Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: tLPOvUsVpNsnmgnHBCJLU3ADpa8AxPkbI7TjJX5sS4g=
Subject key identifier: A6:05:C2:D8:6F:2F:43:D0:D6:F3:3F:70:D6:51:87:24:C8:F0:E3:CE
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019D9B5173FB89A29BFC3105520CB0509367
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 12:01:39 +0000
Manifest this update: Fri 17 Apr 2026 12:01:39 +0000
Manifest next update: Sat 18 Apr 2026 12:01:39 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: rBB9tN8HCEZqdafU21E56KvLz/FkovfOTN6md0D5CDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:73:fb:89:a2:9b:fc:31:05:52:0c:b0:50:93:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Apr 17 12:01:39 2026 GMT
Not After : Apr 18 12:01:39 2026 GMT
Subject: CN=a605c2d86f2f43d0d6f33f70d6518724c8f0e3ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d3:1c:5a:65:7d:68:86:e4:f1:e9:72:16:32:
a5:29:50:b0:93:27:bd:c5:b0:f3:59:34:03:c4:05:
ea:a5:4e:50:2c:48:ed:e0:cc:df:2f:a1:22:5f:2b:
b5:61:f3:f4:06:40:b6:8a:a7:1d:e2:5b:21:33:b3:
0c:5d:62:0c:bb:a3:ad:f6:a6:84:94:88:15:12:ce:
63:af:d1:49:68:a7:01:86:96:6e:4c:c1:af:99:20:
fd:09:ce:f5:92:c9:22:99:10:78:0d:91:02:25:bc:
9a:22:26:fc:ba:85:b6:9a:63:b7:e3:9d:f3:11:2e:
a0:59:3a:02:01:9f:1e:83:b4:28:19:66:9c:9a:61:
0d:ef:56:1e:97:0d:49:c5:07:89:00:cb:29:8c:35:
f9:db:2c:0f:bc:2b:e8:89:20:fb:0b:8c:f2:54:b0:
26:bf:8a:cb:65:1d:d8:89:a5:2d:03:90:11:80:c9:
9c:5a:83:4b:65:c6:c8:83:b9:5c:48:de:bb:ae:35:
39:16:c5:09:e5:b4:5a:39:8d:b0:54:08:1e:7a:55:
5f:0f:30:e7:c9:1b:b2:9a:1b:52:fc:ef:e5:ad:e9:
9b:cd:83:c5:5f:63:f6:0b:7e:4f:20:57:79:46:7c:
68:1a:42:aa:96:23:1d:ba:e5:e0:13:24:1d:c6:4d:
4d:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:05:C2:D8:6F:2F:43:D0:D6:F3:3F:70:D6:51:87:24:C8:F0:E3:CE
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:3a:30:30:d7:50:6f:6d:b1:18:13:7c:ec:3d:ea:43:ae:90:
2e:73:cb:c9:dd:5f:56:f8:25:99:71:ee:74:92:b8:a4:e6:b6:
61:6e:51:04:80:6c:ad:da:6a:8e:3c:3f:38:ed:0b:c9:18:52:
35:45:7e:21:28:00:70:c2:9d:13:c5:e9:be:1c:33:c9:6b:a1:
e6:01:27:67:99:d3:00:62:10:0a:fe:09:8a:61:a6:03:9d:6f:
fb:71:95:8c:29:80:97:be:32:e7:32:17:ac:03:c1:73:96:d8:
31:77:c6:e1:07:f6:87:14:a5:e6:5b:88:72:82:cc:6d:5f:f1:
f3:6c:97:b1:02:30:ac:4b:10:76:34:25:18:54:d0:43:22:37:
ab:94:de:08:99:c9:ec:23:a5:70:15:b8:11:7d:ee:ac:28:2d:
6b:01:5b:f5:4a:8b:48:16:d1:ae:d2:11:81:33:8f:f7:e0:ed:
d4:e3:ba:69:6f:62:50:13:db:9e:ca:96:20:50:44:7e:58:db:
ad:8f:a4:3d:cd:8f:e3:9f:18:58:2f:f8:ae:1e:c3:63:79:a9:
4c:1e:dd:13:6d:c7:4b:c4:ae:e1:b5:95:a2:e6:d2:11:1b:e1:
4e:fc:fd:b9:e4:36:65:9c:56:cd:83:f8:39:ad:56:5f:d5:b9:
d9:bb:fa:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:49 2026 by rpki-client