Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
File: nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft (raw, json)
Hash identifier: okP+NaW5s6e3/SMHV6NyIbeSQkRwYfUIqbtYyOlsN1w=
Subject key identifier: 0B:B9:30:45:0E:D4:8A:D8:46:05:34:8A:F2:C1:84:BD:FA:2B:79:A5
Authority key identifier: 9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
Certificate issuer: /CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Certificate serial: 019DA3E60A4B9718DAD597E584C0ECFB855A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
Manifest number: 18C7
Signing time: Sun 19 Apr 2026 04:00:55 +0000
Manifest this update: Sun 19 Apr 2026 04:00:55 +0000
Manifest next update: Mon 20 Apr 2026 04:00:55 +0000
Files and hashes: 1: Q7VU1IAhmqh6QnPsRjKtqye9cFY.roa (hash: 5hCbvviVC6DjaUoU7fXbjYQV9Lo078pPrQ3MKFzmu/U=)
2: UMRm0dtRz3FJANd_M4r6isxg5pc.roa (hash: hL7WSRr8WKYlMsBe+yWHzd7U1Dc511hpxbpyKw8/AI8=)
3: cwpueJkAgwR--N1HcP66vBFBfHs.roa (hash: e4Ux6XpWYsR7DA/nLXViGlPPyLLw1PTyAUYLhKKvKpY=)
4: nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl (hash: Qf3u1jnmE05LZMlppUiR3EFCF670+VOsAx9LPZESFEM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:0a:4b:97:18:da:d5:97:e5:84:c0:ec:fb:85:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d9a0c84b30720f4d4ce4bdba01dd0544d028ecd
Validity
Not Before: Apr 19 04:00:55 2026 GMT
Not After : Apr 20 04:00:55 2026 GMT
Subject: CN=0bb930450ed48ad84605348af2c184bdfa2b79a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:92:7d:cb:45:ad:11:ab:bc:ac:ca:22:59:d7:
3b:ac:5c:ad:9c:a0:dd:1c:72:8d:d0:5b:5b:60:b9:
eb:3a:9a:56:cb:0f:7a:f3:2a:35:3d:40:fb:75:5a:
9f:0f:eb:4c:0e:6c:c9:e0:55:64:34:b0:fd:47:be:
82:2c:a0:99:01:33:42:42:14:d4:51:c2:ca:b8:fc:
6c:65:5b:a5:2a:68:fd:5b:e9:41:8b:5b:19:18:29:
46:44:cc:43:0c:ea:87:fc:78:35:62:35:c8:5d:4a:
14:76:d3:5d:c5:6c:dc:09:e3:22:e0:1c:91:45:21:
eb:ad:7f:31:49:d7:16:fb:23:00:a5:db:30:cd:25:
76:85:63:a1:9f:42:5e:be:e8:5b:16:b4:29:c4:1a:
60:12:6c:ce:20:bb:54:47:6a:1b:5f:ff:d7:c9:45:
b7:14:db:21:db:04:7f:af:16:5f:69:5b:0c:69:83:
2f:43:a1:1e:15:85:f5:e9:28:20:20:4b:39:58:36:
77:29:1e:b8:6c:79:44:61:75:af:66:12:47:fc:10:
0d:60:a2:f1:47:65:17:46:c0:09:8f:eb:b1:ab:a6:
90:85:fb:74:39:07:62:5a:c5:e7:25:74:f3:81:9f:
fe:b2:c9:a9:94:02:d8:e3:83:87:da:4a:75:32:8d:
06:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:B9:30:45:0E:D4:8A:D8:46:05:34:8A:F2:C1:84:BD:FA:2B:79:A5
X509v3 Authority Key Identifier:
keyid:9D:9A:0C:84:B3:07:20:F4:D4:CE:4B:DB:A0:1D:D0:54:4D:02:8E:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nZoMhLMHIPTUzkvboB3QVE0Cjs0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/1e8d4d-53bf-4acb-bc0c-52cad6675fc6/1/nZoMhLMHIPTUzkvboB3QVE0Cjs0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:21:11:87:24:c7:1f:bc:ea:a7:ad:38:9e:42:b9:26:71:70:
e1:73:26:a0:30:cd:3d:85:39:2d:64:7f:2e:e3:5e:93:e5:e1:
c3:68:6d:eb:ef:5f:30:66:a3:4d:e9:ae:da:18:cc:28:b9:13:
90:3b:21:c3:2a:4d:e9:eb:be:f4:f2:97:16:f2:6c:c8:98:e5:
83:53:2e:04:bf:f4:8f:40:74:03:ba:60:30:88:3f:c7:d0:51:
76:b5:58:30:69:a2:19:85:5b:95:8a:a8:b5:cc:3a:2b:ce:c5:
54:6b:47:95:92:90:f5:43:fe:a6:65:97:42:f3:c8:cc:f3:c1:
ca:41:d4:b4:4f:6a:ff:1c:dc:31:5e:41:0c:7a:12:d2:1f:c3:
61:90:79:07:16:b5:3f:62:bf:95:39:85:2f:34:c4:8f:53:7f:
42:a4:65:93:59:ca:41:c0:f4:8b:fb:d5:5c:53:fe:a8:ac:53:
2e:a1:49:0e:ed:10:eb:7d:c4:dd:b6:2d:4c:b1:f5:7b:9f:7e:
dd:ff:64:c2:3c:6d:77:e4:9a:5a:06:7f:c5:9e:62:87:f8:e3:
81:be:bb:a4:14:94:75:9d:13:01:b7:d0:fe:e6:05:f4:6d:ef:
8d:cc:10:4e:b8:b2:41:af:93:c0:f8:ee:7d:0b:e5:37:76:b0:
96:c9:a1:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:43:48 2026 by rpki-client