Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
File: nKMZ6lHIADqtlKjifOaUkqouM6g.mft (raw, json)
Hash identifier: D2+2FR4oFAorKdbAwSTOfPAFppUAlDgK0CZOzdub2e0=
Subject key identifier: 1E:54:A1:94:84:28:49:69:37:0B:26:25:2E:FC:88:63:B2:0B:8C:5E
Authority key identifier: 9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
Certificate issuer: /CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Certificate serial: 019D9C634B616CD98557039F213729CE8E4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 17:00:46 +0000
Manifest this update: Fri 17 Apr 2026 17:00:46 +0000
Manifest next update: Sat 18 Apr 2026 17:00:46 +0000
Files and hashes: 1: Uelu6l4NquwAbyVxi9MJYjggwy0.roa (hash: ssdwawQd6a83Zwysw9XF2aqNC9cl5v3DkKLPdZdT8pQ=)
2: nKMZ6lHIADqtlKjifOaUkqouM6g.crl (hash: ixl4zuHaU0RT+36LN9VVYKAp1RRToVc1UdyladsPT/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:63:4b:61:6c:d9:85:57:03:9f:21:37:29:ce:8e:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ca319ea51c8003aad94a8e27ce69492aa2e33a8
Validity
Not Before: Apr 17 17:00:46 2026 GMT
Not After : Apr 18 17:00:46 2026 GMT
Subject: CN=1e54a19484284969370b26252efc8863b20b8c5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:8c:ac:30:8b:d8:81:96:7d:34:df:ec:ab:48:
e2:b3:53:4c:9a:bb:7d:3e:37:28:e8:44:70:6a:b5:
0e:8b:c7:0a:21:86:51:b4:bd:8c:c2:5f:4f:a7:72:
48:2f:e5:11:64:b9:de:56:85:5c:0a:60:34:0e:36:
a3:be:08:c6:c1:be:ce:e5:e1:8d:2a:b7:86:e1:24:
66:34:a1:af:15:6a:2b:d4:ce:08:6d:d3:26:1a:0b:
ca:c1:f6:06:39:86:24:c3:cf:ea:ec:92:26:1b:20:
81:ed:81:32:d1:37:4b:bd:3f:ad:cd:af:4e:b4:e1:
b0:ce:1f:f1:79:a4:98:3f:c7:b1:29:e7:31:e1:48:
d5:81:aa:0d:b3:83:1d:02:61:68:b0:71:09:36:de:
c1:db:ac:0d:de:6a:a6:47:5e:cc:bd:92:17:c4:78:
23:04:0d:c0:93:35:89:3f:5d:b5:ce:2b:52:b8:a7:
f6:20:00:fc:88:1c:50:01:75:8f:4c:4a:56:0c:5b:
b5:58:10:54:92:66:b6:02:47:fe:c7:b9:eb:18:d5:
98:71:be:85:1c:2e:5c:da:4f:d6:0f:11:87:9d:47:
c8:76:55:aa:2d:f5:90:d6:40:47:87:cd:5e:1a:fc:
fc:93:05:24:16:63:3d:a0:cf:80:64:8f:eb:e1:01:
0d:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:54:A1:94:84:28:49:69:37:0B:26:25:2E:FC:88:63:B2:0B:8C:5E
X509v3 Authority Key Identifier:
keyid:9C:A3:19:EA:51:C8:00:3A:AD:94:A8:E2:7C:E6:94:92:AA:2E:33:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nKMZ6lHIADqtlKjifOaUkqouM6g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/61494c-0744-4991-ab67-0ad3c7962c09/1/nKMZ6lHIADqtlKjifOaUkqouM6g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:62:54:2d:77:ac:c6:ff:c0:3c:7e:53:f1:b7:e5:e2:74:49:
dc:56:0d:0e:19:a3:63:74:c6:5e:38:ce:4e:23:8a:25:76:7e:
a0:a5:1e:dd:d0:c8:ad:e5:24:25:33:2c:ea:2b:3f:76:f8:4d:
cf:bc:8e:3a:3c:4f:cd:34:13:95:6c:b0:91:e4:90:eb:9f:75:
75:23:69:00:58:40:91:68:a5:53:0e:7c:75:48:8a:d9:fd:54:
72:d1:a5:98:46:35:b3:9a:d8:03:c3:33:7b:db:cd:63:be:5c:
66:0d:97:55:21:e4:74:c7:5e:d3:aa:39:5a:e8:76:1c:2a:85:
b9:32:8e:f5:d4:b7:c2:28:76:53:f0:1d:82:d0:3e:f1:3e:b7:
bb:bc:1d:53:bc:92:75:12:10:ae:70:8d:16:49:f8:6c:a9:88:
52:9b:f2:e1:2e:fe:17:db:03:e7:74:04:9f:8a:cf:51:f0:88:
da:9f:81:29:ee:4f:af:f2:33:d3:53:31:04:f0:58:14:f2:bc:
61:4c:d7:7e:8a:9f:9b:f8:7f:1d:cf:e6:11:98:dc:f7:9a:bc:
9c:b8:d8:f5:b2:ed:f6:be:a6:48:f0:bd:99:6e:c3:28:b4:46:
23:43:dc:92:3b:3d:5e:99:92:39:24:2c:c3:bd:b3:ba:2f:42:
f3:b1:da:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:04:31 2026 by rpki-client