Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
File: NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft (raw, json)
Hash identifier: VduSOEDK+Ms2erVkH6fp5CbnTLNkYNK4oIHMpWlza6E=
Subject key identifier: 27:B4:5E:C1:83:45:DB:91:39:C7:A6:FA:47:79:BA:2D:A2:23:22:48
Authority key identifier: 34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
Certificate issuer: /CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Certificate serial: 019D99D02F6228414645D0665F53575ADF17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 05:00:50 +0000
Manifest this update: Fri 17 Apr 2026 05:00:50 +0000
Manifest next update: Sat 18 Apr 2026 05:00:50 +0000
Files and hashes: 1: ABmYN8QB4vtJgGHfuupaZ7vq_DU.roa (hash: zGb7TzIU0CGn680nSZCYZpGRTlBYHFYI+vyCKo6WS0Q=)
2: NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl (hash: SC5cU3xV8cHUnyQw1hWz07dlmSevnfoUTkrApug4x18=)
3: Oii3V-7piYCPzs0_dSiKYPboBMk.roa (hash: Ilo1v9IIMxIQYILX+1PmPseCaQDDpP2GLZh2OKOVwAU=)
4: zCVYNwSb6R9Q5adien3vj6-COxI.roa (hash: 4WkrjYGFdpzJeGxKIOg7LPmr739iupPTe/+MPRyS+UI=)
5: zFAiybQzQxds72WdUATD8g4BEjw.roa (hash: cy5FFDk0mqzxC2rHBMlzxFOlZHb2KlFrT4hf9F2Oo6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:2f:62:28:41:46:45:d0:66:5f:53:57:5a:df:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=340bea3fcc3cbcedc82919cf57c74108baea369e
Validity
Not Before: Apr 17 05:00:50 2026 GMT
Not After : Apr 18 05:00:50 2026 GMT
Subject: CN=27b45ec18345db9139c7a6fa4779ba2da2232248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:98:85:04:73:bf:ec:cd:b5:8a:9a:1f:1c:6a:
ca:c7:3f:51:ff:13:74:fb:bb:fc:bd:15:f4:24:8f:
aa:e6:09:2c:12:f1:38:bb:fa:1d:2e:51:92:45:26:
6b:b9:01:dd:aa:cc:b7:04:28:4e:59:1f:1b:8f:b2:
cd:12:e6:61:36:8b:1d:e5:e2:09:41:69:4c:1a:8b:
13:22:c2:00:9f:88:d0:ed:28:4c:41:42:1e:cd:e9:
55:a2:40:bf:2f:fd:a7:07:c5:13:4c:8c:e2:8c:c3:
f4:7f:a2:48:c1:55:25:35:d8:82:de:13:87:07:a7:
ea:b0:39:7d:3a:fd:f1:bd:f2:69:f0:1e:98:ea:35:
93:40:1c:4f:42:8f:61:6a:2d:e7:56:05:6d:61:5f:
c9:4e:5c:55:f2:1c:d4:68:53:66:2b:dd:8b:d5:cb:
7c:10:38:36:99:0f:c0:b9:e7:d4:78:ef:3e:35:61:
a8:66:78:69:e2:29:b0:dd:97:00:9f:a7:20:83:9b:
06:59:3e:e9:cc:79:0a:64:c8:d5:c6:42:e2:93:16:
5a:d5:5b:11:ce:8a:9b:32:0c:d7:d5:4a:00:20:44:
d0:0f:07:b8:82:d2:c8:60:5c:e7:71:e1:a1:e9:df:
d5:06:ae:39:06:e2:1b:b4:dd:ad:fa:b5:70:cf:c0:
ad:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:B4:5E:C1:83:45:DB:91:39:C7:A6:FA:47:79:BA:2D:A2:23:22:48
X509v3 Authority Key Identifier:
keyid:34:0B:EA:3F:CC:3C:BC:ED:C8:29:19:CF:57:C7:41:08:BA:EA:36:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAvqP8w8vO3IKRnPV8dBCLrqNp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/ecda3d-a2db-4908-862f-111056369a23/1/NAvqP8w8vO3IKRnPV8dBCLrqNp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:9d:7e:7b:e4:f5:4e:30:d7:c9:56:ad:08:68:a0:1c:67:13:
47:6e:f0:ea:73:30:d4:fb:84:90:12:1e:30:8b:df:6b:aa:ab:
52:6d:f6:d3:b8:bb:11:b6:df:03:5b:e1:a0:49:e0:58:5b:b5:
48:00:0f:8a:9e:e0:d4:ed:39:f9:4a:87:dd:21:39:cc:09:64:
b9:c5:b3:d3:09:5b:b9:98:25:ce:d2:4f:e0:8e:95:ab:02:77:
5d:dc:3e:64:54:b2:cb:20:7b:ed:95:8d:ec:9d:9e:04:78:30:
3b:c9:92:f7:4f:32:25:16:30:95:f0:f0:6a:91:ab:2d:25:d4:
e4:96:12:42:1b:ce:8f:cd:92:1a:b8:dd:82:6c:76:f6:7c:ef:
ee:92:d6:a4:81:b8:e6:8e:f4:75:71:3c:c0:2f:ee:a8:6f:05:
b8:4e:e6:77:40:c1:5e:f4:a0:59:d8:a9:08:eb:a7:0b:8a:69:
45:e3:e5:d7:d2:88:5c:df:c3:0e:fe:1e:45:4a:23:98:7a:48:
cb:ae:9b:c9:ae:96:36:4a:17:9e:30:5d:d3:ab:77:17:c7:fb:
f8:c6:df:65:d0:36:c4:ac:c9:2f:6f:d6:96:95:7c:8e:d2:f6:
88:f4:24:0b:25:3f:04:2d:3e:eb:00:3c:e9:e7:2f:8c:25:fd:
0a:52:51:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:18:00 2026 by rpki-client