Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
File: rh__nrDPTAungU4yLsjgPU8fBxg.mft (raw, json)
Hash identifier: 9dkmLazC0FOlwtpaIt562tajXb9GJ2Sz910lggXuJCQ=
Subject key identifier: DE:82:81:1A:03:8B:AB:3F:CF:5C:51:4E:7C:E6:C2:48:45:EF:47:79
Authority key identifier: AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
Certificate issuer: /CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Certificate serial: 019D9AABCE22E7C73F04998C8E0B3430D2AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
Manifest number: 0F51
Signing time: Fri 17 Apr 2026 09:00:43 +0000
Manifest this update: Fri 17 Apr 2026 09:00:43 +0000
Manifest next update: Sat 18 Apr 2026 09:00:43 +0000
Files and hashes: 1: lspkwJT88HzimvAJv3qctC-BJ3Q.roa (hash: egyKq59ztseKxvGFJSFIE/3NMX0yyNxg5wnFnieS1nE=)
2: rh__nrDPTAungU4yLsjgPU8fBxg.crl (hash: grlW55H3OcW5whUOP4lcpLT9wmDJUihMlCH1UIpBNac=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:ce:22:e7:c7:3f:04:99:8c:8e:0b:34:30:d2:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae1fff9eb0cf4c0ba7814e322ec8e03d4f1f0718
Validity
Not Before: Apr 17 09:00:43 2026 GMT
Not After : Apr 18 09:00:43 2026 GMT
Subject: CN=de82811a038bab3fcf5c514e7ce6c24845ef4779
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:e5:2a:bf:39:54:a4:12:0c:29:88:99:70:
90:e1:c8:e8:97:0e:71:97:b2:72:6c:f2:fd:ec:03:
89:03:c7:ba:c5:41:07:9a:c5:a9:9e:e9:f3:27:66:
d9:17:fd:48:eb:e1:84:fe:55:c7:83:dc:68:34:fe:
90:01:25:5b:fb:ec:96:f8:50:30:5b:6d:77:25:7a:
1a:9c:de:2a:32:51:44:b3:4a:dc:d8:08:a7:a7:0a:
3b:48:17:d9:9b:f1:23:34:2c:6f:ab:c9:2a:3d:4f:
e0:38:3d:a3:76:da:29:92:e8:26:b5:66:59:d7:47:
5e:26:c0:fe:93:20:f3:6d:05:7a:35:6f:27:0e:d1:
f8:4a:76:c0:41:28:d4:f5:8e:2e:13:8b:7f:27:be:
28:de:7f:ab:9f:2d:15:a5:99:43:11:a6:a9:ed:db:
e4:29:97:59:26:e5:42:3c:91:d2:ca:a9:da:ca:a4:
a3:43:4d:29:99:d2:68:6e:ba:49:7a:d0:de:4c:ec:
da:3f:1f:6e:e4:60:50:c0:a4:2e:14:1a:57:ac:6c:
81:36:49:9e:44:82:06:f9:a6:11:99:c8:79:aa:92:
23:e9:c7:5a:20:f1:2f:04:69:e9:a9:19:60:c7:ad:
4d:62:5e:4a:03:40:b8:e6:d3:7a:2b:ef:76:9e:e0:
4a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:82:81:1A:03:8B:AB:3F:CF:5C:51:4E:7C:E6:C2:48:45:EF:47:79
X509v3 Authority Key Identifier:
keyid:AE:1F:FF:9E:B0:CF:4C:0B:A7:81:4E:32:2E:C8:E0:3D:4F:1F:07:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rh__nrDPTAungU4yLsjgPU8fBxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/0e9fb9-f5a7-466a-8f81-9e10294a18ea/1/rh__nrDPTAungU4yLsjgPU8fBxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:ea:20:71:1b:f0:04:e8:7c:5d:e0:07:36:5c:df:97:e1:2b:
87:27:b9:bb:1c:d4:ec:03:93:ff:0c:39:16:1a:3e:58:e0:3d:
d7:5f:12:10:5a:b7:a8:eb:8a:94:72:a7:87:1f:97:b0:88:a0:
ba:65:a6:d8:ab:c4:07:28:5c:14:c7:cd:28:22:93:06:f5:88:
7f:f2:f3:24:23:a3:a9:e5:0f:3a:16:36:12:c6:30:4a:e2:10:
dc:f5:93:92:84:b4:3c:d6:79:8d:c5:89:e7:19:de:ab:59:0b:
ac:d3:5a:27:53:a9:ec:39:a7:8a:ee:51:b3:69:6b:99:49:c6:
b1:74:4b:a7:7b:98:8a:25:02:d5:78:77:da:34:b3:f4:84:7a:
d0:47:c4:ff:63:0c:23:67:29:4e:c8:e9:4b:80:e7:33:df:46:
3e:a4:3e:6a:37:74:66:e0:6e:f3:d2:cc:f0:f3:6b:6a:c8:86:
10:b5:0c:20:ed:51:e0:a7:aa:0c:e4:ee:b6:b2:6d:a8:2c:26:
79:44:42:f7:bb:1a:33:4d:4f:14:7e:b8:71:9f:3f:90:26:30:
37:9a:48:16:6b:70:8e:0f:03:1a:57:c8:a8:95:98:47:ae:b5:
14:c6:06:7c:c1:57:03:12:63:99:71:c9:ef:1f:d7:71:b8:a3:
a6:b4:cb:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:14 2026 by rpki-client