Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
File: NHjAigY6wtNKGxkeJDY4m77tXpc.mft (raw, json)
Hash identifier: 1zxLGt8y1ZKTyGRJQYKRMn+OlWUoWlCcv1XsUltJ17Y=
Subject key identifier: B8:6B:E4:A8:86:BB:BC:AF:BF:6F:CE:DC:08:1C:8D:D4:07:49:47:65
Authority key identifier: 34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
Certificate issuer: /CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Certificate serial: 019D98F45947AC2546104E21A6854CC75461
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
Manifest number: 0F01
Signing time: Fri 17 Apr 2026 01:00:43 +0000
Manifest this update: Fri 17 Apr 2026 01:00:43 +0000
Manifest next update: Sat 18 Apr 2026 01:00:43 +0000
Files and hashes: 1: NHjAigY6wtNKGxkeJDY4m77tXpc.crl (hash: l26E/96KNPxIm3CUz8NzBxkhWJlJGWwcaQko9MA+NHc=)
2: w9CRvvsYzgY0DlQQmWuMnS9mI2o.roa (hash: fUMokcIKd3DOh6naOLFCtJpr9vVF9HoG1tnLSbQmKeQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:59:47:ac:25:46:10:4e:21:a6:85:4c:c7:54:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3478c08a063ac2d34a1b191e2436389bbeed5e97
Validity
Not Before: Apr 17 01:00:43 2026 GMT
Not After : Apr 18 01:00:43 2026 GMT
Subject: CN=b86be4a886bbbcafbf6fcedc081c8dd407494765
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:1b:06:3e:90:74:c5:72:27:84:7c:de:95:36:
36:98:fe:e6:88:7f:34:1d:b2:be:c5:4e:d7:d9:c9:
a7:dd:d8:c9:a8:54:87:fe:db:52:9d:25:2b:ca:8d:
51:d8:bf:b5:2e:fb:2a:91:da:33:d2:66:6e:08:03:
e1:ac:23:e4:28:09:0e:69:59:03:e2:2b:4b:5f:64:
58:52:76:23:ec:3f:4c:a2:c1:ea:b3:d5:d6:36:ef:
d1:71:b3:63:84:67:9d:c0:08:11:32:1c:58:56:21:
25:4d:f6:e6:cc:5f:de:fa:ac:47:0f:df:e6:86:5c:
87:6a:98:4c:b9:0f:bb:e5:ae:f3:54:10:ad:c8:f7:
61:e2:ea:53:d7:04:53:62:6c:b8:25:3d:9e:16:63:
b3:ac:fc:fb:eb:12:5c:e1:22:cc:69:7f:07:63:67:
25:98:77:3b:37:2e:ef:33:d2:99:d3:43:f8:5b:e8:
28:27:64:dc:71:be:1c:43:f8:e5:4a:87:4d:de:75:
89:25:bb:4c:83:70:ae:c3:58:27:79:24:28:cf:aa:
f4:7e:f1:cd:07:48:24:74:19:b5:41:d7:da:d7:52:
b4:88:34:ed:7c:a0:39:1f:aa:e4:30:e7:29:a8:f2:
c4:74:b8:4f:d6:fe:5e:d2:0a:97:c0:0e:4a:5b:9e:
20:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:6B:E4:A8:86:BB:BC:AF:BF:6F:CE:DC:08:1C:8D:D4:07:49:47:65
X509v3 Authority Key Identifier:
keyid:34:78:C0:8A:06:3A:C2:D3:4A:1B:19:1E:24:36:38:9B:BE:ED:5E:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NHjAigY6wtNKGxkeJDY4m77tXpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/1f10c2-02e2-438a-90a2-917c3577f34f/1/NHjAigY6wtNKGxkeJDY4m77tXpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:c4:96:ed:b8:a1:5a:76:f2:fa:fa:3e:4d:74:18:c7:f3:be:
8e:95:51:f2:8c:ac:4e:25:ed:1b:a2:d0:df:3f:71:1d:38:48:
d4:44:4b:7d:c6:aa:2d:18:8f:ab:b4:e4:e9:c5:7b:59:c8:c5:
a4:a5:a2:80:22:95:e0:57:ed:6e:54:17:62:e9:85:e8:92:b6:
75:29:a2:8a:8e:b1:58:25:e0:d3:8e:72:93:ec:1f:a3:bf:b1:
56:4a:fb:f2:11:06:bf:5f:32:40:d9:98:4c:8e:71:9e:5a:e9:
6a:ff:35:00:e4:0e:5c:f2:35:64:0b:35:d4:b7:d5:44:5c:40:
be:eb:6b:8f:df:6d:d9:37:c6:91:5d:de:04:ca:af:fe:be:6f:
24:dc:be:88:5e:76:b4:4c:c5:a1:e6:7e:7d:69:54:2b:76:ea:
32:ca:9b:45:0f:21:7b:56:b1:cd:e7:40:e7:7d:41:b0:b8:5c:
ed:b1:a3:95:2b:33:24:53:96:28:ef:2f:82:c9:2f:30:8c:f1:
a4:30:a8:30:2d:ae:1b:3f:2d:ba:87:ba:b8:c5:08:63:b1:8e:
74:75:69:aa:f3:7c:24:07:4d:a9:f3:75:46:45:b7:4f:82:1c:
33:64:6b:e1:3f:94:26:58:00:97:5b:31:0b:7b:56:47:03:0c:
b0:48:f5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:03:00 2026 by rpki-client