Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
File: NIMjF9JURDS2WeVpIHHY5MSTiwY.mft (raw, json)
Hash identifier: kK5Fc14EHS+RMVVeTd+tHCFV6961JH753ryScaDr9zE=
Subject key identifier: B6:C8:E3:B8:17:71:2B:4B:9B:6E:15:2F:CE:D3:57:73:71:A5:A1:6D
Authority key identifier: 34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
Certificate issuer: /CN=34832317d2544434b659e5692071d8e4c4938b06
Certificate serial: 019D9AAC37BB119E0F0C4DAF31CCB7E5612E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
Manifest number: 0637
Signing time: Fri 17 Apr 2026 09:01:10 +0000
Manifest this update: Fri 17 Apr 2026 09:01:10 +0000
Manifest next update: Sat 18 Apr 2026 09:01:10 +0000
Files and hashes: 1: MtXK992XQ-M-hmv_KStvnyh-x5Q.roa (hash: M8VsnjB/uw1FiI9xmVKpQrIIX0KwLuaKoIKTTuviTH8=)
2: NIMjF9JURDS2WeVpIHHY5MSTiwY.crl (hash: q7XX7akdxHc/8BaBY0DZJB9AC6ReHp3M7/dAdM9BPSI=)
3: S3-C960eDjtkhmLESJEggehwHME.roa (hash: eXKQYhtmCASg+7u8rDqDnt6Fk8AoSBqR8NO1VXIyQ3c=)
4: r5VTzB_D--LT6ft6QpgyIKkudbM.roa (hash: 3oNMl/b2gquyHJLZema+rIR0bUrcCM54+yp4fRS/DTg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:37:bb:11:9e:0f:0c:4d:af:31:cc:b7:e5:61:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34832317d2544434b659e5692071d8e4c4938b06
Validity
Not Before: Apr 17 09:01:10 2026 GMT
Not After : Apr 18 09:01:10 2026 GMT
Subject: CN=b6c8e3b817712b4b9b6e152fced3577371a5a16d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:84:db:03:9d:5e:a8:4b:53:d0:22:d9:2d:fe:
24:e8:f4:9a:3e:ad:44:dc:28:39:98:51:ff:87:ff:
a3:d9:6d:59:1c:66:8d:3c:97:90:b8:84:32:cd:1f:
f3:3d:6e:96:00:0f:b4:56:fe:aa:c9:96:da:29:f9:
56:12:e1:df:43:fa:1e:78:07:f3:a1:eb:4b:3a:d5:
7e:8c:c3:59:c8:ab:69:b8:89:a9:7a:2e:14:5c:b6:
35:55:0f:41:0b:42:18:7c:d9:d9:01:42:63:a4:81:
a2:66:80:9b:df:8b:b0:e5:e2:8b:79:e3:11:65:7a:
e8:7f:d0:75:5a:e3:ea:3f:80:63:57:1a:01:fb:b0:
c3:bf:5c:1f:8c:ae:f2:14:3c:bc:8f:62:e1:19:47:
cc:ce:2f:86:f8:db:ac:fa:8a:79:85:54:a8:3b:37:
fb:f4:f0:e5:3c:c1:4c:a8:55:09:62:ee:c4:d2:5d:
98:85:e3:d2:de:eb:13:0c:35:28:73:de:e5:cc:d2:
47:c3:71:53:49:61:16:a4:00:ca:33:e2:e5:05:48:
1f:e9:e8:b4:fc:be:64:a8:73:f7:3b:e1:da:ad:18:
19:73:39:f4:ed:eb:4a:71:64:29:a9:dc:e0:7c:3b:
83:7a:f4:66:c1:ba:f0:8a:90:24:2e:5b:53:d9:29:
de:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C8:E3:B8:17:71:2B:4B:9B:6E:15:2F:CE:D3:57:73:71:A5:A1:6D
X509v3 Authority Key Identifier:
keyid:34:83:23:17:D2:54:44:34:B6:59:E5:69:20:71:D8:E4:C4:93:8B:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIMjF9JURDS2WeVpIHHY5MSTiwY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/5a2ed9-8f8e-4c1d-aaf3-30c65ad83291/1/NIMjF9JURDS2WeVpIHHY5MSTiwY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d2:c8:7f:42:01:10:d5:57:17:ca:53:8d:56:d3:f5:85:3f:b5:
18:7d:d6:8c:ab:ed:c9:e0:18:8f:87:a7:cc:6b:ea:00:8f:ba:
b2:ff:f2:d1:02:aa:bb:d7:39:ef:17:32:a8:f0:cc:ab:96:10:
d2:d8:41:ca:19:07:c9:ad:bb:21:c5:8f:fb:d0:ee:00:bb:4e:
bc:88:dc:30:b1:5e:29:30:71:04:04:1e:10:b8:83:47:0d:aa:
a8:e6:29:15:b4:5d:69:8c:c9:0f:9c:9c:0d:b6:da:e9:e0:f6:
68:49:92:66:8b:8d:75:c8:8f:91:b5:ee:64:bd:51:c2:70:fa:
41:80:8a:c3:9c:76:db:5b:27:3d:ca:c3:71:9d:ad:7c:3c:bf:
a1:0a:8f:dc:46:d9:e9:71:9e:e9:cc:cc:00:ca:24:18:d8:8d:
99:1e:28:68:48:79:e4:88:5f:5b:34:e5:ef:5a:97:19:0d:7e:
d6:6a:34:b9:4a:1e:db:a3:72:a1:96:cc:e8:a0:20:d3:a4:76:
ac:e7:22:37:67:04:0d:6b:60:18:77:49:e5:8e:9d:21:c7:62:
c6:74:46:8c:dc:64:d3:01:f3:49:1a:50:65:18:2d:b1:cd:b8:
7e:d4:b4:58:92:5d:86:ad:7e:94:e1:04:f6:92:3a:24:28:e1:
7d:fc:99:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:00:18 2026 by rpki-client