Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
File: NssW5Ez78H6X9vXkSucYqlDQUpE.mft (raw, json)
Hash identifier: dm47Vbn1qPyFyvJEgSnIavYu7VSA/uhtMmf02zh9tbM=
Subject key identifier: BD:0C:66:E6:F3:3E:F3:99:21:F1:A9:03:9C:B9:5F:3C:FC:EB:D7:9A
Authority key identifier: 36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
Certificate issuer: /CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Certificate serial: 019D99994F46C9E92B5E283A837866B79D32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 04:00:54 +0000
Manifest this update: Fri 17 Apr 2026 04:00:54 +0000
Manifest next update: Sat 18 Apr 2026 04:00:54 +0000
Files and hashes: 1: A1iR6bQzfWrt-3S-DrDY84sQ1JU.roa (hash: yW7YhSTGjTCd5hdSGTzNJGlqpUw27PcefgpccczhLt0=)
2: NssW5Ez78H6X9vXkSucYqlDQUpE.crl (hash: F0Rha8JYuVfImFjJIrcf7nFgsgtC70YTRl7wsLtj1Sc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4f:46:c9:e9:2b:5e:28:3a:83:78:66:b7:9d:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36cb16e44cfbf07e97f6f5e44ae718aa50d05291
Validity
Not Before: Apr 17 04:00:54 2026 GMT
Not After : Apr 18 04:00:54 2026 GMT
Subject: CN=bd0c66e6f33ef39921f1a9039cb95f3cfcebd79a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:e8:24:80:46:66:d9:d3:7c:ee:43:1e:d6:82:
88:d5:5d:f7:fe:0d:d0:96:ac:b1:ec:86:8c:49:e6:
91:b9:85:48:a3:7d:cd:ce:9f:7f:a0:5a:95:54:8f:
60:42:31:35:30:56:5d:50:41:c7:43:d3:f4:63:a7:
51:9c:f8:19:68:f9:67:fe:b7:26:5b:97:57:a3:3e:
74:b4:34:f7:98:8a:9c:0b:ab:fe:1f:5e:8a:8f:a5:
d6:8a:83:6c:62:2e:80:15:cf:5a:86:20:63:b9:75:
76:15:aa:ce:e4:7e:8d:74:88:c3:25:e1:7c:b2:9e:
69:a6:9a:66:4b:20:1d:c4:ad:6e:37:32:bd:9f:48:
48:cf:37:6e:46:65:60:84:4e:1a:43:d1:2d:c7:61:
bf:d9:f6:a1:5a:a7:03:e5:57:2a:17:f5:e7:ac:38:
1d:66:d0:78:49:3c:e6:49:6f:60:1f:58:b0:eb:f8:
96:5f:62:45:33:51:b4:46:ba:12:82:05:ed:66:17:
78:9c:e4:46:e0:7e:5c:c7:88:10:bb:7f:3b:38:94:
c9:16:f4:cb:2c:ba:e1:f6:1f:eb:06:49:2f:22:96:
61:ce:27:99:0c:a4:3f:d5:02:89:b4:fe:4b:3b:56:
bc:2d:01:96:f8:ab:41:28:a6:f9:74:3f:2f:1e:3f:
1f:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:0C:66:E6:F3:3E:F3:99:21:F1:A9:03:9C:B9:5F:3C:FC:EB:D7:9A
X509v3 Authority Key Identifier:
keyid:36:CB:16:E4:4C:FB:F0:7E:97:F6:F5:E4:4A:E7:18:AA:50:D0:52:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NssW5Ez78H6X9vXkSucYqlDQUpE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/c8043e-ea95-4851-a2fb-10cbc597a71a/1/NssW5Ez78H6X9vXkSucYqlDQUpE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:bf:9a:80:cf:2e:ff:07:6c:c6:ef:16:32:ee:8a:d2:a6:76:
76:4e:3c:28:81:a9:9b:7b:35:dd:ed:8c:56:40:d9:1d:ce:1d:
45:65:a2:2a:02:a6:8f:cb:2f:99:61:21:93:12:64:ed:bf:cc:
94:fb:b8:5c:e1:f7:e1:4a:d5:8d:8e:8a:47:e4:03:c5:1a:5a:
59:93:55:6f:4a:31:9e:26:82:27:e3:62:bc:22:29:4b:61:b1:
14:fc:4a:e2:95:08:a6:39:18:3a:0d:ea:3a:bd:35:b1:77:dd:
4f:4c:a8:f2:ea:74:6e:70:55:ad:1c:1b:2d:3f:b1:7a:59:20:
d8:23:8c:2b:d2:c9:ee:73:3c:85:93:22:cc:c0:d7:fb:70:1a:
ee:10:45:1c:28:4b:3c:12:be:0d:0d:95:35:0f:d7:86:f8:16:
46:ae:8f:cf:d7:cd:16:3d:4d:de:00:9b:68:0d:06:f3:b8:37:
a2:88:02:27:91:82:f1:af:99:bf:60:06:03:3c:48:d0:03:aa:
48:2a:11:b0:c8:70:9a:7e:7b:ba:0d:b2:cd:f2:ea:26:a6:dd:
77:9d:31:6d:cc:7c:c9:0a:eb:06:9e:e6:42:b5:57:f2:1d:98:
dc:ee:f9:0b:45:ab:c4:93:2c:0f:bb:69:12:25:ed:c7:5e:84:
ad:90:6c:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:10:07 2026 by rpki-client