Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
File: NR8cdaHchk37-YdDxQbuGGkk9kM.mft (raw, json)
Hash identifier: dogGOOq/RZ7L078BAwrzDYHQjO1i3kPE0m4Xl3S9n5A=
Subject key identifier: D4:31:33:63:FA:1D:E2:BA:59:5B:04:9C:58:0B:C8:48:7B:06:A8:A7
Authority key identifier: 35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
Certificate issuer: /CN=351f1c75a1dc864dfbf98743c506ee186924f643
Certificate serial: 019D9C2C96C71946781DCACA8005AC0D36A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
Manifest number: 042E
Signing time: Fri 17 Apr 2026 16:01:00 +0000
Manifest this update: Fri 17 Apr 2026 16:01:00 +0000
Manifest next update: Sat 18 Apr 2026 16:01:00 +0000
Files and hashes: 1: 1a2w5_LzpzoweEi0kL3e8rXuwEw.roa (hash: Uznzi70zArzLc6sT1YufT+KJGM9lJIIJ4gfkTYxhtAs=)
2: NR8cdaHchk37-YdDxQbuGGkk9kM.crl (hash: Xk/O/NbjJaXaknrqtcnRsWr8TihHpd6PO64oIHZaKiI=)
3: TUYlFT-dUBjSF5MwO5c5SHo_-PA.roa (hash: yDE5fT46PoSW/d5/n8et57tOUUfO/M0RS358RxhsJ3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:96:c7:19:46:78:1d:ca:ca:80:05:ac:0d:36:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351f1c75a1dc864dfbf98743c506ee186924f643
Validity
Not Before: Apr 17 16:01:00 2026 GMT
Not After : Apr 18 16:01:00 2026 GMT
Subject: CN=d4313363fa1de2ba595b049c580bc8487b06a8a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:41:fc:09:69:0d:c3:c9:b7:79:3f:4c:31:61:
d5:f3:6d:89:b1:f1:c4:51:24:87:e4:83:77:00:e7:
56:07:e4:cb:c0:77:96:39:8c:91:f4:5c:0f:8b:52:
6b:2e:c4:27:1a:da:48:de:e9:e3:35:65:5e:17:49:
b4:d4:63:6b:81:99:a2:38:1f:91:3c:d6:6d:3b:8f:
26:ac:98:1e:63:7a:96:5c:8b:7f:6a:9e:8e:12:4b:
89:b0:d2:19:e6:82:78:59:3f:bd:37:54:8f:73:1a:
ae:d4:b4:7f:2e:04:70:b3:ae:7d:9b:e9:6d:fb:99:
9b:44:5f:fb:76:20:71:5f:62:7c:cb:67:52:4e:9f:
d4:68:2f:9a:b2:57:b3:5d:7c:46:46:6b:22:b9:4d:
e6:be:9e:2b:0c:e9:de:5c:db:bb:a6:8f:5c:87:d2:
c2:50:74:32:75:a2:87:79:35:f3:3f:71:08:fd:a3:
ac:88:16:91:4f:57:ef:3f:81:28:66:64:3f:0a:ef:
31:cd:7c:0a:eb:10:61:d0:3d:6b:b6:4d:2b:80:1f:
5b:83:a3:b3:15:26:e2:14:be:f4:39:14:33:c5:d2:
1f:aa:9d:63:9e:2d:61:75:a3:78:5e:4d:52:14:e3:
a5:3d:72:ff:2d:ed:cf:e8:fa:1b:a7:0a:6e:d7:16:
73:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:31:33:63:FA:1D:E2:BA:59:5B:04:9C:58:0B:C8:48:7B:06:A8:A7
X509v3 Authority Key Identifier:
keyid:35:1F:1C:75:A1:DC:86:4D:FB:F9:87:43:C5:06:EE:18:69:24:F6:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NR8cdaHchk37-YdDxQbuGGkk9kM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/29a6cd-3ac6-4749-8cfe-dceaa2ae0a74/1/NR8cdaHchk37-YdDxQbuGGkk9kM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:61:e3:a7:af:5e:05:71:d4:bf:db:f7:f8:07:ad:13:88:bf:
47:16:29:05:de:94:bd:3b:53:34:91:8d:c8:8d:af:95:62:a2:
9e:ad:52:db:10:7b:a8:83:38:6a:83:02:6c:b6:54:b4:fd:80:
35:b4:bb:b2:fb:3c:94:d9:c1:8d:8c:52:70:83:dc:57:47:cf:
ec:98:49:1c:3f:4e:c3:a0:5c:d8:12:1a:e3:c4:14:74:89:8d:
74:58:80:ab:b6:3c:df:23:89:32:14:5d:d5:7a:14:55:e5:91:
86:2e:6d:59:17:85:71:9e:50:42:5d:91:8c:c9:1c:50:a8:6f:
fc:54:9b:fe:7b:b9:52:73:41:66:25:7f:8e:b5:0f:a7:88:a6:
4e:cb:ec:a1:2e:c0:5e:aa:fc:52:da:20:98:1b:b4:0c:38:5a:
38:c1:b9:f1:67:8e:ec:00:69:1c:41:aa:fc:b0:12:f3:54:db:
7e:04:1d:d6:06:2f:1d:45:dc:c3:91:8b:02:e3:9a:31:76:f8:
94:33:1f:f4:ad:89:25:67:3e:da:93:ea:11:fb:7b:9b:b6:b5:
b6:96:e7:e9:2c:6e:e0:0e:6c:01:e2:29:60:8f:9c:1d:5e:a1:
2d:88:f8:f8:51:c8:c5:3b:89:b1:c2:45:f0:ce:a9:0e:c2:4b:
58:0a:60:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2cLJbHGUZ4HcrKgAWsDTanMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MWYxYzc1YTFkYzg2NGRmYmY5ODc0M2M1MDZlZTE4Njky
NGY2NDMwHhcNMjYwNDE3MTYwMTAwWhcNMjYwNDE4MTYwMTAwWjAzMTEwLwYDVQQD
EyhkNDMxMzM2M2ZhMWRlMmJhNTk1YjA0OWM1ODBiYzg0ODdiMDZhOGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxEH8CWkNw8m3eT9MMWHV822JsfHE
USSH5IN3AOdWB+TLwHeWOYyR9FwPi1JrLsQnGtpI3unjNWVeF0m01GNrgZmiOB+R
PNZtO48mrJgeY3qWXIt/ap6OEkuJsNIZ5oJ4WT+9N1SPcxqu1LR/LgRws659m+lt
+5mbRF/7diBxX2J8y2dSTp/UaC+aslezXXxGRmsiuU3mvp4rDOneXNu7po9ch9LC
UHQydaKHeTXzP3EI/aOsiBaRT1fvP4EoZmQ/Cu8xzXwK6xBh0D1rtk0rgB9bg6Oz
FSbiFL70ORQzxdIfqp1jni1hdaN4Xk1SFOOlPXL/Le3P6Pobpwpu1xZzjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNQxM2P6HeK6WVsEnFgLyEh7BqinMB8GA1UdIwQY
MBaAFDUfHHWh3IZN+/mHQ8UG7hhpJPZDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUt
ZGNlYWEyYWUwYTc0LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yOWE2Y2QtM2FjNi00NzQ5LThjZmUtZGNlYWEyYWUwYTc0
LzEvTlI4Y2RhSGNoazM3LVlkRHhRYnVHR2trOWtNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaGHjp69e
BXHUv9v3+AetE4i/RxYpBd6UvTtTNJGNyI2vlWKinq1S2xB7qIM4aoMCbLZUtP2A
NbS7svs8lNnBjYxScIPcV0fP7JhJHD9Ow6Bc2BIa48QUdImNdFiAq7Y83yOJMhRd
1XoUVeWRhi5tWReFcZ5QQl2RjMkcUKhv/FSb/nu5UnNBZiV/jrUPp4imTsvsoS7A
Xqr8UtogmBu0DDhaOMG58WeO7ABpHEGq/LAS81TbfgQd1gYvHUXcw5GLAuOaMXb4
lDMf9K2JJWc+2pPqEft7m7a1tpbn6Sxu4A5sAeIpYI+cHV6hLYj4+FHIxTuJscJF
8M6pDsJLWApgmg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:55:35 2026 by rpki-client