Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
File: nElQd51ZdVHXnEPmFqUJB96M33c.mft (raw, json)
Hash identifier: 6xBUwT90tmSW9ACOE4ANs7o+qeuFsRp215zkggb40/M=
Subject key identifier: 9C:C7:48:48:43:63:23:2A:C5:CC:F4:60:98:89:53:F0:EE:9A:08:58
Authority key identifier: 9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
Certificate issuer: /CN=9c4950779d597551d79c43e616a50907de8cdf77
Certificate serial: 019D992B1D7A425147305FF65ECAAABB0098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 02:00:32 +0000
Manifest this update: Fri 17 Apr 2026 02:00:32 +0000
Manifest next update: Sat 18 Apr 2026 02:00:32 +0000
Files and hashes: 1: HYaYWiPUwPT0J3PigGh4W9Dq_LE.roa (hash: p4mpafcbeyykks8+AH1sHGrQUM/Z36qBp4nJtDWe3lI=)
2: nElQd51ZdVHXnEPmFqUJB96M33c.crl (hash: 5c/sEgVOTqvKlpN+aLeUiBUBjKOjvwZV5crfMW/ThAc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:1d:7a:42:51:47:30:5f:f6:5e:ca:aa:bb:00:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4950779d597551d79c43e616a50907de8cdf77
Validity
Not Before: Apr 17 02:00:32 2026 GMT
Not After : Apr 18 02:00:32 2026 GMT
Subject: CN=9cc748484363232ac5ccf460988953f0ee9a0858
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:6a:ab:ad:af:9f:8f:f7:97:70:14:98:d2:ff:
f5:22:62:67:47:48:fa:6e:e5:ba:bd:bb:b2:f8:72:
ee:2d:f8:32:ae:4e:69:b0:b5:d0:6d:15:28:d4:ad:
36:bb:6d:4a:b1:6e:13:b7:a9:81:e9:11:91:d7:26:
c9:fd:42:b6:e5:0a:42:ab:f1:aa:f9:c6:60:eb:3c:
46:1a:a7:ca:46:25:bf:64:c5:ab:20:17:d5:0b:35:
9e:18:3c:ce:ef:6d:82:44:44:64:94:b5:bb:d0:56:
91:d9:bd:2a:3e:5a:68:9f:79:b6:6c:b8:99:a6:73:
fb:97:53:70:53:a8:a1:bc:db:d8:35:98:5f:df:32:
48:88:b3:9a:44:7f:72:18:80:8e:ac:cc:3e:c9:86:
92:a2:fb:6a:32:89:8d:41:b1:6d:5e:f9:c9:e9:df:
34:cf:7a:25:a2:14:ee:f3:7d:bc:ca:ad:a5:bb:2a:
7c:54:1f:f5:b6:d7:1b:90:5d:a3:72:97:8e:d6:b7:
b2:c3:d3:6c:24:98:45:31:69:cd:29:fa:bf:c5:a1:
77:e0:b4:67:8c:77:f5:ba:a0:40:83:f0:ba:4f:b8:
1d:61:b2:3a:a8:59:86:31:ba:0d:e0:38:98:2a:9d:
6d:4c:f8:43:bd:9f:b4:b9:0e:82:43:bc:3c:37:85:
ec:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:C7:48:48:43:63:23:2A:C5:CC:F4:60:98:89:53:F0:EE:9A:08:58
X509v3 Authority Key Identifier:
keyid:9C:49:50:77:9D:59:75:51:D7:9C:43:E6:16:A5:09:07:DE:8C:DF:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nElQd51ZdVHXnEPmFqUJB96M33c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/bce397-372d-4d2f-ad0a-a48ebd301671/1/nElQd51ZdVHXnEPmFqUJB96M33c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:a4:11:85:d3:80:0b:13:90:f0:22:04:fd:2c:ea:c0:cb:3e:
0f:bb:9f:39:7a:71:6b:14:e3:76:7a:d4:00:c2:57:9e:97:83:
91:fc:8c:f5:93:92:d7:db:fb:00:0a:6e:fe:de:1b:c7:9d:48:
29:d9:6d:c9:33:65:24:13:d4:5e:9d:98:57:b2:c6:3b:88:85:
85:e4:1f:0f:ac:91:c6:8a:35:10:c1:34:96:46:18:a2:f3:d1:
8d:57:8d:4b:ab:9f:1b:45:33:86:2c:30:37:6e:ee:27:17:cf:
1b:c9:5b:0f:45:12:ce:6d:83:eb:34:e5:11:6c:a6:cb:11:e5:
d9:61:5f:9b:72:d0:17:89:bb:27:59:5c:4a:8b:bd:b1:7d:f9:
79:12:7c:b0:f3:3f:9b:8c:86:b8:8a:f5:dd:43:10:23:2f:90:
09:dd:67:4f:70:47:2b:3c:e4:fb:d8:d7:6f:67:4a:56:9f:f1:
b1:34:7f:bc:e7:33:9a:70:a2:98:85:02:4f:78:38:21:44:3e:
8a:d5:4b:c1:35:7b:09:86:bb:53:73:87:0d:07:f8:7f:19:d2:
f9:e2:82:19:3f:3a:31:14:71:32:b8:ba:bc:ed:2e:ad:26:e4:
dd:93:94:1a:d0:52:da:54:3b:b5:06:02:a9:e0:05:f6:35:4f:
2f:3f:30:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZKx16QlFHMF/2XsqquwCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDk1MDc3OWQ1OTc1NTFkNzljNDNlNjE2YTUwOTA3ZGU4
Y2RmNzcwHhcNMjYwNDE3MDIwMDMyWhcNMjYwNDE4MDIwMDMyWjAzMTEwLwYDVQQD
Eyg5Y2M3NDg0ODQzNjMyMzJhYzVjY2Y0NjA5ODg5NTNmMGVlOWEwODU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGqrra+fj/eXcBSY0v/1ImJnR0j6
buW6vbuy+HLuLfgyrk5psLXQbRUo1K02u21KsW4Tt6mB6RGR1ybJ/UK25QpCq/Gq
+cZg6zxGGqfKRiW/ZMWrIBfVCzWeGDzO722CRERklLW70FaR2b0qPlpon3m2bLiZ
pnP7l1NwU6ihvNvYNZhf3zJIiLOaRH9yGICOrMw+yYaSovtqMomNQbFtXvnJ6d80
z3olohTu8328yq2luyp8VB/1ttcbkF2jcpeO1reyw9NsJJhFMWnNKfq/xaF34LRn
jHf1uqBAg/C6T7gdYbI6qFmGMboN4DiYKp1tTPhDvZ+0uQ6CQ7w8N4XsCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJzHSEhDYyMqxcz0YJiJU/DumghYMB8GA1UdIwQY
MBaAFJxJUHedWXVR15xD5halCQfejN93MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9iY2UzOTctMzcyZC00ZDJmLWFkMGEt
YTQ4ZWJkMzAxNjcxLzEvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9iY2UzOTctMzcyZC00ZDJmLWFkMGEtYTQ4ZWJkMzAxNjcx
LzEvbkVsUWQ1MVpkVkhYbkVQbUZxVUpCOTZNMzNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP6QRhdOA
CxOQ8CIE/SzqwMs+D7ufOXpxaxTjdnrUAMJXnpeDkfyM9ZOS19v7AApu/t4bx51I
KdltyTNlJBPUXp2YV7LGO4iFheQfD6yRxoo1EME0lkYYovPRjVeNS6ufG0Uzhiww
N27uJxfPG8lbD0USzm2D6zTlEWymyxHl2WFfm3LQF4m7J1lcSou9sX35eRJ8sPM/
m4yGuIr13UMQIy+QCd1nT3BHKzzk+9jXb2dKVp/xsTR/vOczmnCimIUCT3g4IUQ+
itVLwTV7CYa7U3OHDQf4fxnS+eKCGT86MRRxMri6vO0urSbk3ZOUGtBS2lQ7tQYC
qeAF9jVPLz8w4w==
-----END CERTIFICATE-----
Generated at Fri Apr 17 04:50:20 2026 by rpki-client