Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
File: nbtiWqVb2O81QQr93Sorw1iiXtE.mft (raw, json)
Hash identifier: /CNzA2bE0YLpFJEgjAYLmHGOvhjpbdQSKCVP9sIYnFQ=
Subject key identifier: A1:71:A5:D7:A0:0C:FB:9E:4D:BA:40:5F:08:A1:0F:24:64:89:E1:C8
Authority key identifier: 9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
Certificate issuer: /CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Certificate serial: 019D9A06D12C8E27FD621BCC80C4306AFE7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
Manifest number: 05CB
Signing time: Fri 17 Apr 2026 06:00:31 +0000
Manifest this update: Fri 17 Apr 2026 06:00:31 +0000
Manifest next update: Sat 18 Apr 2026 06:00:31 +0000
Files and hashes: 1: nbtiWqVb2O81QQr93Sorw1iiXtE.crl (hash: 3L334E6W9uxNVHhwjKmla4rYlYEYOCg0bhBn/JkiIXI=)
2: nv6Ok4y2cOecEADCopzAJKhcBVU.roa (hash: XEHy/gDqmxVMrvWfOK19i99wzww9ghcaL/+3+tLJ7nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 06:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:06:d1:2c:8e:27:fd:62:1b:cc:80:c4:30:6a:fe:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9dbb625aa55bd8ef35410afddd2a2bc358a25ed1
Validity
Not Before: Apr 17 06:00:31 2026 GMT
Not After : Apr 18 06:00:31 2026 GMT
Subject: CN=a171a5d7a00cfb9e4dba405f08a10f246489e1c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ba:3b:b4:0f:96:bd:c6:d7:3d:b9:39:b4:fa:
e1:5f:a2:db:fe:57:aa:ab:e8:93:13:fc:c7:c7:e3:
8e:9d:12:03:65:d8:2e:d7:2c:72:95:ea:6d:8a:11:
32:27:83:fe:6d:78:df:ed:d8:37:eb:3d:7e:70:4d:
fd:0f:03:f7:22:bc:1d:2e:45:44:36:ef:26:f7:38:
a7:bb:0f:2e:49:47:b9:9a:bf:d7:ac:c1:21:09:4a:
71:40:6f:6d:67:10:49:10:4a:33:56:d5:2a:8d:28:
57:bf:b5:17:22:d7:79:78:c5:aa:2b:54:7c:1a:73:
2e:61:6b:c6:0c:93:3d:89:24:4f:35:1a:1c:70:21:
12:36:53:de:5a:5f:70:bb:ec:4a:9b:75:41:9c:2f:
3a:85:01:3c:18:23:ed:6c:97:8e:00:01:19:8b:4e:
be:6b:a1:3f:4a:63:a8:6b:ee:63:96:28:d3:6e:f4:
62:f7:11:25:a2:35:80:a3:36:5f:f1:01:29:70:0f:
81:d6:33:17:01:c1:77:a1:26:8c:36:48:af:61:cc:
71:e2:f6:76:0e:d9:6c:01:ed:39:6b:8f:1e:0d:46:
93:1e:4f:1d:63:37:2f:f0:0a:2a:34:0e:70:b0:42:
f8:bf:2f:ce:67:95:2e:0c:aa:8d:c4:ed:a1:cc:5a:
1f:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:71:A5:D7:A0:0C:FB:9E:4D:BA:40:5F:08:A1:0F:24:64:89:E1:C8
X509v3 Authority Key Identifier:
keyid:9D:BB:62:5A:A5:5B:D8:EF:35:41:0A:FD:DD:2A:2B:C3:58:A2:5E:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nbtiWqVb2O81QQr93Sorw1iiXtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c33a13-a54b-45bb-b0d4-a49b72a1cfe2/1/nbtiWqVb2O81QQr93Sorw1iiXtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:43:9f:54:0d:8d:df:df:8a:12:ce:b1:e2:17:a3:18:8e:a8:
fc:9b:f9:e6:79:59:86:4c:a5:a9:d0:12:ea:59:07:a6:69:f8:
fe:d0:05:92:c7:f1:e7:cb:de:67:9b:b7:54:5b:ad:91:c4:34:
cf:45:c5:46:5c:d9:e8:11:4d:3d:da:fb:12:ce:c5:39:26:17:
46:4d:f4:2c:e7:12:3b:7a:ae:1f:9a:b8:da:45:ae:d7:93:82:
d6:c3:d8:7b:36:6e:a0:03:b5:b4:cb:de:a2:4f:c3:58:46:b5:
6b:83:72:5e:0d:6f:d6:43:d3:59:de:01:06:78:b6:5d:80:a5:
23:48:67:68:1e:59:fc:85:cb:5c:a3:82:2f:3f:7e:97:92:20:
3c:59:a7:84:1f:ff:ba:b3:00:1e:e5:1a:65:01:92:f1:6e:10:
b5:ff:a2:02:06:5a:78:32:f3:ac:34:82:7c:cd:12:db:fd:49:
cb:c8:5f:9c:e4:b1:a5:ae:45:30:8e:de:fe:7d:49:eb:a0:e6:
f0:dd:a3:9f:55:56:2e:2b:5e:ef:c2:51:29:ed:e1:5b:36:b3:
78:91:11:2b:17:0e:99:ef:e1:29:25:60:ba:20:54:ef:d0:2c:
76:92:7f:99:73:6f:6b:b4:86:60:0f:c8:6f:0e:39:1f:0e:dd:
cb:80:a3:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:56:08 2026 by rpki-client