Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
File: NAd7QemIc-fwb7HfP105xyGxND8.mft (raw, json)
Hash identifier: rPAa22T37RaAVcVv5Lu0kseCIyzl8kAYBSHcDW1sIpU=
Subject key identifier: 74:D6:39:C6:F5:A8:28:B2:BE:1C:7F:E7:54:DA:A4:0F:15:C4:FD:99
Authority key identifier: 34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
Certificate issuer: /CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Certificate serial: 019D9AE36E3C75F53A6D4CA072276C59627D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
Manifest number: 18CB
Signing time: Fri 17 Apr 2026 10:01:29 +0000
Manifest this update: Fri 17 Apr 2026 10:01:29 +0000
Manifest next update: Sat 18 Apr 2026 10:01:29 +0000
Files and hashes: 1: 1-V8x_3FzosbTSoBrUqHkMLV-44Q.roa (hash: RPgG1SJlqfEsV732+LedUmH+jks8p7lo8I/jwtQGL9I=)
2: NAd7QemIc-fwb7HfP105xyGxND8.crl (hash: veLpoxUVTTngYXWvN8XJ+GBSJnNKbQkcVEVB1iD1WzY=)
3: crwkgLLFi1G5PStFW-NTuVWRboI.roa (hash: DbnKu1FnYU/F077cUpyCX4xEr0gw1CrOBRGG+CxkZak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:6e:3c:75:f5:3a:6d:4c:a0:72:27:6c:59:62:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34077b41e98873e7f06fb1df3f5d39c721b1343f
Validity
Not Before: Apr 17 10:01:29 2026 GMT
Not After : Apr 18 10:01:29 2026 GMT
Subject: CN=74d639c6f5a828b2be1c7fe754daa40f15c4fd99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:d6:e2:1f:23:db:ba:5d:d5:2c:6c:f9:92:e8:
f2:9f:cc:94:5e:40:7c:77:e3:3e:c8:11:a9:7e:1f:
16:a1:ff:51:7a:86:2e:6a:0e:45:ca:1c:e4:54:e8:
4f:6b:f8:9a:09:fc:3b:b4:6d:73:12:5f:5d:aa:b2:
9d:ae:1a:83:7b:5a:13:de:20:ba:e1:19:f6:5f:ed:
f9:97:cc:2e:99:7f:9a:96:58:6c:c4:b9:a0:38:a8:
46:0f:5c:50:4a:c5:f6:57:df:2b:4f:0f:39:28:ff:
b7:fd:63:80:44:3b:d6:20:59:96:13:dc:13:22:36:
db:af:e9:8b:8b:80:f4:81:50:38:e3:e8:f0:d6:04:
17:65:9b:6d:30:74:17:be:aa:8e:a8:ce:9f:74:ce:
42:b2:7f:cf:0a:2b:04:98:7f:b2:b3:dc:3a:48:f2:
24:29:cb:cd:dd:f3:35:e1:5d:ab:1c:d8:b9:f6:21:
ab:f4:17:d4:c8:ff:a4:ce:b7:9f:da:26:85:11:cc:
30:8f:58:cf:0a:02:e4:18:22:ba:97:da:1a:79:96:
ad:c7:8f:8b:4c:e8:f1:d2:e9:3e:07:8d:b5:7e:49:
2a:8a:42:62:75:21:3d:45:f7:b7:f2:0c:3f:29:6b:
4d:10:13:7e:ec:28:89:51:bd:b4:d4:92:87:6d:65:
d5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:D6:39:C6:F5:A8:28:B2:BE:1C:7F:E7:54:DA:A4:0F:15:C4:FD:99
X509v3 Authority Key Identifier:
keyid:34:07:7B:41:E9:88:73:E7:F0:6F:B1:DF:3F:5D:39:C7:21:B1:34:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NAd7QemIc-fwb7HfP105xyGxND8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/448800-829e-4b7a-92c4-cb7cbca7c1e0/1/NAd7QemIc-fwb7HfP105xyGxND8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:fd:a4:9a:d1:91:c6:50:a7:16:03:ba:f5:7d:ea:6a:49:4d:
b5:64:a0:6a:0b:38:38:72:86:6d:62:85:b3:b4:ff:9f:68:09:
02:fa:8e:99:65:24:1a:1a:be:cd:f7:fc:d7:de:ec:c7:a8:95:
54:5e:1c:d5:60:21:46:32:49:6b:62:be:97:2f:6a:54:26:18:
7c:b6:f6:e1:87:5f:ba:88:4a:84:68:49:64:9e:ee:2d:d2:66:
e7:fe:5a:14:96:1c:4c:4b:53:63:e6:d3:18:2d:86:8d:39:24:
90:79:22:ac:50:f9:7a:7b:39:0a:46:ec:b1:2b:96:f3:7d:21:
a7:36:a9:8e:ec:1a:a8:48:27:24:f7:c1:3f:53:66:ea:a1:19:
13:72:25:e9:aa:34:c6:9d:eb:e9:7d:30:1d:fe:48:a1:e3:a5:
ab:d0:8b:d6:2c:b5:a9:09:63:06:c5:4d:72:4f:ee:5d:a8:50:
43:ea:56:05:f7:c8:53:eb:e8:8a:4e:51:15:68:c1:c4:4a:f3:
ae:2a:e2:59:3e:8c:5b:0d:43:f2:99:d8:b9:7d:21:79:af:a0:
9b:0e:2d:fe:ee:07:b8:8a:3e:08:fa:5d:dd:2f:db:a1:8d:9f:
d4:e2:c0:e6:02:8d:ac:3f:5b:63:07:3d:b6:0c:b5:e0:10:3c:
ea:71:60:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2a4248dfU6bUygcidsWWJ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0MDc3YjQxZTk4ODczZTdmMDZmYjFkZjNmNWQzOWM3MjFi
MTM0M2YwHhcNMjYwNDE3MTAwMTI5WhcNMjYwNDE4MTAwMTI5WjAzMTEwLwYDVQQD
Eyg3NGQ2MzljNmY1YTgyOGIyYmUxYzdmZTc1NGRhYTQwZjE1YzRmZDk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdbiHyPbul3VLGz5kujyn8yUXkB8
d+M+yBGpfh8Wof9ReoYuag5FyhzkVOhPa/iaCfw7tG1zEl9dqrKdrhqDe1oT3iC6
4Rn2X+35l8wumX+allhsxLmgOKhGD1xQSsX2V98rTw85KP+3/WOARDvWIFmWE9wT
Ijbbr+mLi4D0gVA44+jw1gQXZZttMHQXvqqOqM6fdM5Csn/PCisEmH+ys9w6SPIk
KcvN3fM14V2rHNi59iGr9BfUyP+kzref2iaFEcwwj1jPCgLkGCK6l9oaeZatx4+L
TOjx0uk+B421fkkqikJidSE9Rfe38gw/KWtNEBN+7CiJUb201JKHbWXVAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTWOcb1qCiyvhx/51TapA8VxP2ZMB8GA1UdIwQY
MBaAFDQHe0HpiHPn8G+x3z9dOcchsTQ/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQt
Y2I3Y2JjYTdjMWUwLzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC80NDg4MDAtODI5ZS00YjdhLTkyYzQtY2I3Y2JjYTdjMWUw
LzEvTkFkN1FlbUljLWZ3YjdIZlAxMDV4eUd4TkQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/2kmtGR
xlCnFgO69X3qaklNtWSgags4OHKGbWKFs7T/n2gJAvqOmWUkGhq+zff8197sx6iV
VF4c1WAhRjJJa2K+ly9qVCYYfLb24YdfuohKhGhJZJ7uLdJm5/5aFJYcTEtTY+bT
GC2GjTkkkHkirFD5ens5CkbssSuW830hpzapjuwaqEgnJPfBP1Nm6qEZE3Il6ao0
xp3r6X0wHf5IoeOlq9CL1iy1qQljBsVNck/uXahQQ+pWBffIU+voik5RFWjBxErz
ririWT6MWw1D8pnYuX0hea+gmw4t/u4HuIo+CPpd3S/boY2f1OLA5gKNrD9bYwc9
tgy14BA86nFg7g==
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:47:04 2026 by rpki-client