Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
File: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft (raw, json)
Hash identifier: BhrqPlIRFuzy5NARKeVtJ1csGcTnWu3EhacaTg9Q9/4=
Subject key identifier: F4:83:68:E5:D3:38:B7:6F:01:0E:DC:F1:31:F8:74:72:10:D9:41:8C
Authority key identifier: FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
Certificate issuer: /CN=fcd77e6877829833043333538b47f12682cebdc3
Certificate serial: 019DA52F8166FF6880882D1372A616FE0F43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
Manifest number: 0748
Signing time: Sun 19 Apr 2026 10:00:47 +0000
Manifest this update: Sun 19 Apr 2026 10:00:47 +0000
Manifest next update: Mon 20 Apr 2026 10:00:47 +0000
Files and hashes: 1: _Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl (hash: V0k3nY9KZAU90hG59umgLGccmeOvkTs9W3GETo3TGkQ=)
2: gKy9zHGv_AzpQLevKwupWQqjQQo.roa (hash: b17GwYPcAv3jWGndXOTYFmkgmyJcASg4uml7i5Uih54=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:81:66:ff:68:80:88:2d:13:72:a6:16:fe:0f:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd77e6877829833043333538b47f12682cebdc3
Validity
Not Before: Apr 19 10:00:47 2026 GMT
Not After : Apr 20 10:00:47 2026 GMT
Subject: CN=f48368e5d338b76f010edcf131f8747210d9418c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:c1:c7:a0:5a:d3:60:26:1d:0f:e6:60:99:a4:
ff:ef:97:f6:ab:ff:4a:b3:74:be:04:fe:e8:1f:c4:
29:1e:e5:15:62:39:09:02:dc:5a:02:bf:0f:fc:2e:
cf:21:74:c1:6f:3f:af:b4:ae:36:7f:5c:a5:6a:5c:
89:1b:28:13:d0:d8:db:d8:fe:b0:3f:57:52:a7:ce:
28:dd:2d:8c:aa:be:36:ed:d5:97:f5:be:92:1f:3e:
cf:b9:ca:56:05:0b:e1:66:b3:89:dc:ac:a4:d2:1a:
bc:56:ca:fa:88:d0:a9:e3:03:1c:7c:8f:dd:f1:e5:
9b:fa:ab:b8:8b:46:46:e9:ee:2e:5e:0d:71:03:c9:
7d:f0:66:71:ff:8b:11:67:e5:6b:b8:e8:1d:49:52:
bf:7e:87:29:4f:b7:e9:44:1e:0e:e7:fc:3a:47:aa:
95:6f:0b:c1:86:17:85:62:05:b4:57:7e:64:f7:1e:
81:bc:89:db:5d:b0:3d:41:c6:10:4e:43:d7:21:15:
cd:b4:36:c1:ea:4d:5a:8f:ef:bf:4a:df:31:a7:5d:
f7:0c:a8:6c:20:c1:2f:a1:f2:7f:29:b4:f5:b0:28:
7b:15:1c:5a:e6:44:f5:9d:59:f6:45:1e:1f:20:89:
27:ad:d0:21:a4:50:01:78:a1:a4:96:31:19:ae:a3:
15:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:83:68:E5:D3:38:B7:6F:01:0E:DC:F1:31:F8:74:72:10:D9:41:8C
X509v3 Authority Key Identifier:
keyid:FC:D7:7E:68:77:82:98:33:04:33:33:53:8B:47:F1:26:82:CE:BD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/1ed1f6-09d7-4294-92b4-e551745d276e/1/_Nd-aHeCmDMEMzNTi0fxJoLOvcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:4a:b7:76:a7:0e:7e:95:eb:b2:19:27:b9:ee:63:32:cf:a1:
24:7d:28:73:81:9c:a6:d2:52:0c:37:8a:f9:91:bc:7e:fc:88:
8d:83:7e:6e:a0:b7:44:9e:51:f8:27:05:aa:1d:bc:59:eb:b7:
16:d5:a1:14:24:85:20:ba:ca:6b:a8:e5:5e:7b:5c:d3:58:b3:
a4:22:e2:bb:58:f1:7e:d2:c8:eb:be:c2:fe:38:8d:28:47:ed:
cb:39:71:97:38:1e:55:a3:58:b2:bd:33:a8:80:a7:87:1e:44:
48:dc:40:33:9a:09:af:b9:06:1d:3e:64:bd:12:05:af:0e:d9:
12:d6:9e:d3:39:93:be:39:19:69:4e:0f:5c:b5:c0:2a:cc:9f:
6d:cc:94:44:3f:e0:63:77:1d:99:1f:82:1b:68:92:b9:42:6b:
85:bc:ad:fb:9a:dd:20:e7:1c:2e:b2:7a:05:b3:0a:32:a5:72:
c9:9e:a3:a5:10:88:70:71:25:a3:52:64:da:30:bf:58:0d:46:
24:9f:db:2d:0f:4e:33:a0:c7:14:80:d5:40:c1:a7:f4:7e:08:
94:3a:e2:43:ae:5f:c2:e8:f5:e2:25:a0:d2:93:e6:b3:9c:d9:
e4:3b:c9:9d:4f:5e:27:92:77:9c:8b:c4:67:cc:aa:8c:c9:e6:
1c:c4:27:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL4Fm/2iAiC0TcqYW/g9DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjZDc3ZTY4Nzc4Mjk4MzMwNDMzMzM1MzhiNDdmMTI2ODJj
ZWJkYzMwHhcNMjYwNDE5MTAwMDQ3WhcNMjYwNDIwMTAwMDQ3WjAzMTEwLwYDVQQD
EyhmNDgzNjhlNWQzMzhiNzZmMDEwZWRjZjEzMWY4NzQ3MjEwZDk0MThjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsMHHoFrTYCYdD+ZgmaT/75f2q/9K
s3S+BP7oH8QpHuUVYjkJAtxaAr8P/C7PIXTBbz+vtK42f1ylalyJGygT0Njb2P6w
P1dSp84o3S2Mqr427dWX9b6SHz7PucpWBQvhZrOJ3Kyk0hq8Vsr6iNCp4wMcfI/d
8eWb+qu4i0ZG6e4uXg1xA8l98GZx/4sRZ+VruOgdSVK/focpT7fpRB4O5/w6R6qV
bwvBhheFYgW0V35k9x6BvInbXbA9QcYQTkPXIRXNtDbB6k1aj++/St8xp133DKhs
IMEvofJ/KbT1sCh7FRxa5kT1nVn2RR4fIIknrdAhpFABeKGkljEZrqMVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSDaOXTOLdvAQ7c8TH4dHIQ2UGMMB8GA1UdIwQY
MBaAFPzXfmh3gpgzBDMzU4tH8SaCzr3DMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQt
ZTU1MTc0NWQyNzZlLzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8xZWQxZjYtMDlkNy00Mjk0LTkyYjQtZTU1MTc0NWQyNzZl
LzEvX05kLWFIZUNtRE1FTXpOVGkwZnhKb0xPdmNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASUq3dqcO
fpXrshknue5jMs+hJH0oc4GcptJSDDeK+ZG8fvyIjYN+bqC3RJ5R+CcFqh28Weu3
FtWhFCSFILrKa6jlXntc01izpCLiu1jxftLI677C/jiNKEftyzlxlzgeVaNYsr0z
qICnhx5ESNxAM5oJr7kGHT5kvRIFrw7ZEtae0zmTvjkZaU4PXLXAKsyfbcyURD/g
Y3cdmR+CG2iSuUJrhbyt+5rdIOccLrJ6BbMKMqVyyZ6jpRCIcHElo1Jk2jC/WA1G
JJ/bLQ9OM6DHFIDVQMGn9H4IlDriQ65fwuj14iWg0pPms5zZ5DvJnU9eJ5J3nIvE
Z8yqjMnmHMQnCw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 11:18:10 2026 by rpki-client