Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
File: n6smdTuJXn8_2bhglc4E7j4TLMk.mft (raw, json)
Hash identifier: FD/3U9T/DRjjA44m4L+PjhGb1VZEHVB6CRui72geXIU=
Subject key identifier: 67:BE:5B:7A:3D:11:1A:2C:69:ED:E9:C2:3B:0D:55:41:48:1C:3C:29
Authority key identifier: 9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
Certificate issuer: /CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Certificate serial: 019D9DACF3DE4D37FBAFD50BA13273899A05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
Manifest number: 01AF
Signing time: Fri 17 Apr 2026 23:00:50 +0000
Manifest this update: Fri 17 Apr 2026 23:00:50 +0000
Manifest next update: Sat 18 Apr 2026 23:00:50 +0000
Files and hashes: 1: VRtorJZHOLzlaL68HjLyyfhrnjM.roa (hash: 0WG5QGGc5ZdP1oBMABkKf9EHRt8+XEO8wLQn99x+rtA=)
2: n6smdTuJXn8_2bhglc4E7j4TLMk.crl (hash: affnzg2rb5pageab/q1/X6dadUQMhFJlZMkWyWoBtNs=)
3: nvBQcelYduDd4tm56B5pe90gDS8.roa (hash: 9vccNXYdmTE6+uGQ5rqwpKVFpAfbWEPJIhtoTGi6STQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 23:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:ac:f3:de:4d:37:fb:af:d5:0b:a1:32:73:89:9a:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fab26753b895e7f3fd9b86095ce04ee3e132cc9
Validity
Not Before: Apr 17 23:00:50 2026 GMT
Not After : Apr 18 23:00:50 2026 GMT
Subject: CN=67be5b7a3d111a2c69ede9c23b0d5541481c3c29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:65:ec:a6:fc:e8:ff:7b:9f:ce:9b:98:ac:ae:
1a:f8:d4:96:15:07:68:2d:55:ac:99:4b:06:7a:c3:
53:64:87:5e:fd:ef:34:a6:fd:d8:38:04:ea:57:03:
1f:23:b0:87:2c:e7:b4:6e:9b:13:b7:46:a2:30:06:
44:e1:65:92:80:1b:95:d2:4d:fe:64:62:c1:9a:6c:
9f:c0:b7:96:4b:be:dc:8e:5d:d1:c3:e4:e0:7b:f0:
12:dc:bd:76:69:8b:1b:c5:6b:1d:08:c7:62:e2:ed:
32:4b:31:5a:c5:30:69:4f:52:50:5a:5b:fe:d8:6e:
9c:aa:b5:f4:4e:0a:4d:0d:89:d0:7d:57:e2:35:4c:
4a:90:8a:61:8e:fc:16:b6:f6:b1:10:32:ad:81:55:
55:ec:47:03:1d:56:d7:e4:8e:7b:33:d1:ce:52:b0:
60:bf:93:b2:85:e5:a1:79:f2:a9:09:a8:f0:06:c6:
6c:19:2c:8d:3c:32:38:1e:a2:06:46:3c:a4:97:97:
03:88:3f:0d:25:00:ae:af:00:ad:1a:06:d1:54:db:
1b:e8:28:84:12:e1:00:06:bd:77:78:75:7b:4b:9e:
79:1a:d7:9d:08:a8:3e:8a:fe:16:12:b8:0a:96:99:
f7:25:00:05:ca:47:9c:c6:2e:df:12:b3:44:bf:78:
fe:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:BE:5B:7A:3D:11:1A:2C:69:ED:E9:C2:3B:0D:55:41:48:1C:3C:29
X509v3 Authority Key Identifier:
keyid:9F:AB:26:75:3B:89:5E:7F:3F:D9:B8:60:95:CE:04:EE:3E:13:2C:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6smdTuJXn8_2bhglc4E7j4TLMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/750d92-2de0-4f3a-bdd4-bf95c912e7a5/1/n6smdTuJXn8_2bhglc4E7j4TLMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:65:88:9d:ea:be:bc:cf:47:65:09:0b:68:1f:e9:3d:36:06:
79:c6:c0:15:d4:38:46:ea:30:e7:38:86:96:41:28:73:32:8b:
8f:50:a6:04:64:73:51:33:96:e2:e4:ec:1c:29:62:df:61:7f:
24:fb:6a:a0:2f:35:ee:b0:c2:45:13:de:15:33:11:61:f9:fd:
f6:b2:d2:75:73:01:2e:b6:45:df:ec:1c:6c:7d:ee:8d:1a:1f:
d9:f1:46:d2:ae:76:4e:03:17:c5:3d:a9:bd:18:90:8a:20:ca:
66:7c:67:5d:5a:d0:54:a2:a2:fe:df:73:5b:5f:4a:f7:a1:99:
ac:c7:f7:bf:9f:2a:38:c0:2b:7d:f3:b7:a5:52:42:7e:27:30:
33:5e:66:2f:34:90:8f:2d:b3:9f:ce:b9:60:48:ed:26:c2:c7:
18:09:7e:99:f1:e2:e7:ce:db:99:50:65:13:68:be:bb:10:5b:
b6:3d:24:16:80:c9:e9:b7:4e:40:1f:57:4a:98:28:18:c7:ec:
a5:19:26:15:07:57:d9:2b:c1:9c:3e:00:f3:32:1d:5b:ed:5d:
7d:6b:dc:a9:75:a6:06:28:dc:c5:08:4a:13:23:e8:0e:93:ef:
fc:28:56:25:57:a4:60:cd:55:8b:f4:20:58:34:c8:8f:5e:28:
04:2f:8a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 10:07:18 2026 by rpki-client