Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
File: nBYm1f1UoXollC9v2VyDwOCIF7s.mft (raw, json)
Hash identifier: iIKuFNDpAJw6K/okr5cRMlqkrC7tbEPyWonB/rZuSbc=
Subject key identifier: DE:26:B6:D2:BE:50:57:D6:93:D3:62:2E:F1:BE:C6:22:94:1E:1E:AD
Authority key identifier: 9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
Certificate issuer: /CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Certificate serial: 019D9AABAF6785F96F8441C78E2205AEFAB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
Manifest number: 0F54
Signing time: Fri 17 Apr 2026 09:00:35 +0000
Manifest this update: Fri 17 Apr 2026 09:00:35 +0000
Manifest next update: Sat 18 Apr 2026 09:00:35 +0000
Files and hashes: 1: fb_wL9N1OW0PyiKLL5fbxlqRd_A.roa (hash: PwX6Qj+/Hw67w92aS4xQ86nPtQ/6Nm2w8w8MnwiNUKI=)
2: nBYm1f1UoXollC9v2VyDwOCIF7s.crl (hash: ftm8oVxTJM/YQoSrtd5KpP0yIQr8/X1qsu8cJ8LITZU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:af:67:85:f9:6f:84:41:c7:8e:22:05:ae:fa:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c1626d5fd54a17a25942f6fd95c83c0e08817bb
Validity
Not Before: Apr 17 09:00:35 2026 GMT
Not After : Apr 18 09:00:35 2026 GMT
Subject: CN=de26b6d2be5057d693d3622ef1bec622941e1ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:d9:2f:fa:9e:bf:67:9e:dd:90:23:e9:c0:
34:47:7d:31:d7:18:46:7d:ec:bf:eb:d6:3a:b9:5e:
48:94:28:29:fb:6f:8e:92:bc:00:cd:07:6e:dd:88:
d4:9a:3e:6f:b4:42:82:e3:d4:d5:21:05:4f:aa:4f:
62:cd:a8:65:65:05:a0:03:2e:77:f2:47:1f:bc:40:
7e:11:b5:cd:46:02:03:c2:dc:07:05:c0:a2:9e:0b:
bd:cf:95:b3:4b:8f:5c:28:2e:de:31:f9:26:16:2c:
39:2c:46:f7:e1:3c:28:75:07:66:ff:07:88:c2:e7:
5e:84:a5:6b:74:3f:1a:f1:94:7e:db:50:c1:6d:45:
e3:c4:eb:2a:76:4e:5d:09:25:a1:76:65:5e:a1:43:
aa:54:48:62:0a:44:04:fb:94:2f:88:e6:0f:0d:15:
74:8f:02:e8:1a:ea:00:41:44:84:be:35:97:7c:59:
bd:32:59:3a:0b:2f:80:3f:0c:bb:d4:85:2b:b4:72:
7e:79:5b:9a:67:e6:23:44:bc:02:03:67:93:75:bc:
75:2b:4e:6a:06:f3:aa:87:fe:15:92:cb:46:5c:d6:
03:a4:14:ee:48:3f:a9:14:f4:68:cf:6f:57:f2:1d:
60:bd:12:37:78:27:5d:d9:72:f5:48:b3:58:3e:aa:
a9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:26:B6:D2:BE:50:57:D6:93:D3:62:2E:F1:BE:C6:22:94:1E:1E:AD
X509v3 Authority Key Identifier:
keyid:9C:16:26:D5:FD:54:A1:7A:25:94:2F:6F:D9:5C:83:C0:E0:88:17:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nBYm1f1UoXollC9v2VyDwOCIF7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/579479-7d4d-49c4-83c3-207e9b70c385/1/nBYm1f1UoXollC9v2VyDwOCIF7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:21:80:dc:75:60:7c:67:82:ac:d9:26:25:86:49:4d:0d:1f:
59:67:13:51:0b:6d:f4:80:ac:e8:7e:48:8a:69:c5:75:be:cc:
5b:87:08:24:45:69:26:f6:5e:fd:92:23:3f:65:fa:57:f4:dc:
ae:96:f1:29:62:38:ad:5b:64:ea:2b:40:2b:da:44:d9:88:d0:
de:03:62:44:4a:99:f3:5f:1f:5a:f5:3b:f6:86:0a:f4:6c:d5:
aa:2d:2b:27:92:9f:77:e6:ac:09:c3:f1:a0:6b:0c:e4:e3:8b:
22:54:7d:ba:94:e3:ce:15:a7:cc:61:55:8e:b5:2d:f8:1f:1e:
3a:3e:8b:14:ee:f0:f8:bf:f9:00:68:36:85:c2:b8:fd:9b:c9:
87:a4:e8:b8:32:a2:6c:67:38:68:bc:b2:b7:22:a8:58:ce:b6:
fd:63:14:f6:1a:b6:81:67:98:b1:78:6b:9c:04:20:5e:6e:3c:
25:ca:31:ee:51:89:3a:b1:71:c7:73:df:2e:b5:d6:1f:6f:0b:
02:f1:98:ab:f9:43:d1:f8:cc:ef:31:bc:60:cf:ca:90:8d:43:
38:24:0a:d4:07:dc:e7:58:82:f3:b0:76:67:33:10:98:be:61:
ba:5a:70:08:3a:9f:33:e5:ce:43:5f:09:46:89:f5:f2:a3:8b:
75:77:ca:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:25:59 2026 by rpki-client