Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
File: r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft (raw, json)
Hash identifier: JpxwTuTwrDdTWrZtBEPaWQFE8TwP++rqhfl0BTa4IOA=
Subject key identifier: 13:BC:9C:04:24:3F:9F:FC:F6:9E:20:50:82:23:F8:90:6E:FE:F2:43
Authority key identifier: AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
Certificate issuer: /CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Certificate serial: 019D9BBEABA4049B65A9090952173326668D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
Manifest number: 18C0
Signing time: Fri 17 Apr 2026 14:00:57 +0000
Manifest this update: Fri 17 Apr 2026 14:00:57 +0000
Manifest next update: Sat 18 Apr 2026 14:00:57 +0000
Files and hashes: 1: r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl (hash: F32b3E6vp16sMCzjlHOw3UHKJMCjyj7O9IuemTYLeXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:ab:a4:04:9b:65:a9:09:09:52:17:33:26:66:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff3596546d4620b02a9642f08b77cfe6502ae99
Validity
Not Before: Apr 17 14:00:57 2026 GMT
Not After : Apr 18 14:00:57 2026 GMT
Subject: CN=13bc9c04243f9ffcf69e20508223f8906efef243
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:05:60:af:1e:cc:48:d8:0d:70:83:b7:0e:30:
e0:a3:d6:35:ac:25:a4:57:00:17:47:9a:12:ba:c5:
c8:37:2d:14:04:32:52:dc:df:b6:56:9a:86:15:ba:
1d:8f:bd:6f:20:3e:53:43:c6:42:ba:84:b6:3a:95:
22:a8:d6:82:44:c2:f1:c0:7e:2c:52:d5:e7:54:3e:
6b:c9:87:c3:da:20:8d:f4:fc:30:73:a9:37:a3:b0:
64:ef:af:4d:c7:ba:04:8a:97:a2:26:5c:6f:6c:e3:
e4:8a:9f:d0:4e:26:fe:bf:58:a3:d5:71:72:c1:3c:
e0:04:18:8f:69:c9:4d:9d:1a:55:43:4b:77:43:55:
31:d0:59:4a:50:2a:0e:ad:22:51:de:30:30:04:32:
fd:d1:6b:47:be:26:ce:bf:01:b1:7c:40:19:b7:fd:
c6:17:60:d2:c8:10:47:de:7e:71:0d:9c:a7:58:84:
bd:4c:da:b4:49:f6:05:0d:f4:4d:61:1a:64:9f:1e:
ec:5b:28:32:87:a2:fe:33:e6:34:eb:1d:5a:dd:cf:
4f:c7:07:19:65:fa:24:34:cd:a7:1c:2e:13:e0:47:
b5:fd:95:b8:bf:46:c0:08:09:16:fb:66:13:e7:76:
e9:34:5e:e5:e5:3c:8d:d5:7a:ed:9f:9d:30:fa:d2:
75:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:BC:9C:04:24:3F:9F:FC:F6:9E:20:50:82:23:F8:90:6E:FE:F2:43
X509v3 Authority Key Identifier:
keyid:AF:F3:59:65:46:D4:62:0B:02:A9:64:2F:08:B7:7C:FE:65:02:AE:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NZZUbUYgsCqWQvCLd8_mUCrpk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/0299f4-d00d-457c-bb67-2ab9af938434/1/r_NZZUbUYgsCqWQvCLd8_mUCrpk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:bd:f4:50:28:5e:b3:06:48:a6:5e:1a:0b:cb:a0:86:22:dc:
0b:1b:0f:16:fb:ac:e1:14:03:69:d7:f9:87:f7:70:a2:21:bc:
ce:e2:7b:88:e3:e4:48:df:7f:49:15:1c:fc:40:16:7e:47:ef:
14:bf:3b:bc:7e:44:6f:7a:71:5c:b7:39:9a:ee:1c:1b:35:0c:
f3:32:1b:a7:3a:aa:2b:ac:9c:35:3a:b7:0f:37:cd:87:60:de:
25:e8:ea:9f:c4:b1:26:a2:d1:5f:2e:99:09:2d:3c:ad:0e:96:
21:ff:8e:67:df:93:71:83:2a:a8:b5:0c:d5:6e:76:cc:61:f3:
c4:19:6c:6e:c7:bf:e8:3e:18:1f:e9:e9:3b:c7:8f:9e:60:31:
e5:ea:6a:50:ef:50:04:cb:a6:77:06:a7:a2:62:fa:31:41:06:
c3:8f:c1:66:e5:e7:03:11:00:84:c4:26:b1:0e:65:8c:c5:ad:
f6:cd:c7:65:2f:62:e2:15:5f:08:f3:29:98:cd:e3:42:20:8b:
10:fb:cb:5e:5d:5e:ab:53:92:1d:da:84:cb:59:57:ae:36:16:
fb:d4:6c:34:32:e0:04:e3:68:62:3d:81:6c:f7:43:8c:c0:5e:
c6:52:69:1b:3f:c0:34:ec:94:4d:72:08:8c:7d:fe:0b:4d:8d:
b8:38:20:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:51:31 2026 by rpki-client