Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
File: NIWdiibI6Ih3f06AGyC3hd7mVM8.mft (raw, json)
Hash identifier: KVI6AT4HfrF/1GBn1R6hWQlVxJfzYXV5yVTdNHWF9JA=
Subject key identifier: 00:98:07:34:E2:2B:A1:36:A8:E0:2E:97:7B:0D:54:3F:BE:7F:B7:8C
Authority key identifier: 34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
Certificate issuer: /CN=34859d8a26c8e888777f4e801b20b785dee654cf
Certificate serial: 019D984F89FAB25719B602388AD53DE7736D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
Manifest number: 15CF
Signing time: Thu 16 Apr 2026 22:00:42 +0000
Manifest this update: Thu 16 Apr 2026 22:00:42 +0000
Manifest next update: Fri 17 Apr 2026 22:00:42 +0000
Files and hashes: 1: NIWdiibI6Ih3f06AGyC3hd7mVM8.crl (hash: sZkBP5bmOUb7TM0lNKU0FiZ9glH5G8LwOFfgNKRIwJU=)
2: tt6jpkDuqE0CT-_FmJx73h6zRuI.roa (hash: YjG/I9+R+aYdPBq5tPHljKWlpfWn8OqsHy3BqigHS4I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:4f:89:fa:b2:57:19:b6:02:38:8a:d5:3d:e7:73:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34859d8a26c8e888777f4e801b20b785dee654cf
Validity
Not Before: Apr 16 22:00:42 2026 GMT
Not After : Apr 17 22:00:42 2026 GMT
Subject: CN=00980734e22ba136a8e02e977b0d543fbe7fb78c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:60:b9:25:44:69:1c:20:6a:62:3c:af:f6:74:
26:73:16:9a:bf:f4:85:34:65:70:2b:84:8d:ef:95:
bc:ee:8e:61:7a:ea:a0:82:da:d4:14:de:7d:fc:48:
de:4c:1e:3f:37:44:d8:a1:97:21:fc:7a:cb:0f:95:
ad:d6:5e:f4:4d:5d:01:61:d3:71:cc:ce:4f:16:84:
d9:b9:08:92:97:08:95:1d:e3:4f:bf:61:4c:7d:7d:
46:08:ab:af:66:8b:2a:c1:ba:b6:3b:66:43:a1:82:
b0:b7:23:01:57:40:17:f5:81:e1:7e:7c:b7:71:f1:
0f:96:d9:d5:c2:65:d6:7d:ea:57:77:4f:19:e1:cb:
46:36:a9:30:67:62:6c:ac:37:52:f0:4b:45:e7:7d:
a1:e9:48:3e:8d:c2:2c:88:45:7a:79:ce:6e:0c:92:
da:f2:3b:98:b6:b0:4b:3f:7d:ef:e0:ff:43:c9:8d:
21:d7:f8:a4:4d:89:48:55:06:16:a4:e1:1a:8b:5e:
bd:b0:31:08:5a:01:74:a2:65:da:8c:d5:47:f7:f4:
55:0a:e0:a2:14:db:1e:d2:ba:da:ea:3b:4a:86:5a:
2c:33:70:d8:c4:4c:f4:54:4e:aa:53:ff:88:3f:40:
d0:99:ac:20:29:38:49:16:0e:5f:03:b1:ab:a8:37:
9e:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:98:07:34:E2:2B:A1:36:A8:E0:2E:97:7B:0D:54:3F:BE:7F:B7:8C
X509v3 Authority Key Identifier:
keyid:34:85:9D:8A:26:C8:E8:88:77:7F:4E:80:1B:20:B7:85:DE:E6:54:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NIWdiibI6Ih3f06AGyC3hd7mVM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/78fefc-e9c5-4c6b-9ecd-18723c841121/1/NIWdiibI6Ih3f06AGyC3hd7mVM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:1f:8e:6b:05:d5:78:94:55:66:7e:c9:50:cd:2b:8c:89:c7:
ce:d0:fa:ef:0c:78:32:0e:5f:15:b9:5c:81:75:ea:95:5f:bf:
9b:81:fe:26:62:ab:e9:cc:db:99:ca:29:2b:df:63:09:d9:e6:
87:02:00:17:c8:ec:b9:75:cf:8e:8d:e9:65:b4:8d:e1:6a:41:
f9:48:86:fa:17:de:a2:5e:4e:5d:6e:13:49:c8:1f:d3:f1:25:
13:2b:e2:8d:c4:15:37:43:36:72:8c:93:de:22:55:14:eb:83:
5d:ec:e7:56:e1:8b:f0:b5:61:fa:82:0c:68:00:4d:4b:b4:89:
7a:f2:28:e2:c6:29:ef:e4:bb:bd:00:16:93:74:0b:04:f0:cf:
71:a4:b5:2c:ff:6c:b8:5e:5d:be:73:59:d5:2d:5b:0e:5c:7c:
81:83:f6:1c:c5:0d:86:ad:d7:3b:f9:e7:6a:44:6e:2a:91:29:
da:e3:42:a8:f0:17:df:08:47:56:5c:08:07:ec:fc:f1:b6:ed:
5c:82:91:f1:bf:6c:d1:27:64:86:0d:0c:c7:d6:20:d8:b3:f9:
df:62:8d:91:2e:f0:15:f6:17:f3:d1:00:16:c6:1d:45:38:d2:
95:33:4d:d5:ed:19:0e:d9:79:ee:ce:fc:ad:f9:fe:02:fd:f4:
7f:ce:ca:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:26:30 2026 by rpki-client