Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
File: nSP0y0urXBCAGncGWN-JHPuMaMY.mft (raw, json)
Hash identifier: 8Xgs8PTkAFtNTTQVXfm+Pwdp52RYTczVPQLjzE+eTPQ=
Subject key identifier: 53:56:7B:09:46:A1:08:64:4D:2A:12:D3:79:B4:3D:43:B2:9C:AF:3C
Authority key identifier: 9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
Certificate issuer: /CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Certificate serial: 019D996216C1A41FF933687CE37037C64F1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
Manifest number: 18A2
Signing time: Fri 17 Apr 2026 03:00:35 +0000
Manifest this update: Fri 17 Apr 2026 03:00:35 +0000
Manifest next update: Sat 18 Apr 2026 03:00:35 +0000
Files and hashes: 1: 1-CMu0p1qNg0e63aYoj_D4LrDxfY.roa (hash: lOabOtnZlG49slymDCg4DYEF9uaLsHuP8kozmEeWWJk=)
2: NhBesxbcMyD0yBQrL2MrPFZhlpM.roa (hash: doi57fugVWY7hzj7Rlf76Ryk/Bx6TRKhE01hpolLsig=)
3: Vx7x_kcOmv3pHdfN4JeJkZMt0-E.roa (hash: H/ghuncbtOSKrShu1dgfSXsTU1/uj8pKrjpq8yu2Ers=)
4: XPTuMOSHPxC4TQkhQQhMLupKp7g.roa (hash: TDD3hEBL7CPqvnrfrg7l4hY6bRfLkH7/ULGfUjsBzoo=)
5: h4LJjNrzp4fAWVmt9xZ04UKNInQ.roa (hash: hPnSIuqaeCZAtukV9F+5jwRGZESxgM1eDjQaNz+/KSs=)
6: nSP0y0urXBCAGncGWN-JHPuMaMY.crl (hash: 2ZCRxiV43+IYlSp/uwPfCa4QrAFkgBTLpk2TYUZepWw=)
7: nqfdhUcL9cEhRFGA3epCciCW5S4.roa (hash: IIzxcFRfs7wicO4VvZHLFcN54s0V/nVCkQfttWBnBQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:16:c1:a4:1f:f9:33:68:7c:e3:70:37:c6:4f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23f4cb4bab5c10801a770658df891cfb8c68c6
Validity
Not Before: Apr 17 03:00:35 2026 GMT
Not After : Apr 18 03:00:35 2026 GMT
Subject: CN=53567b0946a108644d2a12d379b43d43b29caf3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:24:57:39:e4:04:60:19:11:74:80:bc:ef:72:
24:49:48:96:98:e1:dc:a9:a4:5b:87:4f:25:98:d1:
8e:65:0f:20:4f:37:66:a4:98:f7:18:b5:f2:20:b3:
41:11:00:ed:64:17:ab:87:0c:7b:18:b3:99:9c:58:
f2:c6:13:41:80:8b:2a:d1:60:96:b6:ab:30:fc:28:
fa:19:39:1a:88:4e:0e:37:58:35:cd:60:b8:f1:f9:
5e:0f:34:cc:22:63:36:a5:05:91:09:f9:55:0c:6e:
89:f0:93:46:9c:bb:b8:ce:34:89:22:20:c5:1f:d9:
ae:2a:39:d2:63:1e:eb:34:38:59:ab:42:6a:ac:df:
1a:64:cb:a8:cd:b1:b5:dd:c5:5a:bc:1c:eb:1c:c9:
98:4e:f1:bb:6d:0b:10:4e:3a:fa:32:84:83:f7:85:
32:40:70:86:a4:f3:09:b7:2e:b0:9c:31:93:93:2b:
70:fe:06:78:d2:59:b8:df:60:f1:3c:6a:90:f8:8a:
43:bf:7b:20:9c:72:52:7e:6a:ee:66:3f:3a:f2:77:
af:3a:f3:e4:89:e2:e2:f1:a0:76:72:6f:d9:c4:6a:
b5:7a:d6:dc:68:58:11:84:bb:30:d6:d2:b3:7c:2b:
e2:44:ee:72:d3:bd:ca:17:5f:e2:97:a3:8c:10:9b:
4c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:7B:09:46:A1:08:64:4D:2A:12:D3:79:B4:3D:43:B2:9C:AF:3C
X509v3 Authority Key Identifier:
keyid:9D:23:F4:CB:4B:AB:5C:10:80:1A:77:06:58:DF:89:1C:FB:8C:68:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSP0y0urXBCAGncGWN-JHPuMaMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/4eca4d-3a2e-4a84-a789-01577a927fa9/1/nSP0y0urXBCAGncGWN-JHPuMaMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:68:95:4b:0b:a6:b8:70:d3:08:48:f9:20:32:b9:1c:97:e8:
6c:dc:ea:58:f2:43:34:eb:ac:f4:6d:18:d0:08:65:e2:e3:90:
ce:f5:02:f0:1a:08:a4:00:44:73:1b:d4:f1:cb:e9:58:06:f0:
de:f0:63:7a:ee:e3:c8:e8:99:88:11:8b:b2:4a:7f:8f:c4:48:
e5:96:f8:d6:a7:7a:a9:34:a9:3d:21:b4:b9:c0:76:cf:83:ed:
ac:c1:c9:36:b1:a9:ad:80:5c:fd:7e:40:ef:b3:12:c6:e7:6b:
ee:69:be:99:b0:67:5c:6d:a0:66:c5:00:2e:6a:c2:40:e4:8e:
d2:5e:f2:df:4c:a6:4c:72:26:7b:61:a2:cc:37:28:c9:f0:0b:
20:b1:84:49:1d:f2:fd:fd:0f:f7:96:6b:76:17:0b:fc:4f:d3:
77:27:24:99:ae:c6:07:be:fd:32:af:7e:3e:0b:8e:12:cf:64:
e2:9d:de:24:3b:d8:bd:7d:b2:62:76:16:fa:a1:69:6c:06:bc:
a1:e7:cf:d1:d8:d5:e2:50:9a:72:55:c1:5a:57:98:67:c9:2e:
5e:6a:51:a4:8c:de:75:9d:41:6d:e8:70:0e:2a:e5:7f:90:50:
0d:fe:24:4e:17:18:9c:fd:06:e9:70:8f:3e:39:b4:60:dd:99:
57:1f:82:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:02:36 2026 by rpki-client