Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
File: Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft (raw, json)
Hash identifier: shQXvV8J9JCZlcSeyVjMp1qK9ABWYRKK17CSni2Vy5s=
Subject key identifier: 05:81:96:2D:E4:F4:78:26:2E:7C:50:35:8A:FE:A5:A0:B3:45:93:0D
Authority key identifier: 36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
Certificate issuer: /CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Certificate serial: 019D97E1F1FFF0ACCD6FA78640A11B4A46B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
Manifest number: 0C0C
Signing time: Thu 16 Apr 2026 20:01:00 +0000
Manifest this update: Thu 16 Apr 2026 20:01:00 +0000
Manifest next update: Fri 17 Apr 2026 20:01:00 +0000
Files and hashes: 1: HTK96uRhaCPEIKPa_uJkVUtYSro.roa (hash: YJYJVj428OJsUTfvfAdi4uBETofBiuE9K+NdS6ELexs=)
2: JQ2CDROzVuWPqXgateu16umo7lg.roa (hash: hQj8e4a5l+cytVF32sZTUFxC34J67XezC9sSXBkuvQg=)
3: Nd50iVrPYors-OE3V9sF40Sl2Ws.roa (hash: 8W9R9422ra+klJo6tlOJASq6q8gfKHZchw1aKhxM8nI=)
4: Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl (hash: +qKCdox3mp3MR6f1cX6l2Qg5DSCvL5M1UlxNgQ/yscc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e1:f1:ff:f0:ac:cd:6f:a7:86:40:a1:1b:4a:46:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36bd4a382dae2be5cb98b35e5a048d03b4ccbe2b
Validity
Not Before: Apr 16 20:01:00 2026 GMT
Not After : Apr 17 20:01:00 2026 GMT
Subject: CN=0581962de4f478262e7c50358afea5a0b345930d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:d6:c3:86:95:54:17:82:1b:8f:c9:89:b7:68:
cb:f1:21:75:bf:50:e4:16:cd:d1:6e:c2:c5:f0:43:
bc:ba:37:8b:e3:08:bf:d2:c3:f9:41:37:09:88:93:
ad:47:47:85:68:64:17:40:50:70:28:fa:64:40:19:
79:46:86:71:eb:2c:ae:3d:11:3c:59:f2:ab:1a:36:
0b:9e:d8:31:fd:55:60:17:1c:98:cf:e8:70:85:cb:
d4:8e:58:26:db:dc:55:60:82:a1:5f:cc:93:e4:b0:
f8:7e:23:b9:6f:b2:73:13:09:b7:b0:6b:16:e4:88:
21:b3:f1:90:a4:64:6b:51:6d:3b:58:06:95:56:32:
90:89:7f:14:9a:b0:6e:79:fd:bb:3b:9f:28:2e:b2:
6c:ef:fa:59:82:6d:04:e6:6e:20:5c:80:35:a8:3c:
7c:1d:5b:95:e3:1d:3b:84:84:c3:9f:0e:7b:c0:18:
d6:7c:a8:2d:48:61:3e:d7:0b:33:05:05:50:5c:9d:
dd:e0:2e:f7:2d:a1:0b:f5:62:c7:2d:2e:63:7d:c8:
de:c6:aa:68:d5:4a:a2:9c:8a:67:91:f1:90:f9:7e:
48:09:51:ba:b8:14:52:bd:84:a1:19:c8:cb:89:fd:
b5:c5:de:1c:d2:a0:5a:11:d0:69:9a:7e:2d:d1:31:
4a:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:81:96:2D:E4:F4:78:26:2E:7C:50:35:8A:FE:A5:A0:B3:45:93:0D
X509v3 Authority Key Identifier:
keyid:36:BD:4A:38:2D:AE:2B:E5:CB:98:B3:5E:5A:04:8D:03:B4:CC:BE:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nr1KOC2uK-XLmLNeWgSNA7TMvis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e74f5f-75c5-4a75-98b9-9fecbd25d434/1/Nr1KOC2uK-XLmLNeWgSNA7TMvis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:2a:c4:b0:af:4c:51:34:21:b8:75:f2:16:24:4c:a8:a9:a2:
36:d4:8a:f1:b2:8d:16:6f:e4:eb:35:6d:1e:ae:04:9c:5a:e7:
2a:3d:22:36:7a:09:48:15:f4:b7:b0:f6:d1:57:5c:d9:d5:61:
b3:4b:f7:72:87:ee:9a:70:1e:e0:31:47:b7:a1:98:9b:ba:1f:
54:12:b6:8d:a6:69:df:36:a6:a5:62:de:7b:a5:7f:d9:ee:81:
b0:fe:0a:ef:ec:28:17:90:1a:bc:80:cc:65:44:be:90:86:06:
0b:07:d1:93:4b:4d:aa:82:e6:f5:3f:51:8c:0b:b4:b0:55:09:
34:5e:b5:bc:82:9c:fe:d5:db:9c:cb:68:38:1c:f2:61:ff:1a:
82:fb:a7:2a:cd:1a:c2:2e:d3:b5:69:db:f4:f6:62:a0:02:87:
f1:12:ab:01:10:15:89:3c:2a:ec:f1:15:85:b4:9b:a4:47:3b:
81:72:93:4c:7a:57:c6:03:7c:3f:a4:38:7f:d7:75:96:7e:77:
5a:ae:f6:eb:82:9b:57:5d:be:dc:81:df:30:db:11:e2:99:27:
f7:6d:ff:c1:93:7d:54:2e:5b:88:24:75:71:0a:71:be:ca:78:
a7:04:fb:56:25:0f:f0:ca:cf:d9:0b:0e:ee:b3:b6:79:52:36:
2c:2a:b5:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:18:42 2026 by rpki-client