Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
File: nurBz77ElK6UV8hm5jYYZcTzAEg.mft (raw, json)
Hash identifier: +runD0OFOkrJa5Onnv2vDS7BbsX/o+cUvNOoe77hfW4=
Subject key identifier: 8A:BE:34:AF:9D:68:24:0D:BC:AA:A7:78:57:6F:58:2A:DD:FC:A1:91
Authority key identifier: 9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
Certificate issuer: /CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Certificate serial: 019D9A74AB36EF44B5CA11A97474C274E30B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
Manifest number: 0EBE
Signing time: Fri 17 Apr 2026 08:00:30 +0000
Manifest this update: Fri 17 Apr 2026 08:00:30 +0000
Manifest next update: Sat 18 Apr 2026 08:00:30 +0000
Files and hashes: 1: 8QjpINWPHZDJ5rBXOU-f7xhIEjw.roa (hash: 4srsR9VRePR9yB/iD/hHMwN8fvofDELlgIaatI76q6Y=)
2: nurBz77ElK6UV8hm5jYYZcTzAEg.crl (hash: 3CnoArqcMzksCzD79X4Hik2qHXW8HIDuZQQf+Fg3jYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ab:36:ef:44:b5:ca:11:a9:74:74:c2:74:e3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eeac1cfbec494ae9457c866e6361865c4f30048
Validity
Not Before: Apr 17 08:00:30 2026 GMT
Not After : Apr 18 08:00:30 2026 GMT
Subject: CN=8abe34af9d68240dbcaaa778576f582addfca191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7e:27:c4:4a:95:db:d1:11:fa:7e:0c:39:93:
a5:f5:4f:24:8f:3d:4c:29:2e:40:01:8e:c7:7e:be:
d2:b1:9d:6c:f0:01:2e:ac:5d:50:f3:cc:1c:5c:fd:
88:0c:5f:3a:6d:52:08:4d:90:38:0a:08:eb:78:e8:
75:3e:fd:26:0f:3a:ed:a4:7f:d2:07:40:08:ff:eb:
91:d7:f8:7d:71:4a:f3:47:95:1f:04:f7:e0:e0:a3:
dc:a9:9c:04:3a:73:1a:61:f6:aa:a5:25:18:d1:97:
25:25:72:04:c8:3e:2e:6a:e7:85:12:01:02:6f:a8:
b1:a0:ca:52:6e:4e:06:45:92:7e:c5:7f:60:bf:a1:
54:cc:35:6b:7a:d6:de:88:8e:f5:a7:7f:2d:0e:07:
82:92:6f:9c:00:fd:8a:6f:b2:7f:c3:dd:ef:1c:1d:
9e:06:5b:40:81:22:fc:35:55:b0:99:63:3b:23:72:
5c:8e:60:7d:84:18:f0:f8:5b:ee:f0:d7:d9:03:62:
a0:61:da:1b:58:04:35:2d:11:c7:83:6e:7b:8a:b7:
18:48:cc:6b:ac:49:eb:c5:c6:5e:30:df:0c:b4:0f:
e1:96:68:05:3c:24:ae:7b:ef:c4:22:a2:ae:e4:df:
14:a9:ad:03:dc:b2:13:31:c2:b0:0a:9a:c2:ed:25:
5e:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:BE:34:AF:9D:68:24:0D:BC:AA:A7:78:57:6F:58:2A:DD:FC:A1:91
X509v3 Authority Key Identifier:
keyid:9E:EA:C1:CF:BE:C4:94:AE:94:57:C8:66:E6:36:18:65:C4:F3:00:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nurBz77ElK6UV8hm5jYYZcTzAEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/47e609-b6b7-443b-8a04-e285cd8cad12/1/nurBz77ElK6UV8hm5jYYZcTzAEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:da:08:5c:3c:4f:1e:de:31:ba:7e:3c:8b:77:f9:a1:8c:67:
4b:ab:91:ba:5c:f1:50:74:da:3b:f4:a9:71:28:5e:30:68:31:
fc:b2:f7:a1:92:06:53:3f:16:84:f0:03:74:94:13:fc:0c:02:
d6:8c:54:8d:8a:14:97:e3:ac:e6:c7:cb:21:86:f3:f9:72:a7:
b3:31:9f:b3:7d:69:54:45:9c:a8:8e:7e:79:ce:a3:d8:72:2f:
9f:f0:be:4b:7f:c9:fe:ec:4b:e1:82:65:34:c7:a7:d7:0e:78:
a7:fd:05:c8:12:50:31:fe:23:4b:8b:9b:cc:1b:df:55:76:7b:
9d:14:de:93:30:90:ab:4c:42:0a:29:27:aa:ef:db:a8:07:3b:
13:9f:20:0c:aa:ab:81:d2:f7:08:f6:3c:d9:26:44:4b:1f:73:
ba:f2:b1:57:5d:a9:2a:41:e4:31:20:40:ef:c4:09:a3:0d:26:
77:43:66:e1:1d:cd:b9:5d:cd:2c:8a:f2:8a:cc:60:b2:0c:ca:
fb:2b:54:f5:2f:d7:c1:bc:a0:81:d7:92:60:f3:43:b5:bf:de:
b5:91:a8:bf:17:5d:ca:a2:e9:a8:eb:f0:45:b3:4f:ea:07:45:
6e:ea:05:13:cb:bc:af:39:6c:b9:a7:23:78:89:46:94:06:26:
4a:0b:54:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:34:03 2026 by rpki-client