Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
File: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft (raw, json)
Hash identifier: kkuBFHGlYDm6CPB7zjX8ftlcX6dDCPzAiGaozY8tjyQ=
Subject key identifier: 93:72:B9:61:6C:97:F3:70:ED:EC:26:A9:F6:98:4C:16:C4:A8:6B:F2
Authority key identifier: 9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
Certificate issuer: /CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Certificate serial: 019D9BBEB207BBEC6901D9AB7BDAAE2FA299
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
Manifest number: 18C6
Signing time: Fri 17 Apr 2026 14:00:59 +0000
Manifest this update: Fri 17 Apr 2026 14:00:59 +0000
Manifest next update: Sat 18 Apr 2026 14:00:59 +0000
Files and hashes: 1: lS_7ElVJSzohGwkrzoM9Rl9Uaeo.roa (hash: 2GOJmUxu3DZ3m6sSBQN+fyPKa6u0tmi0xc6B6mGHemU=)
2: nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl (hash: 6syYy/sfLe4E3LK0cDdkOggFHDmlz5MTpgWnsQ3pFQQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:be:b2:07:bb:ec:69:01:d9:ab:7b:da:ae:2f:a2:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e505f2e67a1e604b3f963ce4c367d1958bd4b78
Validity
Not Before: Apr 17 14:00:59 2026 GMT
Not After : Apr 18 14:00:59 2026 GMT
Subject: CN=9372b9616c97f370edec26a9f6984c16c4a86bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:b6:ac:63:4f:b2:ed:b3:e3:11:ce:00:d5:91:
31:2a:12:ac:9b:e4:22:4a:6e:57:c4:a6:58:bf:27:
9f:7f:bb:fe:ba:53:40:52:c9:09:65:de:6a:96:d4:
c1:be:27:82:37:e0:3f:74:2b:3d:cf:35:23:97:98:
3d:8c:23:8c:57:c0:d4:91:ca:7a:f9:ce:3e:c3:5d:
10:ab:86:26:f0:d1:ee:94:e9:58:3d:d7:13:07:fe:
b9:4b:8c:87:d7:9c:e0:22:08:91:9d:5d:ec:0d:cc:
ee:9c:1c:c8:23:f2:35:ba:5e:bf:5f:ce:a7:38:a4:
5d:75:c6:c0:ec:b8:23:01:60:dd:b1:af:cf:ce:86:
84:37:55:9c:7c:49:52:d2:13:f8:16:a2:91:85:9b:
de:99:18:d4:e9:48:7e:30:83:24:00:2f:12:4b:01:
02:83:0c:c5:45:e6:99:47:ca:ac:a1:37:22:c6:03:
31:54:99:b1:c2:60:05:e0:15:16:89:18:9c:aa:b9:
00:e1:7b:df:f1:cc:a1:c3:12:37:ed:92:70:4b:fe:
a1:d4:ec:1c:af:bc:41:c4:0a:a3:4e:ba:ea:1c:91:
4d:2e:d0:eb:e5:a4:50:3e:80:cb:d0:39:4f:27:59:
35:c7:df:04:28:47:9a:66:94:37:c0:c3:35:ff:57:
1a:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:72:B9:61:6C:97:F3:70:ED:EC:26:A9:F6:98:4C:16:C4:A8:6B:F2
X509v3 Authority Key Identifier:
keyid:9E:50:5F:2E:67:A1:E6:04:B3:F9:63:CE:4C:36:7D:19:58:BD:4B:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/fb7864-5795-4208-abe0-08542454d16b/1/nlBfLmeh5gSz-WPOTDZ9GVi9S3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:14:26:04:83:f6:aa:70:1c:b2:15:dd:f1:84:1e:78:17:9f:
4c:bf:8a:14:76:ed:65:c5:ef:41:a5:e4:3f:75:9b:23:f4:3d:
7e:e2:99:77:f7:3a:2f:3c:42:0c:14:fe:01:f4:f5:2e:ef:c8:
5c:e2:5c:1b:6b:67:7f:db:dc:84:8b:e5:e7:eb:98:d5:05:22:
f6:2d:1d:93:e8:be:e0:f0:f4:d7:00:43:cd:79:96:1b:e9:8e:
eb:88:f1:b2:5b:d7:cb:73:c5:52:f9:cd:11:38:82:72:01:c8:
cc:37:fa:3a:eb:a3:08:55:52:bb:c9:51:e1:f7:10:bc:50:a6:
92:98:e0:d3:b4:ac:67:a0:31:91:95:10:24:e8:d8:03:50:f3:
32:e6:00:9b:61:0f:d0:97:71:cd:7e:aa:0b:6e:13:b5:6c:ab:
b1:09:46:9c:b6:be:f4:e6:cc:23:bf:6b:4c:33:56:2e:21:a5:
cd:05:43:94:18:9e:95:24:2c:8d:c1:a1:2f:45:77:00:55:3c:
fd:64:c6:36:37:fa:1b:0c:51:05:f2:a7:31:4b:12:1c:4c:6f:
b9:ba:71:e8:78:2b:dc:c5:ea:2f:e2:43:0c:c3:5f:77:7f:e3:
7e:dc:95:d8:58:2a:5f:44:41:2d:6f:c6:34:c5:54:13:b0:ff:
8a:88:a4:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:34:01 2026 by rpki-client