Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
File: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft (raw, json)
Hash identifier: qTuBBKaufIYKpk20nLmsNq6PQh9zz6wZt2TXkPY1bdI=
Subject key identifier: 1F:39:8B:9D:FE:91:17:25:E2:DD:5D:F7:52:1E:56:BC:A6:2A:4E:13
Authority key identifier: 9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
Certificate issuer: /CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Certificate serial: 019D9886B97CB310AA1F868E5B8B77E399AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
Manifest number: 18BE
Signing time: Thu 16 Apr 2026 23:00:59 +0000
Manifest this update: Thu 16 Apr 2026 23:00:59 +0000
Manifest next update: Fri 17 Apr 2026 23:00:59 +0000
Files and hashes: 1: nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl (hash: g5+1d5FKvK64P1lU3HDLhOlsn5305sgARYa2AwTfS5s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:b9:7c:b3:10:aa:1f:86:8e:5b:8b:77:e3:99:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cc32711ed68fba0584992943f9add1b1e0e873a
Validity
Not Before: Apr 16 23:00:59 2026 GMT
Not After : Apr 17 23:00:59 2026 GMT
Subject: CN=1f398b9dfe911725e2dd5df7521e56bca62a4e13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ec:a4:a7:83:a9:ef:b3:0a:7c:6f:52:5b:d0:
da:b1:08:f6:df:ce:a2:48:20:02:47:59:c3:e1:18:
f9:be:60:d2:50:60:38:25:fc:db:68:92:8a:e2:c2:
cb:c1:3a:b0:3b:8a:b1:26:7f:7b:c2:cd:1f:0d:8a:
b3:f5:4d:34:b3:31:0d:7e:e0:a6:9e:54:27:3f:a3:
7b:c6:e0:51:38:65:08:20:32:c4:96:46:be:ae:e2:
b7:fd:f3:ee:ad:df:bf:a5:99:ac:37:a9:67:7d:0d:
d9:ed:c8:74:84:20:be:96:75:0e:e6:57:41:ae:38:
0c:79:47:0f:c8:3a:d5:18:06:1f:b3:d3:5b:f7:8a:
30:c2:76:17:48:82:cf:c6:f1:ab:23:d9:7d:72:ca:
b4:83:00:f8:92:2e:61:e6:b3:b1:0f:54:fa:01:38:
e5:a2:08:1c:17:19:e1:9e:0c:a5:72:af:59:fa:13:
d1:65:0d:0c:48:cf:5b:39:be:16:7f:32:7c:33:97:
e9:24:10:c4:b2:ec:98:a8:06:4f:ef:9b:8d:c9:a2:
ae:13:02:50:19:1c:e0:69:9d:0f:fc:b0:97:bd:6b:
b9:51:09:3e:56:89:0b:3e:df:e6:22:ac:2e:d6:89:
66:08:8e:e6:67:14:b9:92:c5:5d:b4:bd:1d:3e:d2:
19:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:39:8B:9D:FE:91:17:25:E2:DD:5D:F7:52:1E:56:BC:A6:2A:4E:13
X509v3 Authority Key Identifier:
keyid:9C:C3:27:11:ED:68:FB:A0:58:49:92:94:3F:9A:DD:1B:1E:0E:87:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/aefa82-6ec4-470b-b9cb-de225f4b0a04/1/nMMnEe1o-6BYSZKUP5rdGx4Ohzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:1b:32:0a:5e:a9:24:1d:97:05:05:f8:78:fd:9b:ba:5f:c0:
9e:42:95:3a:70:73:95:bb:4a:2e:2e:89:5a:b2:68:eb:cc:3c:
53:9a:f9:19:ac:64:ec:d1:9c:dc:13:c7:ca:49:c0:5d:e9:e1:
0c:cb:e4:1b:43:82:d0:ec:8e:3a:7c:70:3d:00:dd:8c:e5:a5:
23:8e:3d:fd:45:ff:64:ee:01:ee:1c:35:89:83:a9:e5:1b:e6:
cc:d0:fa:de:3e:8d:5e:28:ab:15:5b:23:0c:79:a4:5a:4a:10:
eb:da:d6:e7:7f:c2:0f:d7:71:15:41:32:b0:50:d2:b3:9b:10:
c2:11:3d:1c:06:fc:6a:d5:77:26:b5:0e:24:24:c8:67:4d:4f:
01:9e:ea:72:f3:8f:49:b4:1c:e1:c7:a7:cb:44:60:fc:18:69:
7e:df:ac:45:62:be:d0:6d:c4:41:e3:13:99:69:2f:04:db:39:
ea:29:c1:0a:5c:9a:c8:73:2b:1b:02:06:7c:52:fc:df:5a:a6:
20:ed:d9:c8:0a:9b:3c:3e:c2:89:00:aa:63:6c:26:37:ce:2f:
17:dc:27:22:83:19:77:5a:7c:17:7b:1f:6a:89:6b:67:b1:9c:
14:ae:ae:32:ee:c0:87:af:5a:d2:9a:8d:a2:f7:d0:61:15:74:
67:c1:48:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:53:09 2026 by rpki-client