Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
File: NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft (raw, json)
Hash identifier: gV3BLzndjsu4N+SPLq9vJXqNifJO7H5SbFKzN2DQ580=
Subject key identifier: C3:81:B1:BF:47:06:8B:E2:49:05:5D:92:0C:22:5C:1A:6B:59:A6:C6
Authority key identifier: 36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
Certificate issuer: /CN=36135f13abf02fa3fca505d568816afc59334916
Certificate serial: 019D9B87EFE6BFAB01C0EFBA5CA699A76D4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
Manifest number: 0112
Signing time: Fri 17 Apr 2026 13:01:10 +0000
Manifest this update: Fri 17 Apr 2026 13:01:10 +0000
Manifest next update: Sat 18 Apr 2026 13:01:10 +0000
Files and hashes: 1: NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl (hash: 2LidWyFK9Lo+DQwu6zYGkDE4pxBrntJYFlGXWw1aRSk=)
2: W-HA5m7hemLDXdHbhWk4pSkmXKQ.roa (hash: DFd6jBuLZXEJn0Y04obFpmXz6rYUp0KbjFhguWyn34c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:ef:e6:bf:ab:01:c0:ef:ba:5c:a6:99:a7:6d:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36135f13abf02fa3fca505d568816afc59334916
Validity
Not Before: Apr 17 13:01:10 2026 GMT
Not After : Apr 18 13:01:10 2026 GMT
Subject: CN=c381b1bf47068be249055d920c225c1a6b59a6c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:55:dd:e5:af:c7:87:fc:20:95:7c:af:d1:bc:
7d:f3:c4:2e:36:50:9d:10:51:0e:5a:80:53:21:85:
61:e9:fe:f2:b9:d0:73:3e:78:52:0f:a2:56:03:07:
0c:9f:6a:18:7f:7a:1c:10:a3:b8:d6:f0:4e:de:70:
a4:7b:9f:b7:89:6b:eb:4a:99:55:0e:37:aa:48:80:
43:82:7c:de:40:01:d7:bf:b8:38:56:2d:6e:27:6d:
45:a5:3b:ef:79:06:40:f2:03:ff:c8:8d:56:f2:0e:
a9:1a:d9:f8:12:91:8c:0d:2a:93:5b:96:be:a7:87:
28:ab:37:33:c3:51:12:5d:d9:28:87:82:4e:ed:1f:
54:0a:86:8f:ea:2a:63:9c:32:57:80:96:7d:ce:0e:
77:98:4f:e0:1d:5a:e4:c2:e6:e2:e1:35:a9:63:cc:
1d:75:3a:dc:f5:61:66:ad:e6:47:0f:32:a1:c9:fc:
78:4b:87:85:07:b3:f9:6a:63:69:69:9d:79:0c:f2:
e3:6d:5d:64:5c:38:c2:88:ee:e8:03:dc:4b:90:6a:
ee:43:0e:0f:e3:ba:cb:1b:c1:be:b9:3a:9a:42:98:
03:54:42:d6:00:7c:73:20:55:41:53:a8:ca:cb:78:
57:2e:e6:60:ff:1c:65:b4:7d:44:c4:ee:9f:96:37:
e6:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:81:B1:BF:47:06:8B:E2:49:05:5D:92:0C:22:5C:1A:6B:59:A6:C6
X509v3 Authority Key Identifier:
keyid:36:13:5F:13:AB:F0:2F:A3:FC:A5:05:D5:68:81:6A:FC:59:33:49:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NhNfE6vwL6P8pQXVaIFq_FkzSRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/288330-0fe3-42aa-b264-9dfd795a5ada/1/NhNfE6vwL6P8pQXVaIFq_FkzSRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:f6:55:b7:ca:98:04:0a:4b:7f:31:fb:74:ae:cf:32:c4:f9:
0f:fe:3b:7e:6e:a8:b8:ad:be:a5:38:d8:90:e8:df:9a:d3:91:
13:e0:f7:91:d9:58:0a:62:ad:9c:33:74:ba:7f:9e:9e:3a:2e:
b9:21:00:0d:25:5d:40:68:cf:40:f8:a5:37:1b:77:9d:e5:3b:
9f:bc:d7:f5:cd:aa:e5:af:07:ba:97:3f:5f:70:aa:f9:16:cb:
23:31:bf:47:b7:9c:4e:03:e2:4d:fd:a3:74:b3:f7:c8:c5:94:
bf:f5:c9:96:19:88:53:42:b5:cf:a8:98:49:c0:8b:8d:6f:d3:
16:94:4f:ee:89:78:36:bd:72:69:04:70:66:4b:f0:57:38:c2:
35:ae:e4:22:8d:b5:01:92:dd:5a:3b:11:63:60:2d:d1:86:1f:
3a:df:44:34:fb:8a:a0:59:a8:a1:31:29:5b:c9:06:1a:fd:43:
0f:9d:eb:6b:4b:0a:77:a6:bb:e1:1b:82:35:8c:6d:a5:bf:e3:
14:63:dc:92:12:8b:40:9a:f6:28:dd:5d:0e:54:1b:4b:a1:30:
80:a8:96:5a:89:44:50:5d:e3:ee:d1:56:e3:78:33:64:d1:5a:
2a:35:e6:fe:9f:7d:63:20:a0:1e:2e:d7:9b:4f:0c:0a:a5:cc:
51:1b:a5:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:48:33 2026 by rpki-client