Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
File: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft (raw, json)
Hash identifier: awcUPQ4UHdzJi9S8JRgCv7cRbWy0YqtWs4zy6l53qDc=
Subject key identifier: 9A:5A:1B:73:9E:50:CA:62:F4:38:B9:68:83:23:92:A8:74:B3:6A:3C
Authority key identifier: 9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
Certificate issuer: /CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Certificate serial: 019D9A74DF73155E3BEC0EFB13D7C08A310A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
Manifest number: 04C8
Signing time: Fri 17 Apr 2026 08:00:43 +0000
Manifest this update: Fri 17 Apr 2026 08:00:43 +0000
Manifest next update: Sat 18 Apr 2026 08:00:43 +0000
Files and hashes: 1: m8AA96uOHjGk-TGHS6ELVd8Zd-8.roa (hash: KzO3KLMfqTnrwpPiduDo1bAht73kSS22uwNrZN+bB0Q=)
2: nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl (hash: S0S+SCIS+VyROxiEEEsj+q+Hz+sIfPpBOK3rCYBcxhc=)
3: tYiu9GmgmRQE0mtTTEACFf7CReM.roa (hash: kV8oONMqJV8h3wORb9Oq/koiMMhAYOJ2nauWTTLAmn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:df:73:15:5e:3b:ec:0e:fb:13:d7:c0:8a:31:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d5a17271d99cf15b73ecc658673143c28e207ed
Validity
Not Before: Apr 17 08:00:43 2026 GMT
Not After : Apr 18 08:00:43 2026 GMT
Subject: CN=9a5a1b739e50ca62f438b968832392a874b36a3c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:8c:7b:21:f1:47:f8:c1:8b:5e:80:c2:b6:3f:
19:3c:8e:2c:03:bf:0a:4a:cf:97:29:31:34:a4:4f:
16:be:c0:56:cf:ae:37:cb:57:57:52:04:d0:9a:08:
fb:06:a6:b6:e7:46:37:d3:e7:74:ca:9d:a5:0c:93:
15:4a:59:a0:31:07:91:e9:68:06:ac:a0:8e:aa:74:
ef:f1:3f:fb:3b:97:5c:09:17:28:5f:01:c3:6d:87:
9d:06:74:43:76:bc:59:6b:76:5e:1b:8c:c8:d8:c1:
04:30:23:57:36:54:23:46:18:b0:3f:dc:14:c4:b5:
c5:ea:ae:1a:5c:c8:47:73:0b:17:32:ed:f0:19:85:
5a:3c:32:b7:eb:87:9c:25:6e:09:5a:ba:60:30:1a:
a2:d7:4d:be:1d:68:6a:70:1c:77:cf:49:82:21:5f:
e9:2d:31:ff:9b:45:6c:7d:e5:50:bf:5f:83:0f:0c:
bd:47:85:d0:c3:5f:48:7f:67:b7:e6:24:97:a6:ca:
97:fa:3d:91:35:87:23:ad:48:1c:83:a2:13:e6:ed:
d6:3b:c1:dc:2f:b0:31:53:14:26:f7:46:dc:1c:0f:
f1:9c:76:ef:48:70:9b:58:37:6e:2a:7c:1c:9f:a2:
01:30:01:72:31:dd:29:d7:cd:27:d5:6c:2a:b2:98:
17:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:5A:1B:73:9E:50:CA:62:F4:38:B9:68:83:23:92:A8:74:B3:6A:3C
X509v3 Authority Key Identifier:
keyid:9D:5A:17:27:1D:99:CF:15:B7:3E:CC:65:86:73:14:3C:28:E2:07:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/908956-c5e6-4a3e-9f17-a14ca0ec1c1a/1/nVoXJx2ZzxW3PsxlhnMUPCjiB-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:bb:68:5b:3d:eb:1b:6f:99:83:57:65:67:98:53:ad:b9:46:
e2:32:36:a2:76:0d:f6:64:b1:1a:a3:b1:f1:2e:a2:ed:3c:da:
64:31:a0:93:f7:f2:eb:c7:38:79:bb:91:76:7a:d4:fa:fb:9d:
3c:8e:de:92:c8:86:db:77:11:d2:b8:81:aa:11:be:62:ba:11:
3f:7d:6d:7b:4d:68:32:42:a2:7b:38:8b:b6:57:5c:46:cc:ad:
61:a7:06:1f:03:4f:7b:ec:ef:82:fd:be:fd:54:7f:5d:eb:d4:
82:37:ec:bb:2e:a0:38:0c:5b:5a:eb:73:0b:d6:34:4e:77:98:
cd:0a:10:05:86:38:ec:92:bd:b5:6c:e5:67:fc:56:e7:cf:69:
93:61:6d:0a:ae:f8:31:ed:66:1f:86:ac:f4:61:20:ef:6e:f3:
9e:2e:2b:93:e5:26:50:e1:f6:61:8e:0e:36:26:d3:bf:17:a3:
51:82:fb:e2:6c:99:cc:e6:22:2a:71:96:a3:f9:77:28:b0:2c:
ec:b5:cf:92:55:a7:8d:70:88:11:11:85:de:67:55:1c:b4:88:
69:08:ce:e2:c1:cc:97:cf:54:44:8e:4a:27:55:e4:07:c3:ba:
32:55:72:97:c3:2c:5c:d4:d7:5a:47:5e:e9:ff:fa:b9:eb:8a:
be:8f:ce:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:03 2026 by rpki-client