Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: zY6GGOk1e6uDsTP261O5bhXFru+FjSw0u+hJthYz+jM=
Subject key identifier: DA:AE:2B:D8:41:73:E6:1D:8E:A9:C4:3D:66:CF:42:5C:A6:C9:61:83
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019D9C6386ED6FAAB4DD77D63A63F6D936ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 17:01:01 +0000
Manifest this update: Fri 17 Apr 2026 17:01:01 +0000
Manifest next update: Sat 18 Apr 2026 17:01:01 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: Q7S29nvn8akRirXVENBxZ7nF2PC38HcXycr/DJcX04k=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:86:ed:6f:aa:b4:dd:77:d6:3a:63:f6:d9:36:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Apr 17 17:01:01 2026 GMT
Not After : Apr 18 17:01:01 2026 GMT
Subject: CN=daae2bd84173e61d8ea9c43d66cf425ca6c96183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d5:d9:1a:a2:7e:87:2e:0b:e5:65:63:61:49:
23:50:2c:c3:a1:50:d7:65:1a:6b:1b:8d:66:39:fd:
4b:01:4f:4b:3e:d3:b8:c1:91:82:3d:ac:41:4c:ab:
cd:95:65:6f:2e:cf:98:55:1a:ea:e9:e0:01:01:3b:
ab:a1:7c:f5:78:32:bc:f3:6d:d4:1e:16:e9:f6:00:
61:50:da:b0:0f:cb:44:c9:46:21:1e:f7:a8:fd:54:
79:c7:1e:3e:13:79:f6:b0:ff:c3:a5:bb:2f:fd:97:
47:0d:df:af:9c:c6:1f:3b:3b:cb:af:d5:8a:02:50:
60:f8:4f:22:f6:b7:a0:b1:31:3d:86:2f:c4:cf:cc:
41:23:f0:a8:f9:44:7f:a8:9e:f3:ac:21:b8:a5:0e:
06:14:98:1b:de:94:90:9b:91:aa:56:2a:6d:e6:89:
57:28:cb:f2:35:2b:95:71:53:87:08:96:3e:76:b6:
50:cd:f1:0d:e5:e3:5d:ef:e4:14:0b:4a:90:04:f8:
73:4b:be:7f:1e:36:ae:e9:f5:d7:2b:49:90:61:0f:
df:96:f8:6d:5a:54:4b:24:00:53:a6:16:f2:7e:90:
ee:34:ed:83:70:f5:30:0a:72:53:74:96:80:9d:b3:
ac:59:2e:c4:16:14:09:82:df:c1:b2:95:61:80:1f:
fb:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AE:2B:D8:41:73:E6:1D:8E:A9:C4:3D:66:CF:42:5C:A6:C9:61:83
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:06:d5:83:81:33:3a:a9:e5:d1:b2:b9:38:36:6d:f7:a6:1e:
1d:6c:a5:6a:ba:8c:16:a5:b4:4d:58:a5:73:e4:e4:d7:49:15:
6f:01:19:e7:2b:9f:c1:00:78:8a:43:0b:b4:cd:96:e1:29:c0:
97:24:79:c9:b7:37:fe:89:db:b7:95:ba:4a:06:36:ba:40:a8:
a7:a6:04:95:84:d1:45:b9:64:2b:9a:01:d0:bd:ab:48:ed:db:
f7:a2:77:ae:9e:60:88:1e:7e:38:f7:52:80:2c:29:a8:07:ce:
ee:eb:50:09:d2:3a:41:44:a1:45:59:79:8d:7a:43:e0:22:4c:
b8:6f:11:ec:8a:23:67:64:83:fe:ac:73:b7:56:0c:66:91:02:
36:14:ab:92:23:53:69:97:d6:df:23:26:cc:65:0e:d7:9a:7e:
63:e5:a2:ac:fe:5c:d9:87:c5:5e:93:a1:2e:b1:17:ce:7e:4a:
a3:39:34:61:26:69:5f:42:0d:c8:d2:35:59:ff:bc:72:5c:30:
ae:ab:ad:03:16:0d:f4:01:e6:91:44:21:11:e9:9b:91:bb:31:
75:e1:b5:94:4d:e8:ad:33:c2:e9:65:30:b8:36:da:d0:8f:cf:
84:9c:68:44:08:e0:7a:59:26:a1:fc:7d:20:cc:d5:18:87:e3:
25:5b:fb:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:05:52 2026 by rpki-client