Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
File: NXAXpX-ccN-vZpOjJLumhne4ePM.mft (raw, json)
Hash identifier: FItEscF2gvBGsENO4PAuDQIqg3rRfyBgRmcVrIVyUS0=
Subject key identifier: AD:61:3B:EB:56:BF:C0:82:21:08:43:EE:62:1D:F4:2D:AB:5C:A1:7A
Authority key identifier: 35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
Certificate issuer: /CN=357017a57f9c70dfaf6693a324bba68677b878f3
Certificate serial: 019DA3E6D87BEF1E6489805F710D0B00A5B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 04:01:47 +0000
Manifest this update: Sun 19 Apr 2026 04:01:47 +0000
Manifest next update: Mon 20 Apr 2026 04:01:47 +0000
Files and hashes: 1: 1-sDBo1h39Efa-H3ly5K8_3PMd8E.roa (hash: nnHWf61PhBu5tpbkXsvcIaf2sAJomeNe4RjS/qDyEu8=)
2: NXAXpX-ccN-vZpOjJLumhne4ePM.crl (hash: kbOAuTJpKEx+nEejrLsp8NVwnhGdZrx6xw66YMJqMh8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:d8:7b:ef:1e:64:89:80:5f:71:0d:0b:00:a5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=357017a57f9c70dfaf6693a324bba68677b878f3
Validity
Not Before: Apr 19 04:01:47 2026 GMT
Not After : Apr 20 04:01:47 2026 GMT
Subject: CN=ad613beb56bfc082210843ee621df42dab5ca17a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7c:1a:64:98:a5:81:a1:c8:5a:e3:d6:8c:5f:
74:a3:45:9d:3e:49:84:4a:fd:16:02:75:11:5b:7b:
cd:35:de:af:7f:b5:d4:8d:5c:df:62:f7:b1:0f:35:
b8:ab:90:c0:0d:73:3c:6b:35:fc:be:1f:94:36:22:
60:49:68:17:ac:47:49:5b:f8:4d:54:f0:91:88:c8:
f6:d2:43:9c:77:7d:cb:be:e0:4e:83:f1:c1:ba:89:
c4:8a:4c:b8:56:d1:29:81:a9:54:33:ce:b8:fa:3c:
34:c4:51:62:ef:47:1b:5c:27:e5:1a:82:8e:dc:8e:
2c:9d:66:c8:ab:5a:46:7b:a9:b7:f0:1e:56:2e:1a:
4f:e6:52:38:c9:70:36:0a:a5:c3:fb:70:62:1e:cb:
cb:2a:cb:06:47:44:db:0f:96:11:26:79:de:e4:38:
d1:98:76:98:17:ab:df:b5:47:46:eb:1e:70:f5:17:
79:97:d9:1a:ad:79:65:d4:43:fb:54:e9:11:49:b1:
8a:09:5c:4a:b9:96:a1:b3:09:07:74:b0:59:b7:d0:
54:6c:9d:17:ba:ab:f7:c5:fd:6d:ee:32:84:6b:37:
b2:11:9d:b6:f2:91:c6:4a:83:11:18:eb:49:cb:55:
39:8b:19:1e:4f:7c:a0:56:4a:f4:f9:b1:e8:81:cb:
09:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:61:3B:EB:56:BF:C0:82:21:08:43:EE:62:1D:F4:2D:AB:5C:A1:7A
X509v3 Authority Key Identifier:
keyid:35:70:17:A5:7F:9C:70:DF:AF:66:93:A3:24:BB:A6:86:77:B8:78:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NXAXpX-ccN-vZpOjJLumhne4ePM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/12820e-b97e-471c-bbce-92ed1af16b88/1/NXAXpX-ccN-vZpOjJLumhne4ePM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:3d:ad:b4:26:66:8a:70:02:27:82:5a:ab:32:aa:7d:95:1b:
1f:52:c5:0a:2e:44:bf:59:db:26:3d:83:af:f9:74:74:65:0a:
95:07:c9:64:04:4e:81:ce:e3:02:c4:02:71:eb:18:7b:46:90:
66:82:46:b7:72:85:19:3f:d2:3b:e6:5e:02:a0:c8:d0:da:8f:
07:a2:a2:64:e1:75:1d:40:b0:7e:36:e1:66:4d:0c:74:ba:b1:
74:67:7e:ea:f4:78:a2:33:e8:d2:eb:eb:a6:d1:e8:ca:bd:e2:
4f:ef:05:88:3f:f9:1b:73:00:54:b8:fc:6f:de:c7:c4:c2:39:
c8:1b:92:3f:6f:6e:35:88:f6:44:c9:29:94:3a:a3:87:44:e7:
0a:7d:7b:43:0f:85:0a:26:d6:d5:3b:dc:58:33:00:eb:b4:11:
2d:59:f6:36:ce:13:3f:ac:13:b0:7d:c3:61:90:7d:9b:c0:ca:
25:f4:a3:55:2b:20:89:71:1d:66:ce:94:d8:75:51:81:cd:c3:
0f:e1:60:9e:1d:ff:33:8b:52:93:06:28:fe:c5:36:78:8e:58:
0e:b6:ff:c4:26:b9:1c:04:3f:bf:09:4e:3e:ef:4e:4d:85:64:
b0:df:87:f8:a2:d9:1d:80:49:8b:ff:50:81:be:9e:e0:36:4a:
fd:e5:43:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:20:01 2026 by rpki-client