Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
File: nT67qfosrShqyRJ2V1dF9hXo-nE.mft (raw, json)
Hash identifier: HVR5CSGoHQzS9TtlWDt0ayC6WXOlyRlXgkc9pBo25Qk=
Subject key identifier: 14:5E:BF:A9:52:76:0C:D4:D6:B3:47:63:05:F1:4B:98:2D:13:A3:B7
Authority key identifier: 9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
Certificate issuer: /CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Certificate serial: 019D9A74DBA753D246030DF26E9D204DD00F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
Manifest number: 0C5C
Signing time: Fri 17 Apr 2026 08:00:42 +0000
Manifest this update: Fri 17 Apr 2026 08:00:42 +0000
Manifest next update: Sat 18 Apr 2026 08:00:42 +0000
Files and hashes: 1: 8RN053bCakTRVXui6gfU_pQN-CU.roa (hash: /BriY1IgAGYn1GmZT5ixDLcg1lGG6kDvV6LZLM2uCJQ=)
2: nT67qfosrShqyRJ2V1dF9hXo-nE.crl (hash: JnizlhiJ09A2L1RsoLBIHQzwJTGTLhg6CS6ZIi68RII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:db:a7:53:d2:46:03:0d:f2:6e:9d:20:4d:d0:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3ebba9fa2cad286ac91276575745f615e8fa71
Validity
Not Before: Apr 17 08:00:42 2026 GMT
Not After : Apr 18 08:00:42 2026 GMT
Subject: CN=145ebfa952760cd4d6b3476305f14b982d13a3b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:98:33:e8:48:99:60:c6:9c:49:aa:b2:0a:c0:
82:13:4b:da:b6:a7:1a:1a:9d:19:6b:8a:9a:b3:18:
27:a7:51:e9:db:98:68:d7:25:aa:b8:44:f7:89:b7:
f7:9e:bd:b4:3b:5d:e0:a3:4f:e6:f7:0c:fa:19:66:
72:91:77:d1:e1:13:5a:a2:4a:71:32:9e:c7:14:70:
35:dd:03:89:9b:0c:25:d6:b1:16:9d:5e:9e:a9:5b:
86:2b:02:57:6c:6b:24:16:01:f0:e0:b5:4c:2c:7c:
1a:4b:1a:aa:4f:76:61:12:89:74:c7:3e:7d:93:f8:
aa:66:b8:50:f5:c4:91:16:2d:c7:d4:54:1a:f5:8f:
19:f3:df:82:11:bc:06:d7:e9:b2:74:1c:25:cb:42:
c1:0b:63:3c:ed:cf:f1:bf:58:75:08:b2:aa:06:da:
b1:cb:a2:4f:b8:b7:14:86:e8:a7:4a:ce:6b:e7:e4:
78:22:5e:dd:42:6d:6c:fd:95:a2:a0:28:56:ae:0a:
39:76:74:aa:49:8f:d9:36:71:14:7c:07:d3:8e:af:
6b:fe:7d:10:cf:6e:df:dc:3f:a7:ef:bd:2d:f4:41:
0c:d8:d9:17:30:78:28:7a:c8:20:30:5b:73:f0:cd:
db:9f:88:0f:71:ab:a1:5f:09:cb:1c:0b:34:75:fd:
a6:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:5E:BF:A9:52:76:0C:D4:D6:B3:47:63:05:F1:4B:98:2D:13:A3:B7
X509v3 Authority Key Identifier:
keyid:9D:3E:BB:A9:FA:2C:AD:28:6A:C9:12:76:57:57:45:F6:15:E8:FA:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT67qfosrShqyRJ2V1dF9hXo-nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/9ff9c7-d329-45a6-898a-9d959abce526/1/nT67qfosrShqyRJ2V1dF9hXo-nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:5f:54:79:99:0f:cd:fb:23:70:a3:8c:7d:7a:6c:a5:f1:ee:
95:b1:2f:ca:74:6a:7d:4e:a1:da:70:67:ba:60:71:a2:21:49:
b0:d3:a1:43:a0:3e:e8:bc:a4:bc:0b:d2:ba:13:7d:ad:93:d5:
34:40:61:32:09:d2:04:99:17:28:d4:d2:fc:15:4d:8e:9f:5e:
94:2e:9d:d8:88:18:c8:eb:bc:ef:44:77:30:21:91:93:90:1c:
70:2d:fa:29:fb:49:13:5a:61:72:27:cf:7e:58:52:0d:3d:e3:
51:94:0e:66:3b:9d:a5:22:0a:77:aa:0d:87:10:57:91:65:4f:
d2:80:59:69:d2:7e:c0:d4:c6:83:63:61:c7:e5:3f:2d:e1:3d:
cd:98:8f:30:03:89:ce:ad:bf:51:8c:ee:c5:17:86:81:1b:c7:
0b:0b:85:6c:a7:b5:43:d9:59:77:f1:20:fb:6c:77:e6:8a:9a:
82:ed:6d:9b:0b:45:84:f7:45:43:39:aa:09:b9:99:ea:92:d7:
b7:9f:9d:52:86:eb:5a:71:8d:94:e1:81:ea:73:d5:9d:b5:a6:
64:3f:cb:a9:e3:40:0e:2c:76:fd:ed:ac:e6:02:28:79:11:21:
b1:4b:63:a8:31:44:1e:f6:d2:4c:64:c7:e7:5e:2b:81:37:6c:
a6:a6:ac:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:23:32 2026 by rpki-client