Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
File: nLt3urQ4qT002dXAqOC57zKuXaA.mft (raw, json)
Hash identifier: dZZid8M5ktSj7DuVzTZvKIi8lqxR0KL+60IQKDS/0Co=
Subject key identifier: 10:6A:EC:25:D9:C3:48:4A:75:30:5B:C7:0F:ED:11:7A:20:74:91:8D
Authority key identifier: 9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
Certificate issuer: /CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Certificate serial: 019D9B8779598A38379BF4EB0B7D3A531780
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
Manifest number: 0A49
Signing time: Fri 17 Apr 2026 13:00:40 +0000
Manifest this update: Fri 17 Apr 2026 13:00:40 +0000
Manifest next update: Sat 18 Apr 2026 13:00:40 +0000
Files and hashes: 1: nLt3urQ4qT002dXAqOC57zKuXaA.crl (hash: sWBXZoj9jqnxC7NcozUvws3Fr+mPVU2Pk4dvhwWk+Ug=)
2: q45NW9ILWXRj7KEDEoB0elTRYN0.roa (hash: nnMWIhcjMTz5ErkFaNjKVileFt+Q5rGZenkw7duVHz8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:79:59:8a:38:37:9b:f4:eb:0b:7d:3a:53:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cbb77bab438a93d34d9d5c0a8e0b9ef32ae5da0
Validity
Not Before: Apr 17 13:00:40 2026 GMT
Not After : Apr 18 13:00:40 2026 GMT
Subject: CN=106aec25d9c3484a75305bc70fed117a2074918d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:90:c2:d9:7c:5b:85:47:36:15:a2:03:fb:
1b:55:d4:3a:89:98:a2:82:32:01:37:a2:05:2d:53:
7d:d2:0a:f6:ea:00:13:08:6b:39:cc:a3:ff:8d:0d:
36:f9:1b:e2:1a:54:67:9c:64:e3:9e:37:16:d7:be:
bd:cc:25:f0:58:76:6d:06:4b:7c:a6:78:e6:b1:01:
02:78:81:f7:05:ac:bb:70:a8:81:83:a2:ed:62:ac:
48:1a:9b:87:58:59:3e:c5:75:29:01:5c:4d:46:a0:
44:35:bd:16:e1:09:61:b7:41:7f:ae:64:82:dc:2d:
32:21:49:83:5a:6c:a4:c3:87:e1:9d:da:2f:d7:95:
46:45:9d:90:c5:cc:6e:f4:95:0f:bc:59:8a:3e:03:
bc:41:95:e5:2a:30:d3:dc:6f:9a:f0:8e:10:fb:aa:
8c:be:3d:c6:16:4a:7e:3f:b6:7b:60:bd:3f:12:81:
02:cf:32:3b:0d:91:e3:54:7f:83:37:5d:a6:e2:9f:
4e:e8:06:71:4e:0f:01:90:ae:dc:ea:a6:96:c1:10:
b6:2b:ae:84:72:00:d9:ca:82:d4:a9:ca:d9:07:78:
1f:56:13:9e:0d:ae:f0:9a:f4:a1:1b:bf:cd:09:7c:
1b:0f:04:60:ef:2f:8a:8c:c8:17:a4:c3:82:ec:16:
03:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:6A:EC:25:D9:C3:48:4A:75:30:5B:C7:0F:ED:11:7A:20:74:91:8D
X509v3 Authority Key Identifier:
keyid:9C:BB:77:BA:B4:38:A9:3D:34:D9:D5:C0:A8:E0:B9:EF:32:AE:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nLt3urQ4qT002dXAqOC57zKuXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/229182-4bdc-4234-a989-90d58c603256/1/nLt3urQ4qT002dXAqOC57zKuXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:49:89:0f:be:40:01:97:76:dd:99:f6:17:57:25:d7:1e:a7:
44:8e:03:8c:92:fa:8c:8d:82:5a:1c:8c:49:18:8f:f9:23:69:
df:72:0b:26:21:81:10:76:22:03:d4:8b:54:c5:9f:60:ae:82:
ca:c3:14:50:29:1a:f2:ee:de:38:31:ac:ac:7c:57:d3:74:4f:
19:f7:b2:d5:78:83:a7:57:fb:20:14:69:22:82:2e:b1:a6:4e:
9a:af:96:6a:fa:f3:31:62:95:27:ff:bf:2d:3f:2c:49:d5:2e:
54:b1:25:8f:02:5c:cf:ab:9a:4c:72:75:24:fb:24:3b:e2:6e:
f5:e8:09:8a:a2:d9:e6:21:99:13:52:02:7f:0e:c8:b3:b4:81:
79:87:42:17:34:8b:01:06:ad:0c:4f:f7:66:0e:c8:a7:1a:8b:
4a:78:83:df:11:4b:dd:5a:1f:fb:83:a4:27:01:3a:3a:3b:ce:
16:d4:9c:c8:69:b3:45:26:2a:90:b4:cc:d4:3f:54:30:99:69:
1c:d5:c5:14:8e:ea:0b:e4:a0:45:ff:14:c1:49:86:b3:43:89:
a5:90:a7:86:a6:77:24:48:c5:50:d0:97:2d:46:e5:3c:bf:b8:
34:bc:90:d5:3d:5c:d1:fa:ea:cf:33:a3:01:68:91:8d:47:34:
db:a1:ec:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:07 2026 by rpki-client