Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
File: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft (raw, json)
Hash identifier: QJbqKC0uTzvbEdNXFmD5mjneZs3LbR4jgNpkUwlnTy8=
Subject key identifier: 52:0E:9F:3C:31:44:F8:3C:B7:B4:09:95:B1:B7:C6:62:01:F9:01:6F
Authority key identifier: 9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
Certificate issuer: /CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Certificate serial: 019D9BBEA39448373936FB163DF454F71A21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
Manifest number: 03E8
Signing time: Fri 17 Apr 2026 14:00:55 +0000
Manifest this update: Fri 17 Apr 2026 14:00:55 +0000
Manifest next update: Sat 18 Apr 2026 14:00:55 +0000
Files and hashes: 1: aEsAz-RDqEznuIbxt7y2qnbw6Wg.roa (hash: MGY1l5IuLzWSoi1tizbmZg/Thwy4jCozOM2pGrkUxNc=)
2: nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl (hash: uWha+5CUocWn2nXHT4QIgE3a4m+8pfyohUh7l4h60NU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:a3:94:48:37:39:36:fb:16:3d:f4:54:f7:1a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5ecce8c87c4f0a75ba21e5c84f624121e08e32
Validity
Not Before: Apr 17 14:00:55 2026 GMT
Not After : Apr 18 14:00:55 2026 GMT
Subject: CN=520e9f3c3144f83cb7b40995b1b7c66201f9016f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:4a:41:2d:8a:11:8f:39:42:b5:69:2d:09:41:
aa:f2:4b:a9:a5:f4:a3:c4:8e:ac:54:14:96:3c:a0:
50:57:d0:a8:ca:12:ed:28:35:f7:df:be:30:8f:6a:
55:72:11:78:aa:5c:c5:27:16:34:0c:3c:72:1a:74:
c3:93:d2:41:11:93:5e:5f:57:a2:4b:bd:f7:e0:90:
1c:3b:30:99:c0:61:75:7f:73:82:c3:cf:22:13:ea:
ff:b3:73:18:7e:6d:15:58:64:c5:45:8d:98:b4:45:
e0:5c:90:c3:5f:d2:1a:f4:e0:13:dd:21:1f:2e:ac:
9b:11:98:4a:29:bf:f7:20:87:7a:23:ee:5f:3d:d8:
4c:3c:b0:e2:8b:aa:fe:dc:3c:db:bc:10:c6:f8:2f:
d5:27:d8:c2:fe:45:27:64:b3:c4:49:8a:16:60:eb:
0d:7c:86:06:35:2e:c7:4c:f3:f9:d8:d3:77:8d:6e:
48:ee:e6:30:9c:9a:ea:a7:81:d9:6e:78:62:7b:55:
bd:ec:51:47:5c:6d:3c:92:c6:95:b2:4d:64:69:18:
52:46:96:c0:c5:6a:46:c3:df:c1:c4:77:14:9a:75:
41:10:bb:82:34:3a:5b:53:e4:fe:ce:e8:95:74:b2:
2c:50:a3:24:69:5f:1b:da:33:11:f9:35:e7:8a:3b:
1a:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:0E:9F:3C:31:44:F8:3C:B7:B4:09:95:B1:B7:C6:62:01:F9:01:6F
X509v3 Authority Key Identifier:
keyid:9D:5E:CC:E8:C8:7C:4F:0A:75:BA:21:E5:C8:4F:62:41:21:E0:8E:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/bec756-1dfe-4374-8607-9d8f0ef5c503/1/nV7M6Mh8Twp1uiHlyE9iQSHgjjI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:53:97:71:ea:c1:a3:24:15:04:15:f0:c3:a0:77:fb:34:67:
df:c4:74:2c:ce:f0:27:f9:1e:2c:5a:ad:b6:c6:17:6b:f7:39:
46:22:fc:57:dd:ac:2b:76:41:09:04:9f:b1:ba:39:81:a1:93:
95:bc:89:8c:b6:aa:26:e7:b1:f7:a3:f4:d7:b7:70:92:65:61:
6b:d8:fd:16:8c:10:82:4b:eb:a1:82:8c:ad:d9:88:d5:c9:37:
55:57:79:92:51:a9:fc:a2:d3:5d:b9:4e:10:a3:2a:cc:d5:d6:
66:80:d3:3f:0c:8f:b1:f5:c5:0d:72:00:27:b2:80:cd:02:b4:
64:b1:ec:f3:b2:9b:dc:41:3e:96:db:ec:35:6b:1c:2f:7b:04:
f4:4e:ae:d1:5b:35:39:8d:9b:38:b5:f2:bc:fa:76:31:06:27:
d3:cf:7d:35:b9:1e:7b:4f:94:d0:08:57:dd:82:5e:20:42:98:
8e:04:6a:7c:bc:8a:cd:93:1a:7a:d8:80:02:b1:0f:e1:2c:11:
ff:19:bb:40:7b:f0:5a:94:38:22:4f:d8:62:76:83:bb:2c:53:
07:e9:d6:11:6b:50:de:0d:e4:e6:64:88:10:c9:4f:88:aa:0a:
06:58:91:35:ad:50:2f:64:4f:80:34:24:f9:fc:be:13:bf:99:
a3:75:3f:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:04:24 2026 by rpki-client