Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
File: nHjvvmeG-eICxCeI4bv3F4HKjEc.mft (raw, json)
Hash identifier: htbTCDbKvaGGTfLPNjP9a1mLRL8izp0AWAr3M0cjo0Q=
Subject key identifier: 28:91:AF:9A:E5:DE:9D:12:F0:D7:C9:A3:F5:1E:97:60:7C:61:E0:A0
Authority key identifier: 9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
Certificate issuer: /CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Certificate serial: 019D99994C93CE8178989E422F1E61F1F1D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 04:00:53 +0000
Manifest this update: Fri 17 Apr 2026 04:00:53 +0000
Manifest next update: Sat 18 Apr 2026 04:00:53 +0000
Files and hashes: 1: VEb6LUknY6TAB--bLPap2buV2rQ.roa (hash: VfylxmQnc3Muyj1Trwo1dEbBUHPDFWZL/o1oaD+MsA8=)
2: nHjvvmeG-eICxCeI4bv3F4HKjEc.crl (hash: 65e5CQX5VxmNWmmfJuq9gEGPxHmhrZcwd2Tscwk9k1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:4c:93:ce:81:78:98:9e:42:2f:1e:61:f1:f1:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c78efbe6786f9e202c42788e1bbf71781ca8c47
Validity
Not Before: Apr 17 04:00:53 2026 GMT
Not After : Apr 18 04:00:53 2026 GMT
Subject: CN=2891af9ae5de9d12f0d7c9a3f51e97607c61e0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:68:7b:f6:ab:77:c8:bf:bb:24:87:26:67:f3:
38:79:7a:8f:27:29:67:54:16:77:fa:ee:dd:ea:f2:
6a:cf:a3:54:ce:5d:59:79:22:d2:a0:0c:39:ec:e2:
7e:d1:a8:5b:e9:e9:6a:2b:ef:6b:20:06:cc:a5:53:
8d:20:15:a3:ef:91:d8:e4:d8:35:27:1d:27:1f:2e:
b5:b4:9e:7b:1e:05:22:4e:23:12:4e:45:c8:b6:d1:
62:31:ab:08:ca:0e:d6:84:f0:6f:e9:4f:95:9d:1e:
89:66:61:c0:16:0b:d6:14:69:06:9f:1d:5a:b9:84:
b4:26:d6:57:a1:f5:6d:ef:35:52:23:a3:e2:38:bb:
80:4a:1e:c8:da:59:12:ac:70:ff:9c:be:1d:e4:35:
c9:3a:6f:50:d5:7b:e9:a3:18:39:6b:be:16:f9:44:
64:18:1d:bd:2c:d6:e9:72:f1:53:85:cf:64:1e:9c:
97:2b:84:44:f2:c4:e2:99:76:98:72:f8:15:40:4c:
a8:ab:a3:28:28:c5:05:38:8c:67:b1:17:35:0c:75:
d5:9e:51:cc:c3:07:ad:3f:91:12:0b:18:41:3a:4a:
84:06:6d:23:14:91:fc:59:3e:6c:1b:5b:58:2e:ef:
86:a1:0c:56:50:5c:fb:86:14:bc:37:4b:5e:9d:e7:
a7:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:91:AF:9A:E5:DE:9D:12:F0:D7:C9:A3:F5:1E:97:60:7C:61:E0:A0
X509v3 Authority Key Identifier:
keyid:9C:78:EF:BE:67:86:F9:E2:02:C4:27:88:E1:BB:F7:17:81:CA:8C:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nHjvvmeG-eICxCeI4bv3F4HKjEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/4c1642-80f3-4523-974d-4fc1cad8ab22/1/nHjvvmeG-eICxCeI4bv3F4HKjEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:a7:75:78:e2:70:80:09:68:0a:30:d4:62:e4:5f:67:1d:22:
73:16:b5:74:bb:1b:39:4e:7d:05:0e:f4:9f:5b:4b:74:78:5a:
3d:8b:38:19:03:cc:59:c5:36:2c:cb:a8:4a:1c:17:d0:68:92:
d1:ab:29:a6:c2:9b:d8:9d:a4:fa:a5:dd:ac:72:5f:8d:cd:8c:
94:39:5a:d1:e5:80:79:72:e7:6b:e2:37:d0:fc:d8:18:dc:c3:
61:23:cc:78:aa:35:fd:72:90:f6:8f:d5:17:95:70:b6:da:61:
54:13:05:04:47:d7:0b:8c:c4:01:b0:32:41:c2:95:f6:4d:7e:
42:ca:18:a1:ee:9b:af:79:1d:d1:bd:65:f6:e6:83:e6:1b:a9:
2a:8f:82:22:76:ad:0f:e7:75:ab:5c:95:4a:7e:36:22:90:7a:
c1:c2:a4:8e:0d:5e:e9:2c:38:e0:22:ed:79:cf:1f:39:dc:a4:
06:37:38:1e:25:85:7c:35:07:e8:18:ef:c0:69:79:5f:fa:81:
a9:a2:ff:22:3d:17:f1:61:82:1f:9e:af:78:2d:93:1e:40:17:
1f:47:91:c7:57:01:c7:b2:84:3d:24:e8:cc:52:3e:39:1b:b1:
77:ed:3d:b8:ed:6c:b6:4e:36:4e:57:77:51:71:e1:0e:3c:1f:
12:3d:b9:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZmUyTzoF4mJ5CLx5h8fHSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNzhlZmJlNjc4NmY5ZTIwMmM0Mjc4OGUxYmJmNzE3ODFj
YThjNDcwHhcNMjYwNDE3MDQwMDUzWhcNMjYwNDE4MDQwMDUzWjAzMTEwLwYDVQQD
EygyODkxYWY5YWU1ZGU5ZDEyZjBkN2M5YTNmNTFlOTc2MDdjNjFlMGEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWh79qt3yL+7JIcmZ/M4eXqPJyln
VBZ3+u7d6vJqz6NUzl1ZeSLSoAw57OJ+0ahb6elqK+9rIAbMpVONIBWj75HY5Ng1
Jx0nHy61tJ57HgUiTiMSTkXIttFiMasIyg7WhPBv6U+VnR6JZmHAFgvWFGkGnx1a
uYS0JtZXofVt7zVSI6PiOLuASh7I2lkSrHD/nL4d5DXJOm9Q1Xvpoxg5a74W+URk
GB29LNbpcvFThc9kHpyXK4RE8sTimXaYcvgVQEyoq6MoKMUFOIxnsRc1DHXVnlHM
wwetP5ESCxhBOkqEBm0jFJH8WT5sG1tYLu+GoQxWUFz7hhS8N0teneenJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiRr5rl3p0S8NfJo/Uel2B8YeCgMB8GA1UdIwQY
MBaAFJx4775nhvniAsQniOG79xeByoxHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQt
NGZjMWNhZDhhYjIyLzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC80YzE2NDItODBmMy00NTIzLTk3NGQtNGZjMWNhZDhhYjIy
LzEvbkhqdnZtZUctZUlDeENlSTRidjNGNEhLakVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6d1eOJw
gAloCjDUYuRfZx0icxa1dLsbOU59BQ70n1tLdHhaPYs4GQPMWcU2LMuoShwX0GiS
0asppsKb2J2k+qXdrHJfjc2MlDla0eWAeXLna+I30PzYGNzDYSPMeKo1/XKQ9o/V
F5VwttphVBMFBEfXC4zEAbAyQcKV9k1+QsoYoe6br3kd0b1l9uaD5hupKo+CInat
D+d1q1yVSn42IpB6wcKkjg1e6Sw44CLtec8fOdykBjc4HiWFfDUH6BjvwGl5X/qB
qaL/Ij0X8WGCH56veC2THkAXH0eRx1cBx7KEPSTozFI+ORuxd+09uO1stk42Tld3
UXHhDjwfEj25Ug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:34 2026 by rpki-client