Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
File: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft (raw, json)
Hash identifier: y6xNaVpmYt9UkSvno9vJW4o5DMJpNcb6+VYQy9ogCXY=
Subject key identifier: 71:70:4C:F8:DA:AC:5A:1C:4B:8D:42:71:E8:83:47:1F:F7:DE:9E:02
Authority key identifier: 9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
Certificate issuer: /CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Certificate serial: 019D98504D8DBADF35833AA05D21C3855F9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
Manifest number: 18C4
Signing time: Thu 16 Apr 2026 22:01:32 +0000
Manifest this update: Thu 16 Apr 2026 22:01:32 +0000
Manifest next update: Fri 17 Apr 2026 22:01:32 +0000
Files and hashes: 1: Cu4pJx-r5WHHtQlLqPIl7Qbn6a8.roa (hash: nvdmwUw2DJYlyGm2Jpi5RTC+E3z4Xl1tYxTpqZlijT8=)
2: nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl (hash: qyiGhDpOHb+Ok4cccSKa4TkBD0OGp/BwVUh9n/uOi70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:4d:8d:ba:df:35:83:3a:a0:5d:21:c3:85:5f:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e74135bb07c6540cd307bda08ca0674bc84c939
Validity
Not Before: Apr 16 22:01:32 2026 GMT
Not After : Apr 17 22:01:32 2026 GMT
Subject: CN=71704cf8daac5a1c4b8d4271e883471ff7de9e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:21:75:43:7b:37:19:09:b0:84:7d:a4:c9:fb:
54:50:5b:7f:48:5d:33:6e:89:23:4c:a6:46:3a:26:
6a:b4:df:93:74:f7:89:6c:ee:2b:e0:7c:21:8d:4c:
88:60:50:10:28:76:88:df:7a:e3:5c:19:64:ca:12:
b4:94:3f:ac:fd:a9:73:b0:29:c2:f8:80:a2:f1:cc:
03:63:65:55:62:8d:2b:3e:ae:97:d7:f6:73:f4:f7:
86:b7:a6:22:f6:f8:7f:6f:ec:59:2a:07:b1:c8:aa:
4e:a0:77:5c:2a:b4:eb:9d:18:fc:a0:e3:84:1b:bd:
09:e9:78:0d:4d:c2:be:34:8a:20:07:84:be:6d:83:
57:4b:48:47:cb:c6:91:ee:9c:8f:95:ae:00:17:9a:
46:c5:fb:63:71:ba:22:a1:0c:b3:0d:2d:4d:be:42:
2a:c6:3a:e5:f8:18:a9:4d:64:2f:9e:de:07:03:08:
6b:57:49:76:c7:ae:76:30:4c:af:76:4a:72:a9:34:
2b:54:c0:ae:0b:b6:ad:c4:7d:6d:79:5f:51:0b:8c:
8c:f5:51:a4:f7:3d:3c:c2:ed:3c:81:9c:36:1f:6c:
a3:4c:06:2f:0f:e2:4c:18:0f:ec:9e:99:9c:aa:ef:
78:1f:c3:c4:32:4e:6a:d6:a3:46:5e:d9:17:d5:10:
bb:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:70:4C:F8:DA:AC:5A:1C:4B:8D:42:71:E8:83:47:1F:F7:DE:9E:02
X509v3 Authority Key Identifier:
keyid:9E:74:13:5B:B0:7C:65:40:CD:30:7B:DA:08:CA:06:74:BC:84:C9:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/5e78f6-253a-4115-ae5d-5dc80faed2dc/1/nnQTW7B8ZUDNMHvaCMoGdLyEyTk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:77:cf:9a:81:4f:06:34:ba:cd:fd:35:7f:97:57:88:e0:26:
c7:d1:49:15:71:4d:c7:36:1f:b0:37:1d:e6:44:77:26:69:ba:
8e:e8:ac:6c:1a:60:49:b8:74:70:81:b9:35:69:82:ed:d0:b4:
79:ad:68:66:1e:2e:74:04:18:92:5c:f2:d6:df:8c:7e:02:e4:
e5:c7:f0:50:df:94:17:08:6c:45:a5:70:a6:e8:b5:76:ed:6b:
34:e5:ab:53:ba:25:e2:15:23:56:1a:95:75:e3:b6:a3:04:69:
43:0a:69:dd:f2:8c:e9:f6:65:03:35:df:b2:42:95:2f:a9:3f:
b8:eb:b4:d8:74:e8:9d:d9:33:8a:d8:c1:c8:66:c9:d1:f1:f8:
b7:7d:9e:81:f3:b4:6d:f8:5e:0b:5f:7c:37:eb:9a:89:44:92:
a4:b1:a4:7c:63:b2:56:35:8e:33:3c:de:9a:a4:23:4d:c3:87:
ef:3b:4f:26:dd:3d:56:ff:c8:5d:ac:8d:05:f8:c6:9e:23:af:
62:81:b3:12:d8:92:ff:78:95:71:1a:4a:6d:4a:52:e0:e0:b9:
ea:d4:59:80:ef:f9:0a:a2:72:0e:38:cc:09:ba:16:d0:4e:a4:
9d:74:32:2f:86:0a:43:6f:25:6d:dc:87:e3:50:c0:b7:a9:30:
75:25:f0:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:42:40 2026 by rpki-client