Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
File: NH4zV4Kfm0R69wtgshkvi2sY_94.mft (raw, json)
Hash identifier: CFYjdQeKmpoAzLxiG8KkJ57C3aZJGBguZbanANpuZkA=
Subject key identifier: DF:03:F3:B8:63:68:5C:11:37:9A:A3:9C:FB:63:79:E4:A8:B8:36:06
Authority key identifier: 34:7E:33:57:82:9F:9B:44:7A:F7:0B:60:B2:19:2F:8B:6B:18:FF:DE
Certificate issuer: /CN=347e3357829f9b447af70b60b2192f8b6b18ffde
Certificate serial: 019D9DAD42C6193ADD1A2B289E49F9144314
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NH4zV4Kfm0R69wtgshkvi2sY_94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
Manifest number: 3F
Signing time: Fri 17 Apr 2026 23:01:10 +0000
Manifest this update: Fri 17 Apr 2026 23:01:10 +0000
Manifest next update: Sat 18 Apr 2026 23:01:10 +0000
Files and hashes: 1: 74wOJnUbEr49f5QsK3GHiup6N7o.roa (hash: 8my6OnLKsz7AqlPaj5wKwJ5v0hERvOcn4qf5tZS8GZ4=)
2: NH4zV4Kfm0R69wtgshkvi2sY_94.crl (hash: HVzrdXyTkWmmG5/JmcXcNuaSLPAPc5HMRji27Qtv5Qg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
rsync://rpki.ripe.net/repository/DEFAULT/NH4zV4Kfm0R69wtgshkvi2sY_94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ad:42:c6:19:3a:dd:1a:2b:28:9e:49:f9:14:43:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=347e3357829f9b447af70b60b2192f8b6b18ffde
Validity
Not Before: Apr 17 23:01:10 2026 GMT
Not After : Apr 18 23:01:10 2026 GMT
Subject: CN=df03f3b863685c11379aa39cfb6379e4a8b83606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:44:98:55:da:af:d0:b4:af:0c:fa:9f:4e:dc:
5d:b7:20:7b:41:20:1e:91:7e:ab:8d:2b:96:8e:c1:
e3:54:e8:37:7e:f3:92:83:03:24:13:ed:0f:63:54:
1f:6a:91:8c:0a:2e:0a:93:2b:1a:1d:d5:9d:9c:97:
5e:52:29:07:68:76:17:f9:cc:e9:95:93:88:c8:09:
a3:fe:e7:41:dc:ab:7b:64:4b:e4:96:7c:f1:13:b4:
34:47:fb:c5:55:39:fc:c3:2a:2b:b9:ca:4f:dd:e9:
71:6c:4e:3b:44:dc:c6:be:10:32:8f:4d:62:2b:f5:
af:aa:32:b6:91:e6:ce:fc:06:79:1d:d4:cc:e4:4c:
6b:ee:39:b2:42:72:e7:9e:e5:27:59:5d:e6:4e:e4:
2b:50:e2:59:2c:76:f0:6f:44:57:4b:11:b7:b8:a9:
27:5c:74:a8:09:b5:12:78:cb:68:dc:b7:a4:03:26:
1f:3c:b2:7a:1c:57:02:a8:ba:f7:96:c1:b7:13:c3:
90:96:b2:a1:41:53:62:ef:44:e2:99:46:cd:73:ce:
b2:50:64:31:c1:70:96:90:f6:ab:9b:6d:d5:73:21:
16:52:8a:04:9d:ef:6a:9e:0f:1b:36:bd:ef:7c:dc:
e0:c9:70:8c:1e:37:95:3f:ad:15:d1:ee:b5:ea:d1:
5d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:03:F3:B8:63:68:5C:11:37:9A:A3:9C:FB:63:79:E4:A8:B8:36:06
X509v3 Authority Key Identifier:
keyid:34:7E:33:57:82:9F:9B:44:7A:F7:0B:60:B2:19:2F:8B:6B:18:FF:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NH4zV4Kfm0R69wtgshkvi2sY_94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/a6cb86-96a3-4a39-91cb-7377b9b78972/1/NH4zV4Kfm0R69wtgshkvi2sY_94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:65:5d:53:2c:94:32:89:c4:89:d1:f7:af:c4:33:68:00:68:
85:06:f4:14:2c:03:d6:a2:5d:92:08:3e:69:65:51:b3:0a:61:
19:af:5b:db:1f:43:8c:bc:bf:67:0e:ae:e8:b5:2e:52:b9:59:
b3:a1:aa:12:43:74:d2:70:ec:38:c0:cf:50:82:56:4b:ff:b4:
65:d6:f4:e9:15:b9:cd:44:d7:fd:b4:26:9a:1d:92:8b:ed:5b:
1d:53:24:5a:f1:cd:52:16:57:42:9f:2f:23:de:77:eb:e3:38:
d0:e5:35:e3:21:59:6b:44:ff:0b:7c:95:1e:05:2e:1b:25:7a:
0b:d1:e0:44:b2:0f:87:19:c7:6c:0d:4e:e0:21:eb:cb:cb:bc:
da:39:84:83:c0:38:57:2a:0f:3d:40:3e:fe:3c:36:4e:c0:f4:
10:5d:09:dd:da:92:dc:15:82:88:a4:f3:a4:a2:3d:6d:4f:d1:
95:13:0f:d5:6c:5e:51:8c:52:e2:79:d8:74:03:ff:89:12:28:
e9:c5:30:4d:db:6e:5a:01:a2:43:d3:9a:e6:1a:54:c3:6d:29:
c0:22:5b:90:b2:d9:a9:0a:bf:e8:ae:41:02:13:70:95:8e:88:
fb:25:17:70:48:e7:2c:8b:39:8f:3e:22:e9:0d:4f:7a:17:47:
0d:0e:e2:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:53:10 2026 by rpki-client