Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
File: nSVxkIIfcFio6v1IGWl0NoutjxQ.mft (raw, json)
Hash identifier: bIHb9zYAblqHrDaKtCqeP+LvA82qCW5oHQJgJN9K5AA=
Subject key identifier: 9B:0E:C7:28:65:2B:8E:57:28:D3:1B:33:7D:B6:DA:76:4F:4E:3D:C1
Authority key identifier: 9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
Certificate issuer: /CN=9d257190821f7058a8eafd48196974368bad8f14
Certificate serial: 019D9962E52C7D4DEA1B6AF9694FA6E1F2B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 03:01:28 +0000
Manifest this update: Fri 17 Apr 2026 03:01:28 +0000
Manifest next update: Sat 18 Apr 2026 03:01:28 +0000
Files and hashes: 1: K_0s9HXiwRpb3fZfUHqVfR2cFnA.roa (hash: qsG/IhEYDQQMIteOO+oU9qaNoWlYDMHDQu6BGiFFiUQ=)
2: nSVxkIIfcFio6v1IGWl0NoutjxQ.crl (hash: ojYi//kuEvUXrbWGm3deY9Yr2OUOeJcVWd+CP5i0uak=)
3: viORdHUyF0zVxNz0mvDIvz7yXPg.roa (hash: I5UWTS5/9uqWU1okuiMu8r2OvTeAiLPa5m+dAhApSvg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:e5:2c:7d:4d:ea:1b:6a:f9:69:4f:a6:e1:f2:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d257190821f7058a8eafd48196974368bad8f14
Validity
Not Before: Apr 17 03:01:28 2026 GMT
Not After : Apr 18 03:01:28 2026 GMT
Subject: CN=9b0ec728652b8e5728d31b337db6da764f4e3dc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:e3:4f:7d:d6:23:4f:c6:36:27:e3:11:17:
5b:a4:9d:4e:83:e4:16:5a:36:94:a2:04:89:8e:88:
33:32:59:b4:6a:a2:3a:b6:da:c7:ed:03:8a:96:75:
37:98:df:50:f6:42:fc:4e:b9:fb:89:fe:c4:1d:31:
f6:57:f2:59:53:be:78:f0:87:4c:55:42:5f:8a:a6:
3b:d9:77:4f:d5:2b:44:cb:ac:09:29:46:78:a6:16:
ff:8b:bb:df:39:a4:a6:16:bd:75:f1:91:5f:86:13:
9a:5c:63:78:5b:f4:f0:02:0c:b1:6f:a6:2c:6f:b9:
18:8e:13:b8:01:4c:04:f9:0e:07:98:7c:35:94:2f:
88:5d:49:92:85:88:18:64:95:3a:a3:94:73:da:8a:
47:36:36:19:54:d4:f1:36:36:74:c0:8f:fe:93:ca:
69:79:da:49:69:09:a8:b7:fc:89:9a:a6:2b:08:ae:
1b:3b:0d:63:bc:17:ac:e2:a5:3b:24:30:18:ce:5a:
10:57:92:4b:9a:d9:59:e1:b1:20:27:b7:2b:b3:16:
e2:96:24:c0:67:16:a5:1f:14:98:43:33:b5:d7:80:
78:d4:41:57:45:7e:ec:b1:24:92:31:f8:39:90:b8:
5e:96:37:18:de:6b:e8:d9:6b:9d:52:36:e0:74:1a:
a9:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:0E:C7:28:65:2B:8E:57:28:D3:1B:33:7D:B6:DA:76:4F:4E:3D:C1
X509v3 Authority Key Identifier:
keyid:9D:25:71:90:82:1F:70:58:A8:EA:FD:48:19:69:74:36:8B:AD:8F:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSVxkIIfcFio6v1IGWl0NoutjxQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/66f829-5129-4842-a5c0-3740b0941db8/1/nSVxkIIfcFio6v1IGWl0NoutjxQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:49:64:50:ed:ca:d8:9f:3b:49:df:4d:ba:20:f4:b0:20:10:
34:ea:ab:99:64:8d:ea:f3:f4:0b:6e:ba:45:af:8a:49:fd:b0:
5a:56:3b:8e:cb:24:d3:eb:7f:32:e3:97:d9:49:df:ca:02:2a:
95:1c:74:8c:2d:e7:01:6b:f6:93:0a:89:0f:1a:bc:3e:72:1f:
aa:d8:a9:20:fe:9c:db:95:12:db:36:03:2d:a2:f0:0d:be:d6:
eb:b2:6d:56:22:42:95:88:ff:96:82:10:74:7e:08:f9:d7:36:
c3:56:37:02:93:d6:a4:18:58:d6:37:68:4a:41:6d:66:1a:c8:
f6:de:35:b8:6a:72:e9:ca:8d:28:65:82:a3:b3:1a:63:fa:c0:
6a:39:fe:e5:94:13:cd:fc:01:f9:25:d8:5f:3c:47:a5:eb:44:
e6:8c:12:53:27:27:6c:cf:2b:2d:51:ba:03:ae:8b:9f:f4:74:
c8:77:c4:01:5b:14:97:22:9f:f1:5e:69:da:de:08:a1:3a:c7:
45:80:99:68:88:bc:13:e7:63:18:d9:91:b8:45:f6:27:33:05:
c8:c9:d3:6f:54:ea:d0:1d:c5:12:84:8c:40:4a:72:67:3b:ac:
e3:a9:b4:f7:63:40:e8:67:fd:8c:89:ee:ac:56:44:98:6b:93:
32:26:a6:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:53:44 2026 by rpki-client