Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
File: nRFf6cnpz97xfpJBZVksAj77KxY.mft (raw, json)
Hash identifier: GPnsHSFTYadGoFZi8WXhfFCPofb8ShuY+vrgSowHgcg=
Subject key identifier: 3A:0E:9D:AA:F7:37:D7:23:E4:92:D3:DF:A0:30:42:BF:33:EF:C3:06
Authority key identifier: 9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
Certificate issuer: /CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Certificate serial: 019D9962B0E6731B50EAFED1B198CF04CD0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
Manifest number: 0CD7
Signing time: Fri 17 Apr 2026 03:01:14 +0000
Manifest this update: Fri 17 Apr 2026 03:01:14 +0000
Manifest next update: Sat 18 Apr 2026 03:01:14 +0000
Files and hashes: 1: 2XRNzdBMCTGrxZzPMC45UJSE_XY.roa (hash: MALdcoNe429xozLLjWrtiy10AbtWOLY2faCRujnB7oQ=)
2: nRFf6cnpz97xfpJBZVksAj77KxY.crl (hash: LD5sE86vx135HCZlJAnHV3imQDRg2MXdYIyWwEPj9ws=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:b0:e6:73:1b:50:ea:fe:d1:b1:98:cf:04:cd:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d115fe9c9e9cfdef17e924165592c023efb2b16
Validity
Not Before: Apr 17 03:01:14 2026 GMT
Not After : Apr 18 03:01:14 2026 GMT
Subject: CN=3a0e9daaf737d723e492d3dfa03042bf33efc306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bd:4c:d6:b3:9a:a3:90:f3:fd:83:4f:fc:c5:
c8:33:e9:cb:4e:a0:f6:8e:4d:0c:b3:4b:2a:4f:61:
d1:9d:39:5e:fb:4a:be:18:d3:ff:82:52:c7:c0:94:
90:8d:3e:4f:52:a4:63:c1:56:c8:ac:4f:38:bc:3a:
95:33:cb:8d:e1:16:e1:00:c4:eb:84:bb:e1:ed:68:
15:3e:2a:65:fc:53:b2:7f:86:53:2b:c1:e4:62:0e:
e7:32:77:2b:33:a0:3f:67:5c:20:b7:c7:3d:b8:0c:
80:2f:f3:24:73:a1:e2:96:0a:e0:86:89:31:e6:0b:
84:65:99:4a:82:5c:49:75:32:2d:be:d2:1e:83:16:
40:5e:1f:10:a6:47:01:c4:72:16:4e:0b:1d:a8:ba:
4f:0e:94:3b:b4:7b:ae:09:70:65:ca:9d:42:ed:ec:
45:c8:3e:05:e9:69:d2:cc:a3:fc:a1:98:44:f0:b7:
bd:3c:89:cd:2e:12:54:48:33:24:14:8a:48:56:cb:
f9:f1:d5:5d:69:8c:76:54:7b:3b:26:ae:c7:71:35:
1b:b0:e4:c0:8f:d9:86:b1:f3:82:88:42:c9:36:c9:
f9:7a:93:f7:86:24:f5:2e:00:5b:50:70:2f:30:1b:
5c:60:8c:6f:b4:fb:5d:59:e3:85:26:96:e7:64:8b:
fb:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:0E:9D:AA:F7:37:D7:23:E4:92:D3:DF:A0:30:42:BF:33:EF:C3:06
X509v3 Authority Key Identifier:
keyid:9D:11:5F:E9:C9:E9:CF:DE:F1:7E:92:41:65:59:2C:02:3E:FB:2B:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nRFf6cnpz97xfpJBZVksAj77KxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/b417f8-0732-48af-b00c-bb797ce7e108/1/nRFf6cnpz97xfpJBZVksAj77KxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:04:c4:e2:1a:00:a8:ec:3a:c6:63:8b:aa:ab:73:71:0d:b1:
e5:b6:4f:fd:40:1b:47:9e:f5:9d:da:5a:84:c9:9f:1c:9f:97:
e4:52:30:eb:13:61:8e:1d:12:d7:0a:09:80:ab:3e:4b:f3:53:
0f:9a:16:e9:1b:3e:9e:54:e8:93:a8:45:f8:7f:ad:31:33:6d:
04:70:53:e3:01:7c:80:1f:21:47:fa:17:17:60:4a:12:f4:23:
8a:e7:ee:78:a0:a4:1d:e2:58:06:7f:e5:c5:03:b1:a5:2f:10:
cb:2a:c4:7c:ad:f1:de:03:04:01:4b:74:64:0a:6d:7a:ed:87:
e7:21:36:85:ed:84:1d:26:49:72:25:b3:04:fb:05:90:d2:3d:
6b:be:b5:b6:6b:2a:1b:5f:29:3e:df:b4:00:c7:d8:83:60:8d:
10:50:38:a3:f9:97:99:30:e9:1f:ab:81:0e:75:1c:41:ad:a2:
a6:fe:db:20:8a:14:28:54:c0:fa:8f:1c:6f:66:e0:1b:c3:14:
f8:5f:3f:c7:b6:65:e0:84:34:16:23:9d:c8:1e:be:1b:99:3b:
25:f7:cb:f3:a5:d7:6c:18:78:65:37:03:5d:02:f6:50:d8:3d:
fe:39:ef:80:49:51:ed:2b:0e:47:ad:14:6e:92:d7:08:e5:89:
c7:83:bf:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:05:19 2026 by rpki-client