Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
File: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft (raw, json)
Hash identifier: XDQsfuOkhZII38a2PSjPuPxV7V/qD3xHmhdl3WmK/O0=
Subject key identifier: DC:F9:C7:84:C6:51:16:FC:DC:B7:21:FA:04:B7:4E:5A:A1:99:E4:86
Authority key identifier: 34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
Certificate issuer: /CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Certificate serial: 019D9B19A544C372CDED740FB8C2A01A2962
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
Manifest number: 0E84
Signing time: Fri 17 Apr 2026 11:00:42 +0000
Manifest this update: Fri 17 Apr 2026 11:00:42 +0000
Manifest next update: Sat 18 Apr 2026 11:00:42 +0000
Files and hashes: 1: NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl (hash: B7Qro5PHdfkfX/1wKIEIOQTgzwnkFlpISaE5rL/zu64=)
2: _wlQDJ-a5t0DnOpjlzl4sYCEK0c.roa (hash: GiE+B1Cr5+9pg7bf5qdmnXZtbR2Ijwng4egZwOyoXmA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a5:44:c3:72:cd:ed:74:0f:b8:c2:a0:1a:29:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=348cf9779a92efe97543b22a347b81c2eaa5bbfa
Validity
Not Before: Apr 17 11:00:42 2026 GMT
Not After : Apr 18 11:00:42 2026 GMT
Subject: CN=dcf9c784c65116fcdcb721fa04b74e5aa199e486
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f2:3f:09:6c:9b:f3:5b:1d:18:01:cb:54:3d:
dd:55:7d:64:76:60:d4:82:07:ed:f1:ba:2a:ef:60:
82:36:a0:4e:9f:ec:a0:32:89:54:0d:f5:3c:b8:fd:
bd:20:00:fd:55:42:41:73:86:d7:2c:11:dd:09:31:
96:d6:16:26:91:ef:2d:84:5b:fb:fc:4e:88:7b:a5:
b0:cb:df:da:b5:4a:5c:5d:9f:72:9e:8f:8c:ab:0f:
71:6e:72:91:4d:9f:17:49:01:79:1e:2a:86:87:b5:
d0:b8:5a:97:37:3c:9b:9d:c7:43:41:6b:2a:be:f9:
e1:84:ce:2b:8b:41:56:de:24:78:a6:51:36:5a:b3:
fd:a7:88:0a:a2:42:78:f7:62:2e:64:a2:8a:74:c9:
bc:32:ce:38:33:8a:29:bf:f1:0a:b1:a7:88:d0:2d:
5d:84:7d:ea:87:f6:03:41:69:8e:23:0c:fa:2b:55:
71:41:c7:f1:04:fa:bd:59:13:51:d8:93:e5:3f:d3:
e8:9c:70:b7:4a:05:94:be:34:8f:e9:da:c5:16:43:
44:84:5d:87:03:e9:54:f1:6b:94:3b:31:57:81:ad:
4c:4e:c9:ad:68:82:3f:3d:fc:ef:4c:8b:4f:a2:7c:
08:c5:31:9e:98:f7:2a:7d:9f:41:62:08:7d:69:92:
d6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F9:C7:84:C6:51:16:FC:DC:B7:21:FA:04:B7:4E:5A:A1:99:E4:86
X509v3 Authority Key Identifier:
keyid:34:8C:F9:77:9A:92:EF:E9:75:43:B2:2A:34:7B:81:C2:EA:A5:BB:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/29cd58-8327-42be-b7f9-c9819a410a7a/1/NIz5d5qS7-l1Q7IqNHuBwuqlu_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f2:7f:49:c3:c1:b2:6b:41:aa:68:df:2b:ae:88:76:d2:c6:
92:b0:c8:67:4a:7f:3e:83:bb:49:1b:41:db:4e:3e:4a:0c:61:
c6:d9:4e:c4:d6:ae:d4:82:ef:23:e0:42:23:2a:75:10:18:af:
18:78:dd:1e:35:b4:12:8f:24:1d:40:19:5f:4a:c7:e3:49:14:
ab:bd:91:62:01:bd:6d:47:3e:f5:9b:2e:6e:7d:77:94:2c:a7:
f1:25:6e:51:a2:bc:47:c2:96:61:21:2e:d1:d6:f8:23:56:af:
33:d9:06:92:35:b4:c9:c7:d6:c2:0e:5e:53:ff:ae:ec:12:87:
8f:d0:d2:3c:64:84:fc:e3:41:45:e3:f7:d7:bb:fb:7b:a1:06:
0c:29:e6:c9:a4:2c:b0:b6:72:30:ca:3f:aa:67:b2:a4:f9:01:
e9:5c:77:4d:0c:57:d5:46:ad:b3:a1:c8:b7:89:6a:36:d4:35:
b3:cb:3d:87:5a:de:9c:03:77:ef:8f:de:53:19:b6:fe:bb:e0:
d3:c8:d7:ad:3c:dc:2f:5a:ee:ca:e7:54:ad:44:83:4d:52:a4:
ef:2c:ab:a0:b2:cc:8f:20:ec:fe:a1:84:86:05:99:69:98:ea:
9a:ae:a8:6c:2b:1f:07:9d:e6:e1:c2:1c:00:64:74:15:3d:e6:
49:4d:cb:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGaVEw3LN7XQPuMKgGiliMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0OGNmOTc3OWE5MmVmZTk3NTQzYjIyYTM0N2I4MWMyZWFh
NWJiZmEwHhcNMjYwNDE3MTEwMDQyWhcNMjYwNDE4MTEwMDQyWjAzMTEwLwYDVQQD
EyhkY2Y5Yzc4NGM2NTExNmZjZGNiNzIxZmEwNGI3NGU1YWExOTllNDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovI/CWyb81sdGAHLVD3dVX1kdmDU
ggft8boq72CCNqBOn+ygMolUDfU8uP29IAD9VUJBc4bXLBHdCTGW1hYmke8thFv7
/E6Ie6Wwy9/atUpcXZ9yno+Mqw9xbnKRTZ8XSQF5HiqGh7XQuFqXNzybncdDQWsq
vvnhhM4ri0FW3iR4plE2WrP9p4gKokJ492IuZKKKdMm8Ms44M4opv/EKsaeI0C1d
hH3qh/YDQWmOIwz6K1VxQcfxBPq9WRNR2JPlP9PonHC3SgWUvjSP6drFFkNEhF2H
A+lU8WuUOzFXga1MTsmtaII/PfzvTItPonwIxTGemPcqfZ9BYgh9aZLWYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz5x4TGURb83Lch+gS3TlqhmeSGMB8GA1UdIwQY
MBaAFDSM+Xeaku/pdUOyKjR7gcLqpbv6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3Zjkt
Yzk4MTlhNDEwYTdhLzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS8yOWNkNTgtODMyNy00MmJlLWI3ZjktYzk4MTlhNDEwYTdh
LzEvTkl6NWQ1cVM3LWwxUTdJcU5IdUJ3dXFsdV9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfJ/ScPB
smtBqmjfK66IdtLGkrDIZ0p/PoO7SRtB204+SgxhxtlOxNau1ILvI+BCIyp1EBiv
GHjdHjW0Eo8kHUAZX0rH40kUq72RYgG9bUc+9Zsubn13lCyn8SVuUaK8R8KWYSEu
0db4I1avM9kGkjW0ycfWwg5eU/+u7BKHj9DSPGSE/ONBReP317v7e6EGDCnmyaQs
sLZyMMo/qmeypPkB6Vx3TQxX1Uats6HIt4lqNtQ1s8s9h1renAN374/eUxm2/rvg
08jXrTzcL1ruyudUrUSDTVKk7yyroLLMjyDs/qGEhgWZaZjqmq6obCsfB53m4cIc
AGR0FT3mSU3L9w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:23 2026 by rpki-client