Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
File: nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft (raw, json)
Hash identifier: UKrV5dcwIe7O9RGAsMRKhkVyMaWxfa3kANoCD+So6AM=
Subject key identifier: 53:EE:B7:FA:45:F5:6D:CE:41:7C:B3:E2:CF:DC:DE:4C:4A:62:61:77
Authority key identifier: 9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
Certificate issuer: /CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Certificate serial: 019D981893842BE39F5E5B503C763B57C0D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
Manifest number: 0B71
Signing time: Thu 16 Apr 2026 21:00:40 +0000
Manifest this update: Thu 16 Apr 2026 21:00:40 +0000
Manifest next update: Fri 17 Apr 2026 21:00:40 +0000
Files and hashes: 1: 1-w9hWaB0Y-QZTijfEO33ePRZy0.roa (hash: SgY+1sZqpVCfIbnHknsFg6v2g9JFPjHBp5HxZb7l6VM=)
2: nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl (hash: yjdrtULDoV++uWLs74EaACbQ3aZwKrs6xvKYdBeW4A8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:93:84:2b:e3:9f:5e:5b:50:3c:76:3b:57:c0:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9df24afbfecdf6a99c282bf53b304f3c1e8f470f
Validity
Not Before: Apr 16 21:00:40 2026 GMT
Not After : Apr 17 21:00:40 2026 GMT
Subject: CN=53eeb7fa45f56dce417cb3e2cfdcde4c4a626177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:ce:b8:d3:f8:3d:7d:d6:8f:52:dd:2b:3d:dd:
63:8b:3c:b4:77:29:5c:3b:33:6f:1b:58:50:2d:5d:
34:a0:cd:b1:d6:9e:6b:ba:66:c2:03:c9:f7:7f:2b:
32:0d:51:39:db:ec:7a:a0:09:81:7f:d0:d6:24:69:
bd:b4:fb:69:58:8f:7b:2a:90:1f:0a:d4:fc:56:81:
6b:b6:b2:ca:5f:c8:9a:10:8a:c9:be:06:e3:da:e0:
01:ff:06:54:6c:ca:20:aa:2e:c4:19:d8:e4:71:34:
a3:1b:0b:30:ff:08:e1:37:3c:d3:5e:bd:a1:31:08:
52:2c:2e:7e:de:50:62:6b:d9:a8:2f:e5:58:75:55:
5e:9f:08:04:1c:a8:bc:5f:8e:76:cf:3b:a2:f5:1b:
63:4a:49:9c:12:86:79:3e:82:4a:58:03:c0:fd:47:
9e:b3:2d:25:df:4a:1f:23:96:dc:09:27:b9:47:b7:
f7:b8:0a:7e:d8:49:8c:6e:b1:5f:6a:e2:8a:f9:74:
67:70:e7:ca:82:f5:13:10:7c:fe:93:6d:17:40:eb:
69:b8:df:6b:29:c9:01:1c:80:af:59:d8:ca:b8:3f:
c0:4f:d9:64:27:bf:f7:e8:e8:b5:aa:1d:b1:0b:7c:
00:0d:3a:82:1d:3d:ba:ab:5d:09:93:b5:8f:67:71:
a0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:EE:B7:FA:45:F5:6D:CE:41:7C:B3:E2:CF:DC:DE:4C:4A:62:61:77
X509v3 Authority Key Identifier:
keyid:9D:F2:4A:FB:FE:CD:F6:A9:9C:28:2B:F5:3B:30:4F:3C:1E:8F:47:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nfJK-_7N9qmcKCv1OzBPPB6PRw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/ea9c59-9e14-4f25-86bd-7eedf4dd6c13/1/nfJK-_7N9qmcKCv1OzBPPB6PRw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:4b:66:70:4d:eb:cd:4f:e9:a2:91:0d:30:94:11:04:9c:f7:
ae:2b:5b:58:e4:17:5f:65:ae:38:df:97:10:e7:c4:b7:32:2d:
29:23:73:4c:68:8a:55:2a:fc:93:6d:34:dd:c1:8e:4e:4f:f2:
13:11:07:6e:ba:74:77:fb:e6:21:c4:8b:d6:40:e0:39:bf:0f:
94:50:52:84:b2:f3:5e:01:f7:8f:b9:51:c0:96:cb:05:b6:c9:
3b:c7:0b:10:43:74:ed:38:0f:2d:52:d3:ee:42:9d:68:4b:1e:
e0:73:55:c4:10:b4:1f:6c:3e:07:4b:80:2f:88:f8:c6:6c:92:
10:58:b6:b1:5a:40:13:ad:1b:da:8b:a7:b8:b1:ff:8b:7d:06:
37:0d:fd:03:b1:c1:c9:52:f7:bd:e5:3c:9d:40:6c:49:16:1a:
97:fc:19:83:1b:9d:7c:38:59:dc:53:09:09:70:86:3c:ff:f5:
dd:cc:e0:77:88:b5:0f:b6:e6:9e:8a:6b:ec:c6:92:ae:9f:7f:
10:96:ff:a2:23:00:fa:d0:72:0c:76:f4:81:ad:d4:c4:02:4d:
dd:23:f3:7c:9d:4c:cb:f5:10:93:84:0e:db:25:6d:91:e9:2e:
62:bc:ef:d3:29:60:17:1b:4f:91:2e:e6:bd:55:66:aa:39:49:
70:a7:05:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:09:10 2026 by rpki-client