42:e3:ea:c0:f1:b8:f4:1c:d2:fa:ff:
68:05:35:73:dd:a5:0c:0c:2a:4b:b4:d5:8f:c0:14:ae:50:56:
d9:17:16:3e:9a:ca:d6:98:ce:b4:ab:0d:69:2a:94:71:5a:cc:
61:ed:2a:46:67:a8:7e:2b:65:84:fa:f6:5f:c4:6e:1a:fa:2f:
ff:82:98:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:32:34 2026 by rpki-client