Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
File: t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft (raw, json)
Hash identifier: rMPWP5l3OybXM5/L89/2HEundm5m31q44BEshMiqe7U=
Subject key identifier: F9:36:66:90:3A:85:ED:72:C2:B8:75:E1:12:69:E2:95:8A:37:02:A2
Authority key identifier: B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
Certificate issuer: /CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Certificate serial: 019D9D3ECAD500B2FD879B5FE4EF10B313A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
Manifest number: AD
Signing time: Fri 17 Apr 2026 21:00:31 +0000
Manifest this update: Fri 17 Apr 2026 21:00:31 +0000
Manifest next update: Sat 18 Apr 2026 21:00:31 +0000
Files and hashes: 1: ZBLmjHEnNj5CsLTBhAUiBj1hV0A.roa (hash: 3EA6s7k8+iqt8vTemGLaBh1ZR5wfpLsxKHoZaTRSwXw=)
2: t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl (hash: MloES8dLx+vL2W5ltjf5eTQOTt6uSic4FbG3iOonopQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:3e:ca:d5:00:b2:fd:87:9b:5f:e4:ef:10:b3:13:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7f35c5eeea021f60aff338ed62852e4c03c579a
Validity
Not Before: Apr 17 21:00:31 2026 GMT
Not After : Apr 18 21:00:31 2026 GMT
Subject: CN=f93666903a85ed72c2b875e11269e2958a3702a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:0a:da:02:ed:d4:5b:e5:51:ce:b6:09:89:47:
39:5c:b3:4b:8b:1d:3b:ce:d5:b0:ca:00:1a:55:9b:
57:d5:71:4b:a1:72:de:81:d0:94:4a:49:18:55:e1:
f6:9a:ac:87:13:83:db:ed:12:5c:cf:29:71:18:21:
e9:ab:5f:a5:2d:c8:13:dc:6c:80:1b:99:c1:04:62:
92:f1:61:f2:19:a3:33:d8:6a:8d:18:85:ef:e9:47:
e4:8f:29:58:04:a3:84:90:11:33:d9:a3:dd:ac:4d:
e6:71:27:af:e1:a5:31:9c:4a:7b:e8:97:da:c1:90:
57:42:c2:a7:94:06:c0:f9:50:c3:0a:48:5c:13:75:
a2:cc:b0:26:d3:5c:ef:e6:bc:de:db:69:1c:6d:aa:
8d:79:ee:71:68:97:75:20:34:dc:44:32:7f:04:0b:
11:30:f0:58:15:d1:4b:82:9f:a9:b1:04:2f:a2:bd:
90:da:01:ba:79:5d:79:2e:a6:1b:2a:df:79:f3:b7:
d8:d3:e8:26:d0:29:d7:52:a8:29:82:48:24:7f:8a:
09:e2:70:ce:bb:d3:a9:4b:29:61:44:78:cb:f1:81:
12:74:a0:07:10:72:36:3a:ee:4f:ae:81:40:40:7f:
2f:c2:16:f1:22:c5:3c:69:71:1a:31:24:cc:a0:0f:
a2:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:36:66:90:3A:85:ED:72:C2:B8:75:E1:12:69:E2:95:8A:37:02:A2
X509v3 Authority Key Identifier:
keyid:B7:F3:5C:5E:EE:A0:21:F6:0A:FF:33:8E:D6:28:52:E4:C0:3C:57:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t_NcXu6gIfYK_zOO1ihS5MA8V5o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/f6fda3-3eac-44cb-8f73-810477156ee0/1/t_NcXu6gIfYK_zOO1ihS5MA8V5o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:95:5c:bd:47:7c:18:1c:2b:d8:46:5e:76:9a:a0:ed:c1:26:
69:6c:60:48:cd:b5:cc:5f:97:7c:11:7d:60:6c:a0:00:7f:09:
a1:96:d7:c0:f5:ab:45:10:ad:61:1b:76:2c:3c:85:87:ac:6c:
5d:0f:a3:23:bf:09:37:56:65:fd:7d:07:f2:4b:84:88:8a:f6:
bb:20:25:9d:e5:3f:f5:84:11:d8:75:fa:e2:99:30:d5:39:b9:
bc:70:f5:2c:14:49:5f:42:9a:73:89:db:40:9e:73:bf:8b:5a:
41:63:f9:b0:8b:48:19:e5:2d:d7:9f:97:f6:6a:88:71:77:c4:
6f:6f:83:33:ee:7d:68:ab:9d:59:5c:41:b3:1c:d6:3f:60:43:
ea:e6:9e:d8:10:a7:b6:e6:fa:0c:15:c4:2d:c4:2b:1b:c3:ff:
2a:34:ae:a7:1a:9e:fc:93:a5:99:47:95:7a:6e:94:e0:c3:51:
e8:c3:1b:12:da:7b:4a:52:0f:52:58:ae:0e:12:f9:fc:46:e6:
73:97:36:bc:d2:3c:96:13:c8:9b:1c:77:46:7a:bb:9b:7b:d5:
fa:79:95:a6:01:28:68:7d:05:86:f5:b5:79:09:6c:5d:eb:a3:
e2:54:3d:a7:5d:0a:71:a2:eb:0c:f2:20:93:b0:3f:31:9b:d4:
14:26:c9:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 05:37:39 2026 by rpki-client