Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
File: nFVnZyAcUPayqVXbah5uAR36XUQ.mft (raw, json)
Hash identifier: K6uxkqTADMSMGrWqk35M6A+9to5i/IvfLv6TDKQ7fXc=
Subject key identifier: 22:A7:9F:CE:E4:53:0B:2B:FD:BD:3A:3C:BB:2D:A0:CE:7F:63:CA:6B
Authority key identifier: 9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
Certificate issuer: /CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Certificate serial: 019D9A070C923BBD943EEA8F07B6C5E7575E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
Manifest number: 0DEA
Signing time: Fri 17 Apr 2026 06:00:46 +0000
Manifest this update: Fri 17 Apr 2026 06:00:46 +0000
Manifest next update: Sat 18 Apr 2026 06:00:46 +0000
Files and hashes: 1: AaDplZOBjFP44WCq4B011KFt3wk.roa (hash: cc1qcanaelqIhqY1IjMuQU7pXZ3q+cEr4hq8dhQwh3g=)
2: nFVnZyAcUPayqVXbah5uAR36XUQ.crl (hash: fats9ehFIRVle5QNFqzHxVimOd4NNBEuz/SjQXQKFgA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:07:0c:92:3b:bd:94:3e:ea:8f:07:b6:c5:e7:57:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c556767201c50f6b2a955db6a1e6e011dfa5d44
Validity
Not Before: Apr 17 06:00:46 2026 GMT
Not After : Apr 18 06:00:46 2026 GMT
Subject: CN=22a79fcee4530b2bfdbd3a3cbb2da0ce7f63ca6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:9e:74:ca:12:46:b8:4c:39:2d:71:91:c2:0c:
fe:05:7b:95:f1:75:83:73:39:73:e3:aa:03:f8:11:
d0:22:24:8c:ae:87:44:2e:c4:b7:37:24:34:8a:f8:
7c:a8:b4:4b:18:09:f9:03:66:0f:c1:90:89:76:f4:
2e:e9:7b:b9:2f:1a:f3:6f:a1:78:7b:ee:3f:75:21:
04:7c:6d:09:33:72:28:88:59:0b:2e:a5:4b:53:32:
b6:a4:ea:0e:1c:a6:0d:f9:b8:fe:30:0e:35:be:5b:
7f:db:be:a2:d6:0a:68:b3:2d:8a:60:d5:62:9c:78:
5d:ef:b6:ca:b4:f5:60:c2:f7:29:eb:0a:8c:32:05:
e9:3b:62:d5:8e:b0:12:cc:10:e9:9f:7d:37:1b:d2:
8a:06:af:95:fb:76:00:f0:52:9d:ca:fb:1b:a1:54:
46:51:03:0b:ed:c6:f2:02:f6:ab:42:99:fb:7f:e6:
d4:59:c5:64:38:db:64:98:05:ea:28:64:74:48:e1:
37:d1:e5:cf:53:3d:2d:2c:ed:aa:37:d3:69:53:f9:
d0:e4:ef:55:de:1e:c0:36:7d:6e:e4:67:99:f9:2c:
4c:a7:aa:ff:38:2b:a5:22:9b:7a:86:65:e6:33:08:
97:77:c2:d2:a2:c7:30:a3:15:60:53:07:61:7d:67:
3d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A7:9F:CE:E4:53:0B:2B:FD:BD:3A:3C:BB:2D:A0:CE:7F:63:CA:6B
X509v3 Authority Key Identifier:
keyid:9C:55:67:67:20:1C:50:F6:B2:A9:55:DB:6A:1E:6E:01:1D:FA:5D:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFVnZyAcUPayqVXbah5uAR36XUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/6dac86-224b-4ae5-b2a8-496ba82492ce/1/nFVnZyAcUPayqVXbah5uAR36XUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:ec:fd:4b:89:83:d0:bb:59:f0:6f:bc:4b:3e:95:d0:1d:ef:
ea:33:0a:71:a7:0a:d8:98:08:ff:82:32:27:44:4d:84:80:61:
dd:df:7c:ad:a9:18:e2:a5:b4:80:f4:5f:57:1d:3d:cf:3a:3c:
22:d0:39:55:6b:64:c0:0c:34:33:9b:ba:f0:dd:ee:45:41:c1:
b5:44:40:81:c6:55:64:e8:7b:73:4f:0e:90:c8:7f:d1:0a:03:
a2:1f:49:94:47:fa:85:f6:d8:24:a6:15:b2:2e:8a:fa:b3:b2:
f0:d5:95:41:28:5a:e7:d1:d6:4b:13:0c:b4:f8:3c:c8:11:e4:
9a:f7:bd:02:92:03:56:71:fe:5c:f8:be:53:23:be:6d:89:02:
4d:84:f6:6b:41:5e:a6:f8:bf:28:b6:e6:bf:5e:af:a4:81:22:
4a:1a:70:50:de:e7:30:a9:82:0f:c1:6d:25:b0:c1:7b:95:ae:
c8:5a:85:70:42:d6:01:13:c0:8a:b6:b4:21:f9:4b:2e:b3:94:
4c:62:72:77:29:5f:87:67:02:43:5d:4a:c5:a0:4a:da:2b:0c:
9b:1d:7e:43:7a:04:50:94:ec:ba:e8:2b:62:6a:c0:18:f7:6f:
60:32:30:ab:36:d6:3d:01:f4:b3:b2:f8:cc:67:1c:4a:c2:af:
59:0f:9c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:55 2026 by rpki-client