Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: bjMv1JhT1L786GJGkbLdlHx2R3mGFbplVSL2NWH8OV8=
Subject key identifier: 3B:B9:88:53:18:E4:E6:2F:AE:5E:F5:C1:1A:79:84:14:87:94:E7:81
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019D99D06AEBE44AF767C52BEC59BF19908E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0BF5
Signing time: Fri 17 Apr 2026 05:01:05 +0000
Manifest this update: Fri 17 Apr 2026 05:01:05 +0000
Manifest next update: Sat 18 Apr 2026 05:01:05 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: m0remZpbZkBDru8OgQKFe8gOCYDsXqaFjTxuRC9+LvY=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:6a:eb:e4:4a:f7:67:c5:2b:ec:59:bf:19:90:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Apr 17 05:01:05 2026 GMT
Not After : Apr 18 05:01:05 2026 GMT
Subject: CN=3bb9885318e4e62fae5ef5c11a7984148794e781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:3e:92:03:b5:0e:04:8d:a5:bc:cc:e8:c8:66:
ae:44:31:6a:50:13:cf:a4:e8:44:24:bd:f9:d2:7f:
bc:54:25:0a:53:80:ef:64:5c:aa:77:fb:99:e9:6e:
28:25:3a:3c:15:94:09:70:f8:ac:70:b7:a8:39:3e:
7c:69:2c:94:ca:c1:db:ae:d0:62:db:ae:a3:23:c8:
ee:1c:f3:e5:e9:9b:9c:22:d6:2f:34:c6:4b:4b:21:
36:0d:57:03:c8:13:c6:e3:e9:a7:a0:db:1d:c7:8c:
03:65:2c:22:06:77:10:f0:9d:d1:cd:f4:1d:5f:01:
5a:ec:f6:5d:fc:d9:66:47:69:1e:cf:ff:09:bd:47:
67:3a:08:c5:97:ae:f6:8b:08:11:57:50:d3:60:7d:
00:57:80:70:31:45:6d:28:e6:a7:15:7f:84:5e:e4:
d9:f3:47:27:7c:96:46:6d:49:95:aa:36:75:c4:f1:
34:38:09:d9:37:6c:0d:1b:40:18:9a:98:64:41:9a:
6a:dd:73:ac:b2:d5:08:26:88:ec:1b:18:b1:ec:c2:
06:af:03:e1:c3:fe:04:87:fc:dc:cb:ed:62:e2:2c:
5d:42:eb:4c:76:16:89:a9:c3:15:62:6f:24:db:13:
fd:71:4d:43:44:5c:d8:42:71:73:57:19:a6:37:e9:
04:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:B9:88:53:18:E4:E6:2F:AE:5E:F5:C1:1A:79:84:14:87:94:E7:81
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a1:74:8d:dc:b6:55:1c:a6:f2:00:86:c7:43:b2:cc:1d:3f:
f0:8c:39:f8:57:ea:58:68:62:15:ad:80:20:ce:4a:40:9b:68:
a6:84:32:28:68:aa:80:7f:a6:4b:92:cf:75:2c:a4:12:63:26:
ab:22:fc:e0:ff:82:d8:90:3f:89:2f:cd:a7:a6:2b:46:8f:69:
f3:2a:29:0d:da:2d:a4:5c:2a:61:59:a2:ff:29:4b:f4:4e:0d:
38:9d:fe:67:4b:4d:d5:b1:5a:09:d3:83:34:2a:cd:ac:50:30:
2f:83:f4:78:d7:f9:06:37:62:c0:ae:1b:77:49:3a:04:3c:85:
7b:57:69:e6:4c:8e:f4:bf:e1:4f:fb:b8:ac:ef:ba:3f:11:97:
eb:7a:71:98:40:45:6a:79:02:d3:d9:89:50:06:a9:86:e0:8f:
15:cd:0a:42:9f:af:81:50:85:da:69:71:0a:c0:d3:8f:28:cb:
72:eb:bd:ee:c0:09:77:e8:56:f2:4d:fb:58:31:dd:1a:d9:34:
34:65:7c:b3:0b:2a:e0:5d:1c:be:c3:5b:1d:2b:b9:24:6c:32:
59:18:0f:a6:ca:15:02:be:ed:fe:fb:28:5c:ee:b3:21:30:6c:
ad:0b:31:82:7e:c3:1c:98:06:dc:04:02:bc:39:31:02:2d:98:
52:1e:ef:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:36:23 2026 by rpki-client