Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
File: nlf4Q7F__OqpuGNlgf5NVONG3cw.mft (raw, json)
Hash identifier: xCwJqzXmO9rrS90k/tXajah028TWJ5MQQi+zJaE2ot0=
Subject key identifier: B1:AB:C5:0E:68:89:16:18:A3:C9:AD:2D:E1:79:B0:EB:51:E7:AB:8D
Authority key identifier: 9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
Certificate issuer: /CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Certificate serial: 019D9B50C54EAF67E2353FA51EFC614D823C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
Manifest number: 0F17
Signing time: Fri 17 Apr 2026 12:00:55 +0000
Manifest this update: Fri 17 Apr 2026 12:00:55 +0000
Manifest next update: Sat 18 Apr 2026 12:00:55 +0000
Files and hashes: 1: nlf4Q7F__OqpuGNlgf5NVONG3cw.crl (hash: BVk8mtHbfY/LAA4BNovrgq1FD7AFroj7dqj37Ukzcik=)
2: ob7F2VCJOAAsHnye3Fkfiw3LDrA.roa (hash: 73dBJpgeQaRvDu0bCVr2PUKhwsl+BWtyqsuA67uRjtg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:c5:4e:af:67:e2:35:3f:a5:1e:fc:61:4d:82:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e57f843b17ffceaa9b8636581fe4d54e346ddcc
Validity
Not Before: Apr 17 12:00:55 2026 GMT
Not After : Apr 18 12:00:55 2026 GMT
Subject: CN=b1abc50e68891618a3c9ad2de179b0eb51e7ab8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ce:7d:bb:66:eb:c3:4f:9d:70:05:d9:68:81:
fd:87:70:d0:42:5a:f3:2f:18:5b:b3:e9:29:6d:5a:
61:6a:09:f3:8b:f0:81:b2:0a:53:b0:45:e4:f7:72:
61:51:f4:af:c6:af:39:8a:0d:3a:8c:f1:37:c7:e2:
38:e3:9c:72:74:2e:0c:61:46:34:09:e4:34:4e:25:
55:b9:c0:c3:09:e0:93:db:05:2c:bf:55:dd:4f:5b:
c4:96:9e:3e:65:1b:a6:ad:e5:8c:4c:3e:c3:f8:bb:
26:8b:62:9a:c2:1b:3b:5f:f6:a8:26:1d:1a:61:ed:
f1:df:58:a1:dd:12:2c:37:9d:2b:7f:58:37:57:42:
8f:76:11:b7:98:13:fc:10:04:34:40:34:c2:89:05:
10:c8:8c:96:e5:ab:f4:45:05:fe:31:11:e5:a8:8b:
55:8d:cd:72:4d:6c:54:b1:54:40:1f:b7:24:c2:66:
e2:23:91:60:d0:40:e1:cb:d4:0d:6d:67:ef:f8:63:
09:c1:93:5a:29:cb:ca:2c:8d:c0:f8:bb:41:30:db:
f9:30:28:b8:3a:96:b8:67:e9:b3:18:2c:29:ee:5f:
be:18:9e:fb:42:17:68:90:97:e5:76:7a:14:33:42:
ce:f7:f1:ce:5d:03:39:8b:58:05:c9:a5:19:a5:6d:
7b:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:AB:C5:0E:68:89:16:18:A3:C9:AD:2D:E1:79:B0:EB:51:E7:AB:8D
X509v3 Authority Key Identifier:
keyid:9E:57:F8:43:B1:7F:FC:EA:A9:B8:63:65:81:FE:4D:54:E3:46:DD:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nlf4Q7F__OqpuGNlgf5NVONG3cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/7d0efe-709d-4d11-b692-0e230806b579/1/nlf4Q7F__OqpuGNlgf5NVONG3cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:49:90:51:24:02:6a:66:b5:ee:74:a7:93:cd:46:0f:76:1a:
fc:5c:59:df:4a:4f:a6:47:d2:6e:7d:2a:53:a4:8a:1b:7d:0d:
13:63:b5:ef:7e:28:de:fd:20:da:f6:21:99:54:44:0a:ec:01:
52:1b:7d:77:45:3b:bd:63:f5:fd:98:eb:ac:c6:d1:29:52:60:
f8:b6:57:ec:2b:74:22:b0:33:75:e6:57:b0:94:7b:7e:99:bf:
e4:3f:6f:23:f1:a3:f6:c3:f3:74:e5:1a:37:f9:f2:fb:a8:2d:
ba:48:25:ad:f5:d5:eb:53:5c:f3:ae:ab:08:63:1c:67:48:2f:
dc:0f:58:d0:e4:45:df:1a:49:64:3e:01:02:2e:31:da:d6:6d:
7b:a9:2e:7e:50:6c:2d:56:63:d6:cf:5f:f4:ae:f3:27:74:2d:
d0:ae:c1:e0:1f:36:10:1a:d7:41:ff:49:0a:47:51:03:26:e0:
17:8d:1f:49:1e:8c:40:94:ff:1f:b7:71:d5:75:e4:63:85:a7:
af:29:20:0c:56:f9:c4:c3:f6:f3:f7:b1:0d:e0:29:47:25:5f:
83:47:cf:9b:88:dc:0b:3f:16:e4:b1:78:cf:dc:52:f7:33:df:
e8:9a:d1:e7:61:a7:c2:94:59:71:56:a5:5d:7b:45:60:7a:30:
39:a7:45:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:51:14 2026 by rpki-client