Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: nztT/Prtz1ENfWviRkuUdK1GuH5Rm7vVKwXExP5A/Tk=
Subject key identifier: D0:BE:B8:D2:35:94:55:33:5A:11:58:39:94:54:84:21:99:63:EF:8B
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019DA56748FABCE71F7FE524309E46CF79A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1816
Signing time: Sun 19 Apr 2026 11:01:42 +0000
Manifest this update: Sun 19 Apr 2026 11:01:42 +0000
Manifest next update: Mon 20 Apr 2026 11:01:42 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: MEvoW5NtVD5zG9lChQXgth7fwl+dazKBjnhXWPi/JG8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:48:fa:bc:e7:1f:7f:e5:24:30:9e:46:cf:79:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Apr 19 11:01:42 2026 GMT
Not After : Apr 20 11:01:42 2026 GMT
Subject: CN=d0beb8d2359455335a115839945484219963ef8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:27:26:d7:b5:fb:dd:a3:f1:54:20:45:f1:11:
cb:db:c8:d2:1f:a8:1b:f0:ae:2f:9d:15:9c:31:b1:
e4:f6:1e:95:61:c5:35:37:c8:0a:39:2b:5f:16:10:
98:56:08:aa:90:51:05:1c:ff:b1:ac:4a:8f:86:93:
86:84:1b:e5:d2:bb:e7:bd:ae:32:9a:9c:8d:3a:db:
6f:67:65:34:8e:89:19:7b:90:04:87:d4:41:df:31:
64:a0:a2:03:1d:1a:8f:01:81:7e:ac:be:e9:e8:ef:
3b:09:23:a8:f1:7c:8e:b0:96:b2:ff:25:95:d6:17:
36:d1:87:23:8a:91:a2:12:9a:43:f8:71:0f:b9:58:
03:91:a1:cd:09:1e:19:0a:a9:5d:1e:be:04:3f:2b:
6b:19:20:06:ee:5f:2f:eb:b1:52:de:f8:f6:77:71:
52:7f:18:a6:6f:1a:50:b5:f1:d0:16:f1:27:9c:a9:
d5:57:bf:10:09:67:1d:61:63:ae:c4:71:93:63:ec:
e9:a3:83:5e:33:d6:16:49:65:1b:74:ae:d5:b2:1e:
93:69:19:de:7e:25:63:bf:80:ac:67:ee:92:68:51:
99:aa:a8:13:cb:2b:90:99:58:cb:e6:bf:12:6c:ce:
d0:d5:ec:3a:3b:fe:b5:c0:b4:45:15:c0:2a:dd:76:
30:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:BE:B8:D2:35:94:55:33:5A:11:58:39:94:54:84:21:99:63:EF:8B
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:a5:61:13:a8:0c:f9:9e:53:bd:da:f8:da:25:bc:9f:85:f8:
94:67:4d:2d:4e:08:88:96:01:9c:dd:de:88:9a:5b:6d:cb:10:
f3:86:4c:55:2a:c6:8a:af:56:e9:79:9f:53:6d:ae:ed:7c:e8:
0d:23:af:bf:9c:fd:3f:8b:d6:fe:f1:a2:7a:6a:a8:70:8a:f7:
26:0b:4a:5a:db:de:e7:97:0b:62:e8:a3:e1:84:38:53:6e:5e:
7b:b9:9b:ba:0d:3a:ad:0c:0d:2b:38:36:c7:49:fb:33:26:2f:
b5:f5:61:9c:ac:68:50:cf:13:ba:89:1f:a9:8e:fc:e8:b5:8a:
2f:3e:94:9d:f6:ff:af:88:b4:7d:5e:81:bc:b4:7f:02:e8:c2:
4e:c3:32:0d:44:88:83:85:53:1d:2e:13:19:84:37:bd:82:da:
b8:8b:62:48:d5:b0:9b:11:aa:69:1d:57:1b:58:9a:81:10:e6:
ed:d3:9c:4d:cd:68:6d:53:50:00:68:b9:64:7f:32:b6:c3:4b:
7a:f4:6a:30:31:d1:51:fb:4e:a2:1b:54:7a:2d:78:9a:99:f7:
ad:73:2c:81:f8:27:0a:c3:ae:90:c8:2c:1f:8a:f6:84:5a:1a:
3d:b0:02:63:cd:31:5c:17:ef:0e:69:3a:87:66:66:3e:b3:4b:
42:d5:14:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:03:11 2026 by rpki-client