Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
File: ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft (raw, json)
Hash identifier: mDBp57uELvleNAJceFH4Li7ZpLR/QAFkNp8pxN/AvFk=
Subject key identifier: 1B:FC:D5:83:00:1F:94:16:D7:7E:8B:42:F0:B3:3D:2B:5A:DE:38:53
Authority key identifier: 9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
Certificate issuer: /CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Certificate serial: 019DA30A4955D1C165ABC5EE78CFF132D83E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
Manifest number: 0918
Signing time: Sun 19 Apr 2026 00:00:53 +0000
Manifest this update: Sun 19 Apr 2026 00:00:53 +0000
Manifest next update: Mon 20 Apr 2026 00:00:53 +0000
Files and hashes: 1: ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl (hash: c32laGk5QBjjh0IWxE3q6p7r3RROlCUc9esE0w06QxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:49:55:d1:c1:65:ab:c5:ee:78:cf:f1:32:d8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ed8da3a8851b476de4bf39bf50c037d94b67541
Validity
Not Before: Apr 19 00:00:53 2026 GMT
Not After : Apr 20 00:00:53 2026 GMT
Subject: CN=1bfcd583001f9416d77e8b42f0b33d2b5ade3853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:65:a7:26:4a:05:df:c4:35:a3:d5:a8:5b:3d:
eb:04:c3:81:c1:1c:d9:ba:e5:73:5d:b5:66:70:89:
51:20:86:92:83:65:cf:c1:30:d2:0f:4a:9b:19:ab:
cb:ee:7b:ad:d6:56:88:20:2b:a4:a1:72:7c:61:74:
bb:b3:64:59:b1:5b:a4:a8:61:c0:06:de:09:ac:9c:
67:fc:52:26:91:a7:1a:4a:94:65:4a:0e:3d:c8:ec:
3c:59:17:cf:a2:9b:76:0a:8a:02:41:bd:c5:78:90:
ff:24:2f:f3:61:1e:b7:93:45:49:3c:5f:66:0c:c1:
f0:76:97:12:d1:a3:66:fa:3a:85:02:22:24:8e:24:
16:ea:47:9b:01:73:c1:ff:8e:24:a8:de:71:6c:c2:
63:1c:a8:97:53:ab:78:1a:21:d5:e2:a3:8b:8b:4e:
ef:a0:13:53:2a:6b:1c:e9:ee:f4:73:d3:8c:3f:ce:
1d:29:fe:92:99:3b:40:3b:33:ec:40:1c:c6:df:11:
52:83:af:eb:aa:92:0c:7b:9c:fa:09:27:72:af:50:
b5:dc:9d:e1:bf:86:72:57:dd:f4:a7:4d:7e:6f:21:
e9:a9:07:61:8c:01:56:0f:dd:c8:03:cb:8f:ac:60:
7c:1e:5a:50:52:fc:64:38:eb:20:9a:b3:d8:bc:93:
c0:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:FC:D5:83:00:1F:94:16:D7:7E:8B:42:F0:B3:3D:2B:5A:DE:38:53
X509v3 Authority Key Identifier:
keyid:9E:D8:DA:3A:88:51:B4:76:DE:4B:F3:9B:F5:0C:03:7D:94:B6:75:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ntjaOohRtHbeS_Ob9QwDfZS2dUE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/e8ed8c-4534-42b7-b846-057c3742a1a5/1/ntjaOohRtHbeS_Ob9QwDfZS2dUE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:3a:b8:c4:c9:3f:dc:77:b8:5e:84:c4:e4:94:23:97:bc:2e:
7b:75:fa:04:ab:14:8f:f7:6f:c6:64:ec:ed:a6:72:5e:9c:e1:
6f:85:8b:96:8e:fc:c8:5c:5b:fb:62:c8:ff:5e:e2:5a:fb:f4:
9d:0b:0d:a6:64:52:f9:73:a4:06:2e:f7:21:b5:cb:4c:ff:80:
9a:da:d1:5c:53:05:08:9e:cb:7e:12:42:93:ed:a7:c3:96:a3:
58:27:7c:98:20:41:2f:91:5b:93:cd:4a:19:77:52:d6:9d:1e:
12:a3:a9:5b:c7:97:9b:bc:f1:b1:94:41:68:77:e8:8c:58:44:
ec:b6:ea:17:4f:58:42:53:99:21:d4:bf:7c:1f:b0:16:fa:32:
4a:7a:36:ad:7a:a3:0f:e1:84:ca:ff:3f:c4:1f:94:cf:3a:02:
e9:56:b3:71:9d:a3:9f:7f:1d:d1:09:38:d5:a6:35:d9:11:23:
61:96:42:1e:a3:76:42:3b:72:5b:80:af:4a:10:1e:10:1c:4b:
f5:51:56:cc:a7:ed:ab:c5:ad:9a:34:02:18:a3:10:6e:63:06:
4f:b1:16:ed:da:ca:82:60:5b:63:b7:78:66:1e:ac:1f:99:93:
8e:66:ab:a3:06:0e:71:6a:de:b8:5d:10:fe:50:7e:82:99:bb:
15:2c:08:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:01 2026 by rpki-client