Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier: RLfrksLArYhO4HWNuMJs1i+fmYfDIIwiMkloFW7M8+I=
Subject key identifier: 06:37:F5:00:47:4E:A3:3C:F8:7E:D0:5D:9D:36:E6:0F:38:D9:AA:FA
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 019D98BDAA68436C14568A72477A8B145D8A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number: 10A0
Signing time: Fri 17 Apr 2026 00:00:59 +0000
Manifest this update: Fri 17 Apr 2026 00:00:59 +0000
Manifest next update: Sat 18 Apr 2026 00:00:59 +0000
Files and hashes: 1: KG8loLuhTcIMjieWs1KfwpWofRk.roa (hash: RxfX57Z0L5BZOB9gWwKFQnTlLw89l17p5HkheRVermQ=)
2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: ALwhDV6HayXg8x6hVPtoXW4sT8+hb0FcK93/nMRptuk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:bd:aa:68:43:6c:14:56:8a:72:47:7a:8b:14:5d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Apr 17 00:00:59 2026 GMT
Not After : Apr 18 00:00:59 2026 GMT
Subject: CN=0637f500474ea33cf87ed05d9d36e60f38d9aafa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:dd:f7:74:a4:c2:a9:b5:ae:83:15:51:60:b9:
38:9c:78:af:f0:b7:e9:43:20:db:2a:b7:d3:3b:fe:
8e:81:03:fd:20:8d:72:72:08:35:de:63:3f:cf:65:
37:7c:93:4d:b1:59:e9:0e:0d:5f:01:e4:3c:88:90:
28:86:ec:0b:5b:4c:0d:05:d8:58:6b:4c:17:27:f7:
bd:f3:c5:66:e1:96:dc:17:92:6c:1a:fb:0e:0f:a2:
e1:ee:c9:34:28:91:69:97:b6:0a:86:71:ed:a3:f9:
71:88:eb:6d:3a:87:6d:7d:7f:d6:f5:d9:1a:2b:0a:
9b:3b:db:c6:b8:ac:63:7d:3d:6c:9f:4c:56:a4:34:
67:d9:94:f0:85:99:08:7b:03:89:e9:40:7d:02:40:
92:e6:59:ed:42:4c:19:e3:5f:81:3f:91:63:52:9f:
63:11:f0:4d:5a:66:a9:fd:82:55:62:61:4b:7a:9f:
41:cd:6a:a3:4f:49:ab:09:04:05:05:86:7a:9c:c7:
48:4c:c6:ee:52:cc:36:8c:00:0f:b2:2b:8a:64:0f:
cd:75:72:1e:24:c9:52:43:65:bd:b2:57:9c:6a:9f:
48:42:d6:3d:28:f0:27:90:6f:7e:e8:cb:47:39:d3:
e2:6b:2b:7d:94:38:c1:5a:05:6a:cc:ae:e4:fa:92:
20:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:37:F5:00:47:4E:A3:3C:F8:7E:D0:5D:9D:36:E6:0F:38:D9:AA:FA
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:4d:3a:10:7d:7c:e8:f5:9e:3f:58:d8:4e:35:41:6b:da:de:
a6:97:c8:df:3d:5d:38:99:67:04:0e:33:80:b9:19:e7:17:22:
91:71:f7:52:ce:bd:1f:a9:32:3a:ce:03:14:95:60:c0:e9:8a:
11:a5:19:7f:58:54:07:a7:78:44:4d:df:12:d0:b6:16:86:78:
43:77:cf:c5:70:c3:f0:f0:a6:74:86:7e:a8:df:c7:f7:64:91:
a1:b7:11:6a:d6:78:99:87:4c:30:aa:92:ca:4d:91:37:dc:11:
df:d1:a8:a7:31:34:c5:2d:e8:2c:aa:b2:fe:c3:36:2d:c8:b5:
28:26:13:19:b2:c0:94:07:06:d3:fc:6b:2d:91:25:3b:9e:8a:
a2:c3:0b:a3:a8:b8:c9:81:d7:d8:fc:9d:ae:18:6c:2f:10:e6:
3a:fb:20:91:57:41:7d:71:9e:cb:d0:4a:7d:6c:aa:37:bd:40:
fa:a0:f5:a6:e9:2c:7c:71:55:c1:b0:d9:ab:81:15:95:cc:ac:
8e:46:3c:c1:a9:e7:e9:0a:17:09:61:37:5c:ef:b6:cf:f5:de:
45:8a:6f:6b:99:28:e9:4b:40:53:89:26:c3:4f:cb:f5:3f:1f:
02:b0:65:dd:2d:4b:b1:55:30:b6:2c:26:b4:78:0a:c2:b6:c8:
e1:99:1c:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2YvapoQ2wUVopyR3qLFF2KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYjZkNGQ5ODdkMDA0YTAwZmEyOTdlNjljMjY4ZWI3NWYz
ZDlhNDAwHhcNMjYwNDE3MDAwMDU5WhcNMjYwNDE4MDAwMDU5WjAzMTEwLwYDVQQD
EygwNjM3ZjUwMDQ3NGVhMzNjZjg3ZWQwNWQ5ZDM2ZTYwZjM4ZDlhYWZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz933dKTCqbWugxVRYLk4nHiv8Lfp
QyDbKrfTO/6OgQP9II1ycgg13mM/z2U3fJNNsVnpDg1fAeQ8iJAohuwLW0wNBdhY
a0wXJ/e988Vm4ZbcF5JsGvsOD6Lh7sk0KJFpl7YKhnHto/lxiOttOodtfX/W9dka
KwqbO9vGuKxjfT1sn0xWpDRn2ZTwhZkIewOJ6UB9AkCS5lntQkwZ41+BP5FjUp9j
EfBNWmap/YJVYmFLep9BzWqjT0mrCQQFBYZ6nMdITMbuUsw2jAAPsiuKZA/NdXIe
JMlSQ2W9slecap9IQtY9KPAnkG9+6MtHOdPiayt9lDjBWgVqzK7k+pIgEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAY39QBHTqM8+H7QXZ025g842ar6MB8GA1UdIwQY
MBaAFJ+21NmH0ASgD6KX5pwmjrdfPZpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC8wMjQwMGYtNzgwMi00NGU3LTg1Mjct
OGIyOTFlMjZkMWQ5LzEvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC8wMjQwMGYtNzgwMi00NGU3LTg1MjctOGIyOTFlMjZkMWQ5
LzEvbjdiVTJZZlFCS0FQb3BmbW5DYU90MTg5bWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACU06EH18
6PWeP1jYTjVBa9reppfI3z1dOJlnBA4zgLkZ5xcikXH3Us69H6kyOs4DFJVgwOmK
EaUZf1hUB6d4RE3fEtC2FoZ4Q3fPxXDD8PCmdIZ+qN/H92SRobcRatZ4mYdMMKqS
yk2RN9wR39GopzE0xS3oLKqy/sM2Lci1KCYTGbLAlAcG0/xrLZElO56KosMLo6i4
yYHX2PydrhhsLxDmOvsgkVdBfXGey9BKfWyqN71A+qD1puksfHFVwbDZq4EVlcys
jkY8wann6QoXCWE3XO+2z/XeRYpva5ko6UtAU4kmw0/L9T8fArBl3S1LsVUwtiwm
tHgKwrbI4ZkcQg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:48 2026 by rpki-client