Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
File: NxnxmwrdjQwod8i6f-CliTCbsUQ.mft (raw, json)
Hash identifier: XDmBwpJuNRA12Ll3Kb6zJ+iiiTkW3odnHUdez7ZdPRU=
Subject key identifier: D6:E9:9B:03:35:7D:3A:9C:4C:68:83:72:DB:DE:32:F1:2F:E7:8C:63
Authority key identifier: 37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
Certificate issuer: /CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Certificate serial: 019D9CD165B16A04E6EBD4B4E536ACB627C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
Manifest number: 0203
Signing time: Fri 17 Apr 2026 19:01:01 +0000
Manifest this update: Fri 17 Apr 2026 19:01:01 +0000
Manifest next update: Sat 18 Apr 2026 19:01:01 +0000
Files and hashes: 1: FMjlHYkIjFHRLNFKCNFNPzsElKU.roa (hash: aoXdpN36nn+6Gbwv5P7Em07UOyXg62W5lVX3fhL8ams=)
2: NxnxmwrdjQwod8i6f-CliTCbsUQ.crl (hash: JE6EhgRp0rkMWx7NGXLdlOreeO16aNfIwVAO6JVizws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:d1:65:b1:6a:04:e6:eb:d4:b4:e5:36:ac:b6:27:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3719f19b0add8d0c2877c8ba7fe0a589309bb144
Validity
Not Before: Apr 17 19:01:01 2026 GMT
Not After : Apr 18 19:01:01 2026 GMT
Subject: CN=d6e99b03357d3a9c4c688372dbde32f12fe78c63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:d6:0b:8b:5a:da:33:45:13:e6:0f:5d:79:
9b:80:b9:a7:22:99:f4:e2:61:87:a9:c9:45:3c:bd:
ae:b8:1b:99:bf:e2:0d:be:80:b7:73:57:c4:d1:16:
0f:6d:0f:f7:60:2b:a4:f1:86:63:10:2c:a4:67:e4:
cf:4c:92:a8:92:bf:e5:05:65:6a:7e:95:77:62:20:
49:b3:dc:f0:40:f7:e5:28:c2:60:8e:89:25:16:12:
08:33:9b:04:e6:dd:84:e4:25:9b:31:94:d6:ae:57:
86:83:54:9b:15:c5:7c:2b:ef:b1:e5:05:9a:f8:35:
9f:e0:a9:2a:06:74:86:b2:f1:00:3e:2b:ca:2a:1c:
4f:7d:02:a7:5f:9e:8b:9e:05:7d:d4:36:37:da:7a:
99:62:7d:33:4c:87:91:c2:f9:c9:77:1b:c5:40:37:
c1:bd:34:9c:03:78:bd:fb:52:9a:c0:07:c8:b4:b5:
e9:af:0d:95:60:d1:2d:3f:3b:ef:d9:b6:d1:9c:57:
23:94:71:4e:ed:dd:a9:84:8e:d5:38:fa:f7:a8:59:
99:08:2e:9a:31:bd:c1:ca:5b:aa:7f:b6:de:f0:21:
3a:81:73:27:85:c9:c8:cc:e2:c6:99:f4:ae:ee:8f:
a3:6d:ab:49:46:23:8e:ed:c2:5a:cf:cb:de:f3:19:
44:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:E9:9B:03:35:7D:3A:9C:4C:68:83:72:DB:DE:32:F1:2F:E7:8C:63
X509v3 Authority Key Identifier:
keyid:37:19:F1:9B:0A:DD:8D:0C:28:77:C8:BA:7F:E0:A5:89:30:9B:B1:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NxnxmwrdjQwod8i6f-CliTCbsUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/f54f3a-6b8a-48c3-b2de-77a9c529777c/1/NxnxmwrdjQwod8i6f-CliTCbsUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:07:0b:50:61:9a:bd:c2:a8:1f:6e:b5:13:1f:1a:7d:2d:53:
0c:43:83:8e:56:85:15:c0:7f:83:ac:93:f0:da:f7:8b:1e:26:
08:2e:75:13:db:b5:8d:a7:3f:ef:3f:b3:81:45:8a:ee:a2:ae:
ba:7c:bf:1b:7a:9f:0b:7e:29:2c:4f:7f:34:22:cd:0d:f6:9c:
dd:82:a9:46:51:27:13:36:a5:c6:a7:56:c2:af:6a:11:52:70:
f0:19:4e:2a:ca:40:62:bb:11:51:6a:14:d4:4f:c0:12:23:fb:
ff:4f:bb:90:99:cd:b4:10:09:7d:ee:22:d3:5c:ca:22:01:1e:
42:81:3f:28:76:9b:85:cf:75:4a:2c:b2:48:e1:b9:bd:83:7b:
b7:b9:08:b2:c6:0a:5a:e2:50:62:0b:58:77:51:6b:67:01:0f:
0c:a3:d1:1a:15:be:c0:d7:87:25:5b:3e:09:6d:0a:54:83:a7:
30:ad:73:08:c5:ce:24:fb:8a:f3:97:96:a1:5b:39:15:e3:93:
50:c7:f6:3c:e2:a5:8a:09:fb:7a:6e:dc:49:7b:af:2e:32:6a:
fc:5b:c2:5f:c2:8a:0d:99:74:e7:eb:1b:a2:5c:f7:ff:ce:b0:
16:46:fe:2b:a6:89:8d:e7:db:77:1b:4d:1f:1d:28:20:29:d2:
aa:b7:b0:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2c0WWxagTm69S05TastifGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3MTlmMTliMGFkZDhkMGMyODc3YzhiYTdmZTBhNTg5MzA5
YmIxNDQwHhcNMjYwNDE3MTkwMTAxWhcNMjYwNDE4MTkwMTAxWjAzMTEwLwYDVQQD
EyhkNmU5OWIwMzM1N2QzYTljNGM2ODgzNzJkYmRlMzJmMTJmZTc4YzYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFrWC4ta2jNFE+YPXXmbgLmnIpn0
4mGHqclFPL2uuBuZv+INvoC3c1fE0RYPbQ/3YCuk8YZjECykZ+TPTJKokr/lBWVq
fpV3YiBJs9zwQPflKMJgjoklFhIIM5sE5t2E5CWbMZTWrleGg1SbFcV8K++x5QWa
+DWf4KkqBnSGsvEAPivKKhxPfQKnX56LngV91DY32nqZYn0zTIeRwvnJdxvFQDfB
vTScA3i9+1KawAfItLXprw2VYNEtPzvv2bbRnFcjlHFO7d2phI7VOPr3qFmZCC6a
Mb3Byluqf7be8CE6gXMnhcnIzOLGmfSu7o+jbatJRiOO7cJaz8ve8xlEqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNbpmwM1fTqcTGiDctveMvEv54xjMB8GA1UdIwQY
MBaAFDcZ8ZsK3Y0MKHfIun/gpYkwm7FEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUt
NzdhOWM1Mjk3NzdjLzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9mNTRmM2EtNmI4YS00OGMzLWIyZGUtNzdhOWM1Mjk3Nzdj
LzEvTnhueG13cmRqUXdvZDhpNmYtQ2xpVENic1VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQcLUGGa
vcKoH261Ex8afS1TDEODjlaFFcB/g6yT8Nr3ix4mCC51E9u1jac/7z+zgUWK7qKu
uny/G3qfC34pLE9/NCLNDfac3YKpRlEnEzalxqdWwq9qEVJw8BlOKspAYrsRUWoU
1E/AEiP7/0+7kJnNtBAJfe4i01zKIgEeQoE/KHabhc91SiyySOG5vYN7t7kIssYK
WuJQYgtYd1FrZwEPDKPRGhW+wNeHJVs+CW0KVIOnMK1zCMXOJPuK85eWoVs5FeOT
UMf2POKlign7em7cSXuvLjJq/FvCX8KKDZl05+sbolz3/86wFkb+K6aJjefbdxtN
Hx0oICnSqrewjQ==
-----END CERTIFICATE-----
Generated at Sat Apr 18 02:31:02 2026 by rpki-client