Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
File: NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft (raw, json)
Hash identifier: yMOEw34DaUyLloJ2mxkS7n7tKpqvlLxyi3wr2+A72Pg=
Subject key identifier: 50:FC:A2:7F:2B:0C:C5:B5:F0:16:78:52:CF:3D:1B:42:A4:87:B6:F0
Authority key identifier: 35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
Certificate issuer: /CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Certificate serial: 019D99D0D7FD1BC3943C121044C9A65D5E11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 05:01:33 +0000
Manifest this update: Fri 17 Apr 2026 05:01:33 +0000
Manifest next update: Sat 18 Apr 2026 05:01:33 +0000
Files and hashes: 1: NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl (hash: SLA+L2SDJbbdQ18+rOlZjlq0sVYVfZYJwHJ1TvZuRSM=)
2: e4_7yaHSmot34MoxfI-dfeOUQj8.roa (hash: Zla4V4TUPhBrvQzIH/3cu0Byr6xg7FZryKfovqeNwz4=)
3: wVHWp3M4ey0oV4Vvt4IVxUGWwHU.roa (hash: bGvl7Pnh00VzisoVUojSHZYeOEdkkKp2OdrZk5Xs+9U=)
4: z8_dgT6WuAsyinggiWah1gloyzI.roa (hash: Ux7iykUwWC0VnspPLqSHuMbius4UJKLHe67ofj8JFYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:d7:fd:1b:c3:94:3c:12:10:44:c9:a6:5d:5e:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35135b81b6c1edd2f6f5bc1c608a5fc9fe926474
Validity
Not Before: Apr 17 05:01:33 2026 GMT
Not After : Apr 18 05:01:33 2026 GMT
Subject: CN=50fca27f2b0cc5b5f0167852cf3d1b42a487b6f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8b:ee:b9:82:8a:ab:45:77:14:8a:ad:69:43:
9f:81:cc:6b:d1:8d:97:fd:78:ef:22:17:37:d9:5b:
5c:e6:b6:08:d9:c8:07:b4:ce:8d:87:b8:f1:19:e6:
50:77:54:3a:fb:9c:5c:0f:b0:c0:62:dc:77:f3:1f:
67:22:8f:35:be:66:05:f2:4a:80:33:f6:22:c4:96:
59:b6:91:79:7c:86:f2:9d:df:47:1a:96:35:ba:aa:
a0:64:f3:f7:7a:53:42:b7:b4:24:9c:dc:86:0b:99:
68:1b:88:87:05:7a:fb:2c:a3:53:39:dd:d3:b9:c2:
29:09:4b:a2:68:6e:69:2a:d1:47:e0:a3:0e:f8:c9:
55:a7:39:f4:4b:a1:8f:93:7c:23:9f:71:07:72:c7:
4a:12:19:ac:a1:5e:7f:5d:f7:3f:79:c2:16:27:25:
9e:d0:93:6a:0c:29:8f:d7:9b:7b:68:f8:9e:d2:d6:
d1:c9:d0:5c:b3:1c:f4:75:3e:c4:d9:f0:64:e3:85:
0e:97:d1:1c:8d:65:92:28:6b:c4:c0:cb:68:e1:b2:
80:53:cd:e8:3d:f0:46:9b:35:85:de:64:c3:6c:17:
8d:c1:dd:d2:9b:c3:d4:1f:32:4a:3a:27:3e:c4:cb:
6e:cb:61:ee:35:cc:00:76:c7:46:e5:92:8f:c9:3f:
cc:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:FC:A2:7F:2B:0C:C5:B5:F0:16:78:52:CF:3D:1B:42:A4:87:B6:F0
X509v3 Authority Key Identifier:
keyid:35:13:5B:81:B6:C1:ED:D2:F6:F5:BC:1C:60:8A:5F:C9:FE:92:64:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNbgbbB7dL29bwcYIpfyf6SZHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/d0a0a0-d25a-4746-9139-a71456df9997/1/NRNbgbbB7dL29bwcYIpfyf6SZHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:10:eb:d4:7e:3e:4d:c7:28:7e:59:d0:68:36:be:b8:af:0d:
7c:00:57:ca:2c:a3:0d:f4:0f:e3:cc:da:50:98:2b:02:e7:d9:
47:70:ab:79:8a:b7:c2:82:bb:e3:1a:5d:69:bc:49:ed:50:c4:
fb:be:04:a8:b2:6e:bd:b4:bf:70:46:e2:f5:83:2d:82:cf:d3:
4e:e7:fc:ab:0a:0b:a2:e4:a0:70:7d:a4:5f:d8:82:d1:ec:05:
b0:9e:f7:30:18:89:6c:6e:34:31:52:e0:f9:65:00:78:b9:ad:
48:4d:6e:23:ff:44:c9:40:66:f0:ab:ce:6d:67:31:87:5e:d8:
93:a8:2f:ee:43:7d:ae:5d:aa:7c:f4:cd:67:69:49:5d:a5:c9:
ce:66:1a:97:e6:38:be:70:8f:f1:08:21:1c:f4:b8:13:89:c9:
aa:d8:e8:3f:b3:64:67:ee:a3:cc:47:fd:9e:23:a5:2c:60:a5:
7a:97:8d:3a:8e:e5:ac:10:4a:46:00:34:2f:7b:ce:07:7d:3d:
fb:d9:79:9a:ff:fc:42:06:18:f9:fa:4e:57:9b:e7:d5:76:af:
5b:bf:37:2a:1d:18:0e:4a:c2:56:6e:67:2e:97:e4:e9:3d:c9:
f2:d4:80:c7:1c:24:bb:95:2e:d2:d7:1e:b7:00:48:c3:5e:1a:
b4:cb:f9:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:22:55 2026 by rpki-client