Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
File: nJKqU9MpCqgDeZNTNdufzD_9Kao.mft (raw, json)
Hash identifier: R2ngAUiA2GuamrwrKWhUYzKAOLFq6u6A4mnP9jhG3Zc=
Subject key identifier: 7B:C8:22:87:83:D3:28:DE:A3:EC:F6:8E:A1:4D:76:36:FC:35:44:3A
Authority key identifier: 9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
Certificate issuer: /CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Certificate serial: 019D9A3EB2B9DFAD5D8C411E66DB5367B194
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
Manifest number: 05AA
Signing time: Fri 17 Apr 2026 07:01:33 +0000
Manifest this update: Fri 17 Apr 2026 07:01:33 +0000
Manifest next update: Sat 18 Apr 2026 07:01:33 +0000
Files and hashes: 1: 1-hmrhpQc9qm7AoafWIyNhR3ED1Y.roa (hash: V7/89jWIsWgE5VYj0PiaT+PidNKfZz1SVPLmNchZNk8=)
2: nJKqU9MpCqgDeZNTNdufzD_9Kao.crl (hash: 4JUsa7GQhOYFM7rHNHn/vCjMiLGYwNUn6xEervvkomM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:b2:b9:df:ad:5d:8c:41:1e:66:db:53:67:b1:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c92aa53d3290aa80379935335db9fcc3ffd29aa
Validity
Not Before: Apr 17 07:01:33 2026 GMT
Not After : Apr 18 07:01:33 2026 GMT
Subject: CN=7bc8228783d328dea3ecf68ea14d7636fc35443a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:6c:76:7a:71:81:90:f1:ce:14:05:05:7b:13:
8c:7e:8a:80:a1:e1:07:14:f5:6f:91:89:20:7b:7d:
a4:29:12:70:91:f9:2d:d4:75:b6:12:14:7e:d8:75:
6b:b6:3d:83:43:fe:f3:23:58:27:2f:3a:84:be:59:
c7:ea:9d:76:0b:fa:ec:d5:ed:42:c6:93:94:64:58:
29:be:88:bf:36:c0:54:b4:34:be:17:a7:5f:e4:b0:
57:2a:b2:6a:1c:63:1d:7e:8a:cc:df:61:00:18:1f:
94:9f:46:8e:0d:83:9e:0f:0a:14:ec:f8:c4:cc:ee:
f5:44:e0:cd:25:e7:e0:f4:64:b1:be:2a:18:af:9a:
8f:52:b8:97:26:2a:65:7d:9f:27:e6:60:62:28:58:
7c:5f:52:09:10:6b:67:90:d0:f2:1e:63:93:27:d7:
1c:74:85:f5:94:39:b2:c7:c8:81:14:3f:70:3e:d4:
b0:1e:42:b7:2b:84:23:ad:a7:9e:f0:59:b5:79:c4:
56:67:71:e5:45:68:e2:32:06:11:06:5f:db:4f:75:
c2:6e:60:b8:7e:c5:86:47:49:3d:5a:85:fd:e3:ba:
f5:d9:f2:62:47:f7:50:c4:4c:c1:88:cb:c7:fe:57:
7d:7e:08:f6:d0:23:b0:0c:63:53:58:8f:d8:d9:17:
a7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C8:22:87:83:D3:28:DE:A3:EC:F6:8E:A1:4D:76:36:FC:35:44:3A
X509v3 Authority Key Identifier:
keyid:9C:92:AA:53:D3:29:0A:A8:03:79:93:53:35:DB:9F:CC:3F:FD:29:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJKqU9MpCqgDeZNTNdufzD_9Kao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/eaa4d0-8d1d-4cc1-8b22-450395fb88fa/1/nJKqU9MpCqgDeZNTNdufzD_9Kao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:7e:2b:21:b1:08:53:21:e6:07:ec:56:96:d4:20:54:ba:89:
f7:c6:36:c1:ee:17:ff:5c:ce:a4:c6:a8:8a:ec:42:c2:c7:55:
31:46:1b:8b:dd:69:f3:9a:33:0a:cd:a0:f0:14:c7:85:25:0e:
1f:90:f7:2f:9d:84:64:98:6a:c1:08:b0:c4:88:73:59:17:aa:
f3:76:d1:fa:89:fa:ab:c8:44:32:4c:29:44:52:c4:f1:df:b0:
23:a2:ac:60:9e:da:49:96:b3:ee:ef:97:1a:cd:e3:9e:f9:44:
38:a6:78:3d:24:7b:13:72:ed:48:78:27:42:48:34:8f:3e:bc:
34:9a:e4:c1:f3:da:32:31:35:62:13:91:75:12:ed:58:7f:5d:
d0:66:8d:c7:86:eb:07:41:ce:fb:5c:cb:03:56:97:45:dd:98:
54:cc:cf:c7:ef:b6:c0:34:88:91:da:73:8d:97:61:f9:37:29:
c3:2c:81:c9:01:35:ce:bf:a7:f2:2f:e3:04:0e:0b:15:44:2a:
82:fd:da:ed:27:a4:cd:b8:ab:0a:86:07:b9:db:25:4e:ee:2c:
a4:2e:b4:9e:aa:09:11:01:6d:d1:86:83:f7:a0:b5:b4:a8:0c:
41:20:d4:7b:80:d4:6c:fc:b8:08:33:a2:61:96:d1:16:6a:2f:
29:b6:67:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:46:35 2026 by rpki-client