Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
File: rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft (raw, json)
Hash identifier: +NfiLHVheTw/lXUpoG79K/5lpGcq9jKBnQm/DbZKHdU=
Subject key identifier: 9A:3B:0B:C4:39:76:81:27:97:EB:33:7F:0E:E8:F9:54:A2:84:F4:C0
Authority key identifier: AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
Certificate issuer: /CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Certificate serial: 019D9962C160EE95B6A2082EFAFD722E4D1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
Manifest number: 1287
Signing time: Fri 17 Apr 2026 03:01:19 +0000
Manifest this update: Fri 17 Apr 2026 03:01:19 +0000
Manifest next update: Sat 18 Apr 2026 03:01:19 +0000
Files and hashes: 1: rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl (hash: WPsbtfx00oSNoFmoqFU9JlIkmeO56nQiJER+fBiPUpg=)
2: vKOYOseCMmqNIjMxRhwMUDEk7WQ.roa (hash: pJtwgYaoF3xi2Mwr73dINom7FFrcw02MnipnSTRfmM8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:c1:60:ee:95:b6:a2:08:2e:fa:fd:72:2e:4d:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acd35e0da439bea65c48329ce9e8b1093f72300a
Validity
Not Before: Apr 17 03:01:19 2026 GMT
Not After : Apr 18 03:01:19 2026 GMT
Subject: CN=9a3b0bc43976812797eb337f0ee8f954a284f4c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:73:cf:08:0d:30:35:48:4a:78:a8:47:f3:4b:
7e:68:e4:9f:e9:cc:2d:da:26:92:48:d9:26:a6:a0:
3b:52:78:f4:db:8b:e3:e1:7f:39:7f:04:66:5d:08:
22:53:ec:c4:de:08:9a:26:2f:14:59:8e:c6:7a:72:
a2:26:05:ed:5b:c2:97:a6:07:95:22:d8:e2:39:c6:
ea:2d:78:b1:fa:45:f2:9b:33:41:ba:0d:2b:20:11:
1e:c3:bb:b2:2a:47:b9:1e:f2:dd:9e:dc:d2:60:b6:
c4:45:c3:d4:4d:d8:ca:0b:c0:5a:54:89:d8:f3:f7:
3a:3e:75:24:67:0b:b1:6d:6c:a2:93:e1:9e:cc:c3:
df:1a:8f:07:b9:08:c6:66:20:ff:f3:1a:90:45:6e:
d7:48:6d:08:0e:ab:b7:1a:5d:b4:54:e7:a3:59:b8:
be:fa:28:f6:bb:af:41:e4:3b:77:2f:52:02:b5:26:
98:b7:84:9e:a9:30:ba:9f:3d:62:87:9a:f0:65:cb:
36:c6:3b:c3:72:40:ae:50:d8:00:b7:e7:38:81:ad:
ff:ee:76:08:8a:b6:d2:d8:9a:92:15:c0:03:06:2c:
df:91:4c:74:98:9c:a3:a6:3e:2d:20:a2:1a:2f:c6:
a5:b3:3b:11:f2:1b:42:33:db:20:e1:19:b0:38:ad:
5a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:3B:0B:C4:39:76:81:27:97:EB:33:7F:0E:E8:F9:54:A2:84:F4:C0
X509v3 Authority Key Identifier:
keyid:AC:D3:5E:0D:A4:39:BE:A6:5C:48:32:9C:E9:E8:B1:09:3F:72:30:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rNNeDaQ5vqZcSDKc6eixCT9yMAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/a1b15f-7d3d-4af6-b656-65bb1a89f259/1/rNNeDaQ5vqZcSDKc6eixCT9yMAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:79:92:62:fb:f1:25:bb:c7:6b:09:5a:c5:a9:20:09:f0:fb:
52:cd:29:3f:c3:28:04:34:41:09:64:c8:27:ba:d9:54:14:b8:
ee:0b:71:9c:c8:d2:0b:80:59:e8:30:80:43:58:1a:f6:4e:8b:
5b:7c:5b:20:6e:ce:ab:03:6a:85:1c:48:15:36:e5:e6:56:bb:
3a:bf:fd:78:13:7f:87:66:9f:59:a6:20:90:93:05:f6:f1:9f:
8b:06:42:0b:99:1e:e9:4c:87:90:85:c0:3b:12:63:9d:a4:2e:
d6:55:5e:66:5b:7e:19:d7:15:9c:d5:08:d1:31:70:65:8b:2e:
40:1f:34:c3:c8:27:23:ec:c3:69:0a:69:d2:e1:b3:8f:04:d4:
78:b6:16:a2:71:10:b6:77:91:0b:e2:c3:53:15:32:ab:49:e1:
a1:51:ce:8c:43:93:1d:11:3d:bf:bc:98:7f:8d:4c:4f:a4:c0:
58:ad:f8:1f:93:4d:e0:9b:83:61:13:ba:67:7e:66:98:5a:29:
e8:aa:df:f0:60:40:53:f3:e4:0d:37:e7:d7:97:ea:a4:cd:6a:
7a:94:f1:af:2a:d9:e7:16:af:db:53:f8:a1:97:7c:2d:df:0b:
52:25:54:99:e9:0e:21:46:84:fd:37:28:6d:39:12:d4:d1:c9:
59:db:34:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:47:24 2026 by rpki-client