Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: oliSddF6ylE2NwSy+LMzZ7UohTE2KZ9RRBQdMH310Ls=
Subject key identifier: 3F:2E:BF:BD:E0:81:85:E2:1F:8F:EC:69:FF:6C:D0:3A:C6:B3:F4:EB
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 019DA52FCCA81398FD9B33F2041ED9CFDE50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 0F
Signing time: Sun 19 Apr 2026 10:01:06 +0000
Manifest this update: Sun 19 Apr 2026 10:01:06 +0000
Manifest next update: Mon 20 Apr 2026 10:01:06 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: mX4Zbd+jwJCqVQgxZifZID8HAhchHyccmY0g8kjTig8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:cc:a8:13:98:fd:9b:33:f2:04:1e:d9:cf:de:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: Apr 19 10:01:06 2026 GMT
Not After : Apr 20 10:01:06 2026 GMT
Subject: CN=3f2ebfbde08185e21f8fec69ff6cd03ac6b3f4eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:73:92:35:f6:0a:1f:63:3d:ec:1e:23:9a:00:
d4:74:8c:38:57:2d:4c:9f:ff:3b:b7:24:a7:35:81:
f3:8d:48:1d:3e:74:6d:75:7c:9f:e6:4f:15:8e:86:
45:80:74:58:2a:c3:74:67:26:0c:1b:97:b2:f5:60:
86:4c:a6:2a:c2:b8:ad:32:5c:2b:ab:ba:1c:9b:50:
06:0b:60:44:48:d1:a6:50:fa:b2:e6:ae:ba:dc:13:
f1:75:1d:2d:3d:2e:f2:7e:3a:d4:00:16:f3:0e:33:
51:6c:cf:5a:ed:36:ed:a5:2f:c7:bc:18:62:ba:8e:
85:c8:cd:f4:04:e7:50:aa:e4:84:98:db:c7:26:bf:
cd:19:52:90:c6:bd:ca:fb:bb:c8:fd:66:c0:8a:be:
15:4f:25:ca:f8:18:81:5e:b9:a8:59:db:81:b5:74:
91:79:dc:5d:b5:75:90:2e:76:1b:f1:1b:7d:5d:0a:
43:31:17:bb:21:3b:4a:ad:af:aa:10:92:9e:60:a6:
b3:c9:c9:d4:b9:7b:99:e8:d6:bb:2b:95:d6:40:9a:
99:c2:d8:94:21:9e:7a:60:b3:00:c6:21:15:d1:8b:
97:55:bc:25:05:fa:ad:ca:2e:cb:da:88:5a:ca:30:
fa:da:8c:f7:35:1d:ab:db:f5:a2:c0:2a:02:d9:20:
d1:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:2E:BF:BD:E0:81:85:E2:1F:8F:EC:69:FF:6C:D0:3A:C6:B3:F4:EB
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2a:53:af:5a:09:01:9c:5b:43:ca:0c:81:58:95:4a:31:74:
68:83:8b:7a:fa:a9:14:ec:a7:fd:a5:7c:85:43:e2:77:08:8d:
28:ca:13:ac:74:54:b9:c7:9c:bf:0e:3b:a4:be:6f:2a:dc:72:
7d:e2:bb:66:83:55:c4:6d:20:53:5d:39:e0:cf:88:01:e1:8a:
b1:95:ca:57:7b:9c:fd:1a:67:d9:da:d9:b2:ac:8d:a6:66:01:
b5:54:00:34:00:2f:e3:63:15:c2:59:71:78:d3:3e:16:e5:5f:
64:8e:69:a4:09:38:ef:eb:eb:bf:5a:9c:d0:49:3e:84:31:3b:
90:c5:4a:6b:10:e9:e6:11:79:b0:00:3f:e8:0b:4e:33:a8:97:
17:36:2d:7a:fa:cb:a0:32:95:a3:3a:c2:9d:e7:a6:e4:53:f6:
0b:dc:b3:dd:a7:27:d9:24:38:12:2d:9a:c7:f5:58:20:ce:a9:
ae:f1:d8:bf:75:40:5d:2c:c0:52:ce:32:83:ca:e4:11:81:99:
83:36:c0:76:de:fc:45:87:ca:6c:d6:f5:3c:d9:3f:be:0d:66:
b8:21:c3:4f:d7:f4:bd:83:a4:8c:46:f9:95:01:73:7f:d6:94:
06:56:42:c3:8e:1e:90:64:86:ab:42:82:43:9c:f5:4d:3c:a4:
e4:77:fc:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:36:41 2026 by rpki-client