Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
File: nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft (raw, json)
Hash identifier: QJ1nzh3OFVMzGfbB1UI8+CeJ16NUA1zIMSdzoWhPs54=
Subject key identifier: 55:25:F0:58:BB:D2:32:65:F6:49:F9:23:B8:19:FA:EA:81:8F:6A:A7
Authority key identifier: 9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
Certificate issuer: /CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Certificate serial: 019D9A3E8FBC985A67485CA2B5E65754198B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
Manifest number: 18BF
Signing time: Fri 17 Apr 2026 07:01:24 +0000
Manifest this update: Fri 17 Apr 2026 07:01:24 +0000
Manifest next update: Sat 18 Apr 2026 07:01:24 +0000
Files and hashes: 1: GF0MLu9rUCMKqqUs-tw36g9XAm8.roa (hash: CGs8wTMFQfIv83nixyW2lwUi4DwWo83SvcVxQaC6KDo=)
2: nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl (hash: 4/gcflEsDHfL086L5pexc0RlzHxLZhwigY0Vlmu/FZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:8f:bc:98:5a:67:48:5c:a2:b5:e6:57:54:19:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dfe30a014784625db2c9dc90ae3ce15e54a88ec
Validity
Not Before: Apr 17 07:01:24 2026 GMT
Not After : Apr 18 07:01:24 2026 GMT
Subject: CN=5525f058bbd23265f649f923b819faea818f6aa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:26:43:9a:0f:81:c0:00:84:73:35:5d:93:b6:
b0:fc:86:f4:38:fa:a2:b3:db:a7:b2:9e:b5:c9:9a:
6c:b6:be:4b:33:e9:5f:d3:64:99:1d:4e:75:91:94:
d2:42:97:77:47:a0:60:f6:44:50:af:2e:01:9e:ca:
ae:a6:fd:14:47:f1:3a:3e:42:50:da:f9:c3:f1:a7:
ce:18:63:e2:b2:ef:9c:8c:e7:55:d9:86:bf:de:2e:
db:82:94:95:18:e7:56:65:d6:8a:42:3b:53:c7:9a:
81:02:ad:0e:55:d0:93:73:37:5e:22:30:70:8a:52:
4d:e3:e4:d1:77:4d:28:3b:d6:ac:d1:7b:82:d9:98:
72:c7:b3:7e:a6:98:b9:73:56:49:84:bb:9c:2e:e8:
90:3f:18:e1:21:d9:89:20:e7:b0:ec:e6:0a:01:13:
a2:6d:cf:57:20:07:16:d6:d2:08:1d:0e:59:43:2e:
98:9f:18:15:58:98:a5:cb:81:86:99:a1:8d:b1:b5:
55:44:4e:be:25:a2:b1:91:1d:f8:61:01:47:75:04:
c4:5e:c6:72:26:dd:5b:1c:38:d1:cf:f1:99:1b:96:
9f:22:0a:89:17:99:ef:a2:9a:56:82:6a:72:f3:ad:
78:86:04:1f:52:4e:25:99:68:cb:2c:25:40:5a:51:
c6:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:25:F0:58:BB:D2:32:65:F6:49:F9:23:B8:19:FA:EA:81:8F:6A:A7
X509v3 Authority Key Identifier:
keyid:9D:FE:30:A0:14:78:46:25:DB:2C:9D:C9:0A:E3:CE:15:E5:4A:88:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nf4woBR4RiXbLJ3JCuPOFeVKiOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/3d1495-0ef8-49b1-99e2-604e23747769/1/nf4woBR4RiXbLJ3JCuPOFeVKiOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:7b:ad:bb:45:fb:c8:fb:d6:c2:9f:19:34:35:72:8b:da:6a:
18:da:74:e8:e4:42:82:16:0a:67:ec:76:29:6a:ad:d6:45:57:
b2:4e:4f:96:f1:cd:f5:51:fe:88:c8:f9:0e:cc:fb:e0:cd:3a:
1a:d6:40:fc:47:91:1d:3d:40:0a:bb:7b:25:bf:a3:12:55:91:
de:9b:78:4e:17:68:c1:27:e1:0b:4a:e1:67:6f:96:95:ae:6e:
6c:57:e6:0b:44:61:f7:4a:2f:5f:7e:48:47:fc:ed:50:f5:27:
c3:43:a1:67:2a:d3:e4:cf:a5:c3:6e:64:2e:50:65:1b:0a:13:
19:ac:5d:70:51:ae:07:5d:0f:8a:68:b5:5a:ed:59:ef:40:a6:
f0:a1:48:7d:11:c1:64:79:08:b8:33:60:80:ed:93:57:1b:43:
f3:ce:ec:14:8c:be:22:2c:83:1d:1c:5a:77:d6:37:37:5a:3c:
de:ab:62:80:9c:98:20:32:a1:d5:a3:ec:b6:3d:21:15:b8:34:
28:10:45:ab:8d:aa:bb:4f:67:56:2f:46:19:c1:3e:2d:a3:ca:
67:86:a4:c6:3d:86:a2:4e:1f:a1:7f:c9:3c:b3:db:48:54:a0:
a9:9f:43:8b:ec:d8:02:16:d8:1a:bc:54:cb:31:24:94:dc:a8:
c0:77:03:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:38:20 2026 by rpki-client