Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
File: NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft (raw, json)
Hash identifier: O1GZ+mnntixx8cdEgXp9clIqvSrX8tQRcYxWxcQO06Q=
Subject key identifier: 9A:6F:5B:CF:C4:CA:2F:64:27:82:FC:D9:C8:D9:6B:5D:BC:11:EB:8E
Authority key identifier: 34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
Certificate issuer: /CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Certificate serial: 019D9B51689E8AE8CA936260A47D129D0301
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
Manifest number: 0411
Signing time: Fri 17 Apr 2026 12:01:36 +0000
Manifest this update: Fri 17 Apr 2026 12:01:36 +0000
Manifest next update: Sat 18 Apr 2026 12:01:36 +0000
Files and hashes: 1: 7ksTJ_jFitxF4bukC24j3eo_mx0.roa (hash: P5sZaUJcRIlYxIsN9061EjjltvsNE9PdjoK/NkSXYrQ=)
2: NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl (hash: 296fExCFZUSrxq4JF/bryLFyGyv+UeUwAQIKEPs+OeQ=)
3: jSMK0-DQ4LkW8HGxfeOZqpRoUDg.roa (hash: LbCW9qnhO4rcrIcNPyJRkz9sjQKYiVfJkLlpl6db0Mw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:51:68:9e:8a:e8:ca:93:62:60:a4:7d:12:9d:03:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34dd4026d290f3201d28ef684d3c5ac13c96ec6d
Validity
Not Before: Apr 17 12:01:36 2026 GMT
Not After : Apr 18 12:01:36 2026 GMT
Subject: CN=9a6f5bcfc4ca2f642782fcd9c8d96b5dbc11eb8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:57:0b:33:93:ad:37:9e:61:53:e4:65:2a:c4:
ed:30:3c:b2:bf:b2:60:0f:e3:2d:20:19:0d:ff:b4:
c1:dd:07:51:78:62:99:7d:52:20:2d:f0:8a:fc:65:
27:44:58:b2:87:dd:3d:73:3f:dc:d1:81:e9:0d:74:
87:94:40:87:41:17:7d:b2:d2:2c:d8:f6:3e:5d:48:
7a:ef:97:4d:b0:ff:a6:ab:97:2a:d0:a8:93:9b:13:
bb:d4:e0:25:94:74:57:9e:1a:53:2b:0d:86:2f:02:
00:d8:6a:3c:73:cd:c9:a3:17:f8:b2:ad:f6:9f:82:
7b:d3:e2:e0:d8:22:77:8e:76:1f:d4:1b:75:39:08:
a5:9b:8a:05:42:2e:6b:b0:20:28:2c:73:74:17:83:
c2:bb:c5:a2:dc:3c:a2:35:be:78:f5:bc:4f:91:e9:
90:cd:e5:77:aa:fb:cd:d6:60:d6:7f:49:a9:bc:0d:
96:6c:a9:45:18:b4:7b:96:67:9e:7e:4f:7c:fe:d3:
09:9a:e3:5f:46:61:d1:27:43:4f:08:2c:45:cb:a3:
ec:f6:10:4e:eb:25:92:61:2d:53:e6:36:a0:4b:c6:
8c:0f:15:da:73:fc:f9:95:cd:96:2b:ea:e6:1d:a0:
73:e2:58:95:ad:6d:78:a2:ca:c2:74:00:e0:bb:ba:
13:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:6F:5B:CF:C4:CA:2F:64:27:82:FC:D9:C8:D9:6B:5D:BC:11:EB:8E
X509v3 Authority Key Identifier:
keyid:34:DD:40:26:D2:90:F3:20:1D:28:EF:68:4D:3C:5A:C1:3C:96:EC:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NN1AJtKQ8yAdKO9oTTxawTyW7G0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/72a405-1598-4033-8e2b-878507ed46f7/1/NN1AJtKQ8yAdKO9oTTxawTyW7G0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:d7:73:52:98:88:b6:18:d4:4c:e2:ca:6f:1b:fb:ad:23:66:
6f:56:0f:f2:39:91:9a:9d:a3:58:fa:52:26:d6:68:c2:0e:08:
91:7d:29:43:f8:50:07:ae:06:29:40:1f:42:c1:d0:6d:33:e7:
bf:f1:44:3d:1e:7c:f5:e1:bb:c9:0d:62:ac:cd:2d:22:aa:86:
0f:67:44:76:35:ad:da:22:c1:15:b0:5b:f7:d3:bb:a8:07:e0:
bf:57:83:82:b5:0a:30:ec:74:0a:f1:d3:23:a0:c4:28:c0:e1:
41:10:56:29:a6:82:6c:ba:17:56:fb:19:1e:cb:cf:ab:0f:1f:
91:12:50:89:cf:bb:4a:4d:d1:ed:82:fd:62:92:f4:ec:a5:e3:
55:81:04:fe:a9:78:9b:66:53:17:51:88:a7:3c:a3:1e:82:13:
4e:d2:96:3b:a7:fa:d7:4b:51:a7:fe:bf:ad:26:c4:fc:a6:3e:
f0:9f:bb:4b:ab:41:33:f3:6a:84:72:5f:6c:7b:86:74:63:e8:
0f:70:72:34:8c:4f:29:be:85:59:d9:ae:01:3a:dd:37:c6:44:
85:78:a6:1e:5b:81:90:f6:fb:a2:f7:ad:8e:e4:99:fc:a7:67:
0a:d4:8c:3d:17:61:2d:68:d2:f3:6c:09:c7:8c:ad:36:93:18:
4b:27:6b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:48 2026 by rpki-client