Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
File: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft (raw, json)
Hash identifier: HtrP+swVgaoX0DhnB5225QUJ2SbtRGgjKE0OlzZg2GE=
Subject key identifier: 96:A3:79:25:82:01:46:E7:57:3C:B2:DE:EF:A4:BB:07:1A:48:3A:20
Authority key identifier: 9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
Certificate issuer: /CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Certificate serial: 019D9A74A952ED284E624F016331888BCECE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
Manifest number: 11C1
Signing time: Fri 17 Apr 2026 08:00:29 +0000
Manifest this update: Fri 17 Apr 2026 08:00:29 +0000
Manifest next update: Sat 18 Apr 2026 08:00:29 +0000
Files and hashes: 1: 9UL_7FkS2vsJIq4mulwmPO12qgU.roa (hash: PMgAFWeEqNxOYIt76P9bkFAoNa2Je/9TmNXR3UwPjvg=)
2: nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl (hash: 8Ezod7wUie4tSE0WsEjGsIe92W3jLwEEf45Zg9DUVz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:a9:52:ed:28:4e:62:4f:01:63:31:88:8b:ce:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e3e00c6d2b2f98d51482e943b9793d43bf3bc86
Validity
Not Before: Apr 17 08:00:29 2026 GMT
Not After : Apr 18 08:00:29 2026 GMT
Subject: CN=96a37925820146e7573cb2deefa4bb071a483a20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:a3:d3:15:7f:9b:1e:ce:42:1e:57:77:e8:a4:
98:22:7c:bd:e4:d7:2c:44:cc:38:57:78:18:37:57:
9b:5b:24:ee:78:ae:2e:14:44:2f:e4:a3:f6:de:cb:
92:ac:5b:cf:bf:f7:61:bc:75:1b:72:e1:72:aa:06:
ae:da:1d:d3:98:3c:0e:44:66:40:b9:44:22:b6:49:
bc:5a:f5:79:4f:40:1f:b5:3e:da:a7:bf:63:de:5f:
58:ca:2e:d2:7c:74:4d:2b:7a:f8:fb:88:d3:41:38:
b7:8a:dd:12:db:4c:81:d3:44:b2:bd:83:69:80:dc:
2f:3a:a5:0d:87:33:7d:56:77:1e:96:d9:ef:49:6a:
83:e2:9e:97:11:b3:70:04:58:43:2f:d7:db:de:60:
ac:9d:7a:82:42:92:fd:c1:38:fe:6e:7a:9d:35:b4:
7d:bc:f1:f1:df:a0:e0:b2:10:a4:43:e8:c8:d4:34:
ac:57:fc:81:93:0f:4e:8a:1a:b4:01:9a:d8:74:60:
1c:77:15:02:49:52:47:ef:68:72:4e:6a:6d:d4:fa:
28:d0:c7:4f:1e:a5:fc:3e:5d:60:58:e3:11:6b:b4:
0b:97:43:62:36:13:6a:2e:85:d6:6d:3a:22:51:87:
c6:4f:41:e1:5e:08:2a:d0:1e:54:29:a8:a9:46:03:
82:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:A3:79:25:82:01:46:E7:57:3C:B2:DE:EF:A4:BB:07:1A:48:3A:20
X509v3 Authority Key Identifier:
keyid:9E:3E:00:C6:D2:B2:F9:8D:51:48:2E:94:3B:97:93:D4:3B:F3:BC:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/ffdb69-680a-465c-a489-66c1442480de/1/nj4AxtKy-Y1RSC6UO5eT1DvzvIY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:0f:e1:3f:44:8f:ad:0c:e2:44:9a:25:28:01:fd:8b:52:ea:
62:51:11:e6:c3:b9:ed:b2:48:d4:4d:93:59:52:49:af:52:84:
37:37:31:1e:eb:e6:70:79:09:26:fd:7a:c8:58:78:93:8f:8b:
86:81:8d:f4:21:75:4a:86:9a:d9:4e:72:a4:e6:51:37:f3:a3:
57:88:ae:f7:29:a4:35:2e:6a:04:4e:ae:50:9a:d9:ea:ce:10:
9b:8f:9b:b8:b6:a7:c0:13:88:52:72:c0:b4:ac:59:f4:d5:9f:
00:bf:51:f2:20:53:48:f8:fa:e2:6e:a9:c3:d7:ca:14:96:0e:
62:d5:53:91:a6:dc:d8:ad:6a:5f:18:95:31:16:27:e0:92:c5:
5d:37:a7:f6:19:e9:50:2d:76:99:e0:5f:72:17:7d:7b:bf:f0:
5c:70:83:6e:d7:99:92:1a:df:c4:1d:69:a3:62:b7:d3:8c:ba:
ae:19:1d:57:94:fc:c3:4e:b8:df:27:6e:0d:3e:ac:16:5e:22:
ef:3c:91:ea:44:74:1e:ee:55:32:e2:49:e4:a2:b5:ea:0e:fd:
15:3b:6e:ad:ad:89:79:9b:ef:88:07:7c:f7:87:1c:16:c3:4b:
1c:d0:c2:ff:c4:3d:2e:bb:2b:e5:8e:da:db:51:9a:58:af:56:
ed:04:6f:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:26 2026 by rpki-client