Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
File: nA1VQL3NMwUrwA__JmM4vzzIKoA.mft (raw, json)
Hash identifier: TMRSLwO2CXxs/jHZSm+c+R1X6ONmxg+8++xdALix6k4=
Subject key identifier: 42:56:FF:E9:FB:D2:EF:C5:8B:A7:A4:3F:48:13:84:0D:5E:63:66:56
Authority key identifier: 9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
Certificate issuer: /CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Certificate serial: 019D99621D034C281D4901BEFE777D02194D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
Manifest number: 0DB4
Signing time: Fri 17 Apr 2026 03:00:37 +0000
Manifest this update: Fri 17 Apr 2026 03:00:37 +0000
Manifest next update: Sat 18 Apr 2026 03:00:37 +0000
Files and hashes: 1: 7pgJyQEhPGE9dXbf6EcHY0j7uuY.roa (hash: ptYDlgyfUaBAmMsMOgj+f0CY335JokuQ/NfrWH0iFkk=)
2: nA1VQL3NMwUrwA__JmM4vzzIKoA.crl (hash: o8kOtjUl20vRxTmL6k7943/cEyPY2feKAM0Aa/rCwfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1d:03:4c:28:1d:49:01:be:fe:77:7d:02:19:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c0d5540bdcd33052bc00fff266338bf3cc82a80
Validity
Not Before: Apr 17 03:00:37 2026 GMT
Not After : Apr 18 03:00:37 2026 GMT
Subject: CN=4256ffe9fbd2efc58ba7a43f4813840d5e636656
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:76:2e:ec:8f:be:a7:b5:dd:de:22:5a:c8:20:
1d:c4:72:7f:0f:51:94:29:bc:38:4a:d7:c5:41:bf:
6b:d0:5e:24:c1:9d:83:61:05:69:95:96:d3:47:62:
b3:68:c0:23:ad:49:63:fd:45:9a:98:32:64:0b:9a:
8e:a1:70:ba:bc:c5:b9:ac:44:3c:3a:da:82:6e:09:
50:fa:c7:f4:65:be:1f:15:0e:66:91:b3:5c:ff:16:
70:d9:05:94:cd:8a:03:25:2c:b9:06:08:a4:11:81:
5c:c9:23:66:69:b4:a9:07:56:8b:fe:68:63:ec:42:
31:63:4c:f5:dd:26:28:25:73:0e:8f:1a:a2:bd:cd:
b1:67:40:88:99:25:93:a3:7d:79:d1:15:19:97:e5:
c4:90:14:00:34:47:a0:fe:4a:52:26:06:9f:fa:22:
56:56:7e:79:06:d2:95:59:02:3a:cb:d5:60:11:d4:
04:44:51:5e:c7:de:d6:bb:00:fe:6c:e6:d1:97:ba:
c4:10:58:73:d9:02:15:4e:f7:c6:d0:41:47:63:67:
e6:e7:1a:56:5c:d4:9a:98:5a:a1:69:2c:cb:e8:2c:
d2:6b:61:f7:e0:98:50:f5:58:b0:82:9d:47:cc:63:
26:df:fb:39:be:90:7a:e6:5c:b1:b8:61:a1:db:ed:
22:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:56:FF:E9:FB:D2:EF:C5:8B:A7:A4:3F:48:13:84:0D:5E:63:66:56
X509v3 Authority Key Identifier:
keyid:9C:0D:55:40:BD:CD:33:05:2B:C0:0F:FF:26:63:38:BF:3C:C8:2A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nA1VQL3NMwUrwA__JmM4vzzIKoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/70ddc4-f9c4-498b-85ee-16fc9d44ec7d/1/nA1VQL3NMwUrwA__JmM4vzzIKoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:55:4d:97:89:00:8e:cf:82:3d:0f:2a:35:bb:74:5a:5e:4c:
01:97:12:8d:3a:6c:e2:b0:a3:98:bb:53:cb:3a:a2:29:8f:61:
9a:bb:97:5f:38:b8:a9:35:a4:fb:f0:9b:df:92:25:16:f4:f9:
9b:b3:fd:cd:9a:bf:c4:88:ec:c2:cf:66:ea:18:a5:74:41:bf:
6a:b8:2f:4e:88:e8:0d:c8:ac:97:59:a9:4d:88:88:80:08:ac:
15:d1:a2:22:85:c9:a5:01:a3:c3:33:a1:3a:ba:6a:71:cc:94:
cc:46:76:be:15:16:e5:24:a9:9c:d3:b4:80:f0:1a:d2:3d:28:
43:56:31:c9:80:8e:39:ec:45:94:66:7c:33:50:88:91:71:33:
85:77:4b:a7:4b:63:ed:76:2c:4b:a7:0f:d8:a5:97:df:d0:e2:
a8:a6:22:53:01:d2:c8:c8:a1:c6:15:69:9b:56:4e:c1:f6:ad:
39:e9:ce:84:e3:3c:c5:be:85:1f:c5:cd:42:d8:92:e9:94:2f:
fb:cb:88:b9:13:6c:82:e0:93:63:a0:ad:2c:fe:ae:9e:60:67:
3a:49:cb:46:8e:b7:c4:16:80:1b:ac:80:75:6b:99:ba:ed:07:
4e:13:a5:dc:35:69:5c:c2:4b:b5:07:99:aa:57:9f:a1:e7:30:
9d:6c:5b:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:33:04 2026 by rpki-client