Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
File: NmqdVCKXV3s3qgxCMZWv4qmOE10.mft (raw, json)
Hash identifier: xLXzX58USd1V5jSzb7VI+elAoeAsIkK1/31woj6XSQI=
Subject key identifier: 37:B2:D4:C1:27:2D:13:25:53:2F:F1:19:DE:B4:79:4F:C5:6A:CA:C8
Authority key identifier: 36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
Certificate issuer: /CN=366a9d542297577b37aa0c423195afe2a98e135d
Certificate serial: 019DA41D1CAA144F64C01DE046DB4D0DE1A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
Manifest number: 18CB
Signing time: Sun 19 Apr 2026 05:01:04 +0000
Manifest this update: Sun 19 Apr 2026 05:01:04 +0000
Manifest next update: Mon 20 Apr 2026 05:01:04 +0000
Files and hashes: 1: 1IT2YxPCfIxNq71vO4148RYnUFE.roa (hash: Wc3xK74C+nn8hA7fgodWur3oZYQffDuB/6q65gbxW3o=)
2: MiAk1Fn8h7yjl0ZEieRDcfLk_Ys.roa (hash: czv9oaDX9uocQn5ZLcnNiN6ZQ7Qagrx62umbfHCmvmg=)
3: NmqdVCKXV3s3qgxCMZWv4qmOE10.crl (hash: /7SW7rJLSEhlZIVdkUBX0qpyB2WmqesAt/Cwt1faL1Q=)
4: pP3Gylt_cXScwQG05O-i7ZbberI.roa (hash: D1R0gSpuoCuRFT+1LOp+3fEZGMYLA7llVr4974Zw4U4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1d:1c:aa:14:4f:64:c0:1d:e0:46:db:4d:0d:e1:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=366a9d542297577b37aa0c423195afe2a98e135d
Validity
Not Before: Apr 19 05:01:04 2026 GMT
Not After : Apr 20 05:01:04 2026 GMT
Subject: CN=37b2d4c1272d1325532ff119deb4794fc56acac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:e1:52:2f:df:26:d3:79:1b:b7:c8:40:eb:98:
97:42:91:58:c5:af:30:fd:0b:12:92:70:a8:0c:3b:
12:15:a3:28:cb:48:3e:42:d7:2d:b7:48:92:24:cb:
7d:0a:51:c5:7e:fe:c8:e3:a0:53:6e:08:28:b9:e0:
15:9f:e3:bb:e9:46:18:f9:b6:65:f8:61:69:a0:2b:
6d:b9:a9:d9:ed:f4:dd:c9:f0:c4:86:c1:9b:5b:ca:
af:7e:7a:01:f6:88:b8:71:1e:76:c4:76:d6:d7:b3:
64:85:1d:9a:ab:d4:ed:49:98:53:02:6d:3d:72:48:
e1:55:b7:f2:f0:0f:cf:f9:05:e3:f6:1e:e1:93:37:
09:48:22:b8:67:81:b5:f1:52:5e:7f:13:be:2c:86:
88:3f:40:b1:aa:88:95:b3:17:9e:19:82:a8:c2:b9:
8b:09:7a:b5:e5:d5:59:12:67:ce:d1:55:2d:f1:2f:
3f:ad:be:7c:15:d6:54:f9:b1:01:e3:ac:33:b2:47:
23:c3:97:e5:c0:07:4a:87:3a:8a:8e:87:42:e9:29:
3a:38:7e:e8:e2:c6:91:31:b5:de:b1:a8:8a:a6:b3:
75:f7:bd:0f:bd:2f:ef:0b:7b:f3:ed:f0:ed:9e:e8:
24:c1:9f:3c:bd:59:1d:e2:db:47:05:df:6d:96:04:
45:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B2:D4:C1:27:2D:13:25:53:2F:F1:19:DE:B4:79:4F:C5:6A:CA:C8
X509v3 Authority Key Identifier:
keyid:36:6A:9D:54:22:97:57:7B:37:AA:0C:42:31:95:AF:E2:A9:8E:13:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NmqdVCKXV3s3qgxCMZWv4qmOE10.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/fc7545-c5fa-43bd-8839-d185dec06012/1/NmqdVCKXV3s3qgxCMZWv4qmOE10.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:a4:a9:7d:04:1c:af:f6:4a:80:cf:47:7a:a5:28:31:39:7d:
a1:b8:3d:f2:17:61:49:24:5f:1f:57:7d:29:4e:c9:42:f3:e4:
73:54:59:d4:6e:a6:51:73:a1:5e:00:2e:b2:f1:3b:1a:0e:82:
43:ba:3c:aa:fb:e1:70:76:a3:0e:60:92:e1:59:be:75:10:83:
17:23:d8:fc:a6:a5:69:39:39:88:fc:38:37:0b:bc:b0:9d:8a:
2e:bf:06:7b:ec:e8:f4:81:d3:c1:c1:f8:eb:f4:3e:4e:8f:68:
52:b0:d5:6b:5f:f9:ee:90:b2:e9:ea:c3:5f:e0:43:ff:02:cc:
2a:f7:de:5e:fa:69:4b:1d:58:92:4f:4a:c3:f0:55:85:b6:5a:
08:58:2c:d3:55:9f:97:e7:31:c7:a8:55:1b:09:d0:1b:0d:76:
51:58:ad:43:d2:e8:73:46:9f:13:96:62:88:21:51:aa:66:d9:
f4:89:a4:2c:9b:71:23:97:1e:48:6d:d8:bc:7a:04:34:72:15:
7a:3e:f3:16:c1:9b:f5:a5:e9:10:39:44:e3:60:22:85:3d:48:
bc:e0:25:41:f7:7b:b5:6a:b7:3c:16:10:1f:98:14:e3:ef:a2:
32:1c:84:93:ed:e9:97:d8:37:a1:ca:46:d2:23:3c:74:e6:49:
03:a1:e7:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:44 2026 by rpki-client