Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
File: NFrmRuo0rSaIrKL90abzNANWSV4.mft (raw, json)
Hash identifier: xaAWy0QJCHsVS8xPCpfSwhQTV4PyluyktYVmWS/JHWY=
Subject key identifier: 38:98:89:8B:57:83:A0:23:54:80:67:F9:C4:F9:3C:E6:21:96:2D:96
Authority key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Certificate issuer: /CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Certificate serial: 019D9B19E530D44C9869F48A6BA11CDFE27B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
Manifest number: 18C8
Signing time: Fri 17 Apr 2026 11:00:58 +0000
Manifest this update: Fri 17 Apr 2026 11:00:58 +0000
Manifest next update: Sat 18 Apr 2026 11:00:58 +0000
Files and hashes: 1: BJqDDKUUwP-6T-FY6LGOmkQgBFc.roa (hash: Bg8fNp2XsW4hkEUUtvGIjHCnW3BOOuyGWwHhwTGlcFU=)
2: NFrmRuo0rSaIrKL90abzNANWSV4.crl (hash: fCFrm52Ius2JHJSafMIyawdMFRGSdenZuMc9zoV6ZmE=)
3: SUsmu5Ag-4xHGcfy7I-KypJxpsc.roa (hash: n8HW5vZsZRNckM8pkS3Nq4aPiFnPsCjT5rOGpbkWTrc=)
4: VXXJGd4FEOBiTRuvKylQZSh5MPc.roa (hash: 9Lce4m09pJL6B9nHSj0pDfxmZ/8/J6ec+N4whDnZ0b8=)
5: ZuK1S3Ghc42zA0OJKwC9zhMPjd8.roa (hash: qj8u0n4HOzKDi6033J2/YLNKzCyWyCiJX2ywZI9NyUk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:e5:30:d4:4c:98:69:f4:8a:6b:a1:1c:df:e2:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Validity
Not Before: Apr 17 11:00:58 2026 GMT
Not After : Apr 18 11:00:58 2026 GMT
Subject: CN=3898898b5783a023548067f9c4f93ce621962d96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c2:b6:08:96:24:65:89:0d:2e:9f:2e:e7:c0:
67:2b:d6:f0:a6:d9:1f:45:ed:56:6b:ca:a7:8e:37:
0a:3f:f5:1a:d3:78:16:b6:5b:c7:90:96:09:df:63:
77:43:b2:8d:c9:a7:28:3b:fb:a8:08:03:f1:27:97:
55:1c:08:ef:42:85:31:e6:f3:c9:d7:1f:36:51:8d:
f1:51:6b:20:81:e0:9f:cb:f1:ae:34:26:cd:51:2f:
05:31:f1:35:57:c5:b3:54:f1:f3:15:4c:07:fe:18:
b7:cf:76:2d:3f:0c:e2:64:d4:cc:7d:02:4f:9f:d0:
12:9c:3a:bf:d2:e6:48:9b:cb:b2:92:87:ba:35:95:
d4:0c:ba:e3:52:f9:14:4e:1b:2b:a8:f7:ca:ec:38:
1e:11:ed:df:09:d1:a5:27:9c:21:d9:12:aa:20:74:
af:3e:a8:d4:f0:1e:4a:73:16:36:4c:72:44:04:2d:
a0:0d:07:6c:8b:d3:46:a0:79:fd:5e:87:35:1c:34:
ed:49:08:ef:41:22:83:bd:58:54:9b:3c:86:43:f6:
a3:62:6a:b6:30:12:08:09:60:ed:c6:fc:20:fe:5d:
b6:2c:aa:ef:aa:c4:4d:2c:bc:b1:16:3a:f3:c7:e1:
eb:67:e1:a2:b6:74:33:5b:b0:10:c7:1a:ef:11:1e:
db:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:98:89:8B:57:83:A0:23:54:80:67:F9:C4:F9:3C:E6:21:96:2D:96
X509v3 Authority Key Identifier:
keyid:34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9b:1e:a7:59:0a:c0:c9:d6:ab:4d:60:68:62:33:11:38:f4:
ae:74:35:48:d7:0e:c3:bc:74:f0:08:e0:e6:d5:8e:08:b7:1a:
22:5e:ba:f1:c0:8d:dd:e4:ac:17:2e:fc:60:4c:b1:42:f0:70:
fa:fb:68:47:68:ec:c9:ab:aa:0e:27:b4:34:7f:28:d4:89:69:
13:f6:90:c2:0b:05:8c:15:e9:bd:95:ce:58:95:e4:d3:0c:09:
4e:c3:6b:51:51:7b:e5:b6:b4:1a:17:ce:e4:b3:5b:3a:0c:ba:
f2:17:28:78:60:b1:96:e1:4f:09:dd:8b:c0:1c:b2:72:7f:20:
6e:85:8f:5a:09:48:65:c1:77:56:e1:b5:ba:af:a7:56:97:93:
bb:f3:79:2c:53:03:05:db:b4:7b:1f:4e:5b:34:a0:bd:e9:ce:
2f:df:bc:9f:b6:8c:7e:d2:1c:3e:a4:d8:4e:a2:5d:95:86:0b:
99:9f:8b:cc:2a:9e:79:11:7b:18:3f:12:84:46:d0:4f:22:23:
cb:8e:8e:76:c4:6b:29:8d:d1:33:a2:22:bf:2d:55:be:67:87:
a1:b9:3c:41:e6:4a:77:56:6d:95:0d:fe:62:f3:0b:68:1b:46:
be:dc:33:0c:59:4a:f2:6d:b0:45:af:58:f2:af:50:18:f9:5d:
8d:c9:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:06:09 2026 by rpki-client