Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
File: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft (raw, json)
Hash identifier: w/uQVOMefNn4tullI4GEvWxMSa/Kxz2S7lZ8MT0V/B0=
Subject key identifier: 26:3C:6F:2E:12:1F:D0:4C:53:69:E9:99:9A:59:AF:8E:AD:B8:40:7B
Authority key identifier: F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
Certificate issuer: /CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Certificate serial: 019D992B9493D280ED7D7FAB3FCFAE53E9DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
Manifest number: 0619
Signing time: Fri 17 Apr 2026 02:01:03 +0000
Manifest this update: Fri 17 Apr 2026 02:01:03 +0000
Manifest next update: Sat 18 Apr 2026 02:01:03 +0000
Files and hashes: 1: 1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl (hash: CoRN83+/KoHy3UP7x0fnvx+dUiNAU+vqJ0SqdmPOMzI=)
2: 3YjEg56U6GjcdzXUpZ2OEGiq38E.roa (hash: ddRUEN6TyEG6tJjiscH1r5xuRW7+HzjqFKPqakBlTSc=)
3: l5U5dUbp4S0purvYAX6he9vmelA.roa (hash: Yr3i+lMd5TtZSSBs18MNM7Tk/EiymRrwtLeLAkIt3fw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:94:93:d2:80:ed:7d:7f:ab:3f:cf:ae:53:e9:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d6ddee34c5bb8ec0eb919ce2656bf0cd855d54
Validity
Not Before: Apr 17 02:01:03 2026 GMT
Not After : Apr 18 02:01:03 2026 GMT
Subject: CN=263c6f2e121fd04c5369e9999a59af8eadb8407b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:5f:9b:ae:f8:1d:76:66:92:52:40:df:ac:49:
d5:9f:88:5c:5d:45:67:26:b7:8c:fd:23:54:c7:1f:
8c:0c:53:ce:bb:27:84:f3:c4:87:a1:37:a4:c6:19:
e6:64:06:d7:6c:d7:09:f3:88:fa:66:7f:ac:94:79:
1f:a4:80:e8:0a:f9:5f:06:86:31:c5:0d:3f:fe:92:
92:e0:c7:88:1a:21:23:fa:b9:ea:06:66:28:02:70:
58:1f:dd:88:7b:86:41:08:7e:8f:03:a3:36:f9:05:
08:34:a1:37:f2:a3:56:08:33:b2:5b:5f:2d:0a:4d:
87:70:03:72:e4:90:a1:2a:ed:82:47:49:05:24:08:
24:53:c9:79:74:d6:3e:ff:b9:a7:a4:6e:6d:86:af:
7f:4f:55:a2:29:78:49:1f:fe:95:59:48:90:38:68:
a0:88:d8:9b:6f:35:bf:7f:3d:61:e9:08:9e:82:b4:
c2:ce:a0:43:2e:a6:f9:54:4d:db:9e:6c:27:3c:ff:
90:a7:74:26:ca:7e:7f:12:96:a4:17:a3:bc:05:8b:
93:1e:a6:06:64:85:63:11:f8:26:ac:7e:e4:9f:09:
99:a1:c9:21:fa:c2:d8:b3:40:b5:cc:96:2c:0b:87:
0f:b1:1e:6d:bf:5f:2a:0f:a7:96:7f:dc:b6:51:85:
b0:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:3C:6F:2E:12:1F:D0:4C:53:69:E9:99:9A:59:AF:8E:AD:B8:40:7B
X509v3 Authority Key Identifier:
keyid:F8:D6:DD:EE:34:C5:BB:8E:C0:EB:91:9C:E2:65:6B:F0:CD:85:5D:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/783da5-6572-413d-9d6b-094d0db1ad2c/1/1-Nbd7jTFu47A65Gc4mVr8M2FXVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:97:b6:45:ef:6b:a4:c7:0d:d0:2d:ee:81:9b:ad:2f:1e:8d:
7a:cc:1e:da:f8:a5:91:d6:26:8c:5e:bc:5f:18:e6:8e:d5:4b:
20:7a:1a:ed:0e:43:e4:cd:0c:1a:0f:6c:13:25:66:d0:c4:75:
85:96:0b:b9:cb:b2:e2:8f:a5:f5:1f:53:5e:1a:9e:a4:f0:36:
aa:23:8a:86:52:fc:a8:51:f6:c7:2a:69:1d:81:24:5b:4b:ed:
cf:31:b8:00:e4:50:a3:28:dd:25:16:7d:fc:f1:81:65:25:21:
15:74:41:4f:b6:48:6d:f2:ff:84:c7:65:0a:b6:44:da:8f:5d:
a7:79:04:a1:9c:0b:8d:96:15:a5:de:16:9e:c3:90:53:23:fe:
df:e2:de:54:00:f1:84:23:38:8b:cb:63:2e:b6:eb:a9:5a:ba:
f1:88:8e:f6:a5:21:ed:fb:7e:d6:c4:ad:66:f0:d7:17:29:8d:
a1:bd:2e:25:d9:22:f0:74:46:4c:15:0f:45:30:ed:bc:ac:80:
ec:8f:b8:11:c3:d0:5e:62:38:23:30:0e:d6:45:a6:88:0c:f3:
77:98:99:17:ba:9f:e8:51:f8:95:4b:db:55:bf:85:6a:79:50:
4f:eb:68:ef:f0:02:18:80:1d:49:c5:b8:9f:6a:7c:1c:b0:db:
b0:66:49:b0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZ2ZK5ST0oDtfX+rP8+uU+naMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY4ZDZkZGVlMzRjNWJiOGVjMGViOTE5Y2UyNjU2YmYwY2Q4
NTVkNTQwHhcNMjYwNDE3MDIwMTAzWhcNMjYwNDE4MDIwMTAzWjAzMTEwLwYDVQQD
EygyNjNjNmYyZTEyMWZkMDRjNTM2OWU5OTk5YTU5YWY4ZWFkYjg0MDdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqF+brvgddmaSUkDfrEnVn4hcXUVn
JreM/SNUxx+MDFPOuyeE88SHoTekxhnmZAbXbNcJ84j6Zn+slHkfpIDoCvlfBoYx
xQ0//pKS4MeIGiEj+rnqBmYoAnBYH92Ie4ZBCH6PA6M2+QUINKE38qNWCDOyW18t
Ck2HcANy5JChKu2CR0kFJAgkU8l5dNY+/7mnpG5thq9/T1WiKXhJH/6VWUiQOGig
iNibbzW/fz1h6QiegrTCzqBDLqb5VE3bnmwnPP+Qp3Qmyn5/EpakF6O8BYuTHqYG
ZIVjEfgmrH7knwmZockh+sLYs0C1zJYsC4cPsR5tv18qD6eWf9y2UYWwVQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCY8by4SH9BMU2npmZpZr46tuEB7MB8GA1UdIwQY
MBaAFPjW3e40xbuOwOuRnOJla/DNhV1UMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1OYmQ3alRGdTQ3QTY1R2M0bVZyOE0yRlhWUS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYTYvNzgzZGE1LTY1NzItNDEzZC05ZDZi
LTA5NGQwZGIxYWQyYy8xLzEtTmJkN2pURnU0N0E2NUdjNG1WcjhNMkZYVlEubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2E2Lzc4M2RhNS02NTcyLTQxM2QtOWQ2Yi0wOTRkMGRiMWFk
MmMvMS8xLU5iZDdqVEZ1NDdBNjVHYzRtVnI4TTJGWFZRLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADJe2
Re9rpMcN0C3ugZutLx6Neswe2vilkdYmjF68XxjmjtVLIHoa7Q5D5M0MGg9sEyVm
0MR1hZYLucuy4o+l9R9TXhqepPA2qiOKhlL8qFH2xyppHYEkW0vtzzG4AORQoyjd
JRZ9/PGBZSUhFXRBT7ZIbfL/hMdlCrZE2o9dp3kEoZwLjZYVpd4WnsOQUyP+3+Le
VADxhCM4i8tjLrbrqVq68YiO9qUh7ft+1sStZvDXFymNob0uJdki8HRGTBUPRTDt
vKyA7I+4EcPQXmI4IzAO1kWmiAzzd5iZF7qf6FH4lUvbVb+FanlQT+to7/ACGIAd
ScW4n2p8HLDbsGZJsA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 09:50:23 2026 by rpki-client