Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
File: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft (raw, json)
Hash identifier: qTiFt0xOegWc/9O6T1CvICa0S85c1aR8X4iRbAnaSLs=
Subject key identifier: 3B:8F:F8:C9:E1:57:56:BC:AB:A7:21:35:24:99:F7:AF:32:4D:46:3C
Authority key identifier: 9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
Certificate issuer: /CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Certificate serial: 019DA453E26C6F4EF4CAD28A99F4F012D563
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
Manifest number: 43
Signing time: Sun 19 Apr 2026 06:00:53 +0000
Manifest this update: Sun 19 Apr 2026 06:00:53 +0000
Manifest next update: Mon 20 Apr 2026 06:00:53 +0000
Files and hashes: 1: GxX0NEfDzMw7gEa_ZAj9VTuZ5rU.asa (hash: mAtK7Fbp0A4HV03b+LlP4AWR9fiqDJ5mHPkbxUfIEUw=)
2: nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl (hash: QydAdD5lwH2d2IoLuwUtA8leV9S6r88G7A68er59G30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:53:e2:6c:6f:4e:f4:ca:d2:8a:99:f4:f0:12:d5:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eb911afb29ce3352767e7139d9b95df8a0598cb
Validity
Not Before: Apr 19 06:00:53 2026 GMT
Not After : Apr 20 06:00:53 2026 GMT
Subject: CN=3b8ff8c9e15756bcaba721352499f7af324d463c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:4f:b5:ff:f8:0c:33:7b:43:fa:80:15:32:3e:
52:b5:52:af:c0:18:0f:bd:35:a8:e5:55:0b:6c:e8:
19:ae:e0:88:6c:26:0f:49:b0:b5:71:31:af:f1:6a:
d9:3d:7f:d8:48:6c:27:ff:40:ae:51:21:79:9a:a5:
a5:5e:a9:89:3b:30:72:92:1a:4b:32:50:fc:6f:5a:
68:d8:5b:81:39:38:72:98:a9:18:3e:7f:5d:ba:b6:
cf:e2:93:9e:f0:71:93:09:6a:94:a2:c7:43:0d:7f:
13:74:1a:0e:d6:71:5f:53:46:9b:ae:64:5b:ed:c0:
75:2d:da:78:89:70:90:d4:70:f7:ac:fa:48:64:7b:
1a:06:91:10:8c:20:b7:3d:22:c1:03:74:51:c4:6c:
99:b2:4d:b4:2a:5c:88:37:e6:be:8d:06:0a:7c:8e:
2d:4b:ce:6d:6d:96:5b:dd:c8:f3:a2:49:c2:82:37:
77:c8:33:eb:66:66:7b:a4:1a:bf:af:a6:8a:1c:97:
b5:cf:f1:27:8a:e2:10:03:a9:95:38:df:0c:4f:5f:
62:81:83:ab:3a:c4:c7:c2:78:76:74:96:17:8d:dc:
ab:05:f3:85:e0:e7:95:3f:94:a6:5b:d5:6e:02:a1:
56:4a:7e:b4:fe:a2:18:4f:a6:05:7e:5e:b4:ec:1b:
1e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:8F:F8:C9:E1:57:56:BC:AB:A7:21:35:24:99:F7:AF:32:4D:46:3C
X509v3 Authority Key Identifier:
keyid:9E:B9:11:AF:B2:9C:E3:35:27:67:E7:13:9D:9B:95:DF:8A:05:98:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/1ab91f-3328-4366-a516-65e2457132ef/1/nrkRr7Kc4zUnZ-cTnZuV34oFmMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:90:fd:d5:81:3e:76:1f:d2:7b:8a:03:ff:24:88:c2:d4:b3:
12:7b:c2:03:bb:4e:db:82:62:9b:06:11:2e:b8:b5:a8:ac:3d:
6c:64:fa:78:69:26:4d:f6:ec:e3:f8:bb:8b:7d:7a:71:93:5c:
4d:0d:6d:5c:da:8f:61:94:ec:e1:b7:d4:a6:9c:3d:d5:25:40:
ba:34:c9:78:70:f2:2e:56:16:58:69:6d:e4:af:61:15:31:c6:
1a:77:ff:a4:bb:05:14:8f:0f:34:38:ad:f5:1f:d7:18:09:92:
be:d0:75:b2:66:e2:5d:9c:b2:03:9f:92:6c:03:ae:a8:5e:ef:
1a:e9:07:eb:02:5e:56:b7:58:dd:91:d4:28:63:2f:d7:5f:e5:
bb:f4:7c:19:d6:8a:9b:39:e4:c3:09:fb:74:9e:69:0d:95:ba:
a0:1a:dd:12:04:7c:4a:56:fd:1b:a5:17:5e:8a:b9:01:4a:7f:
4b:f1:d8:a5:0c:36:ff:d9:5d:65:42:da:8e:28:ef:8a:e6:3f:
31:c9:b1:66:db:c9:3e:1b:aa:01:10:a8:36:6f:ba:8e:97:93:
25:27:d8:92:40:85:b9:e8:04:16:3c:96:1a:23:a1:3c:24:9c:
9b:0c:01:fd:21:f1:73:a2:37:a0:31:a8:9d:f4:d6:38:e2:2c:
4e:37:53:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:40:57 2026 by rpki-client