Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
File: nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft (raw, json)
Hash identifier: lVgEHGpf7ttRCDpk2paMtfoSzAb0oFJwcgbh0B7Pt0A=
Subject key identifier: 7B:30:62:97:E1:57:82:01:91:7E:AF:0F:DC:E9:36:5F:73:83:6A:41
Authority key identifier: 9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
Certificate issuer: /CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Certificate serial: 019D992B358096B45F4CA2D873FCAE1E30D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
Manifest number: 04B7
Signing time: Fri 17 Apr 2026 02:00:38 +0000
Manifest this update: Fri 17 Apr 2026 02:00:38 +0000
Manifest next update: Sat 18 Apr 2026 02:00:38 +0000
Files and hashes: 1: nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl (hash: HCC7YcTeHpdGSD0DZvUixCLykyJiXBs4L/Da3tLu4BA=)
2: q2EEPg27aJ7MKxd4_2saW4PtwNs.roa (hash: TkB4YWmzDIPvVNQNni4Vn80uheBzxSDgJIan4fevymo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:35:80:96:b4:5f:4c:a2:d8:73:fc:ae:1e:30:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e6f2622e65c2ee863501d7721475a05ef5343fb
Validity
Not Before: Apr 17 02:00:38 2026 GMT
Not After : Apr 18 02:00:38 2026 GMT
Subject: CN=7b306297e1578201917eaf0fdce9365f73836a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5a:a2:92:79:a1:94:81:bf:a9:ba:9a:72:87:
13:f7:c5:f4:11:a2:04:47:bb:d8:ce:f6:cb:60:02:
75:e6:4a:1c:56:70:ec:c1:5b:7d:dc:6b:66:00:07:
1e:2b:7f:5d:26:2e:80:db:6d:fc:a0:7a:df:a1:d3:
ea:19:57:ed:9e:95:87:0f:d7:77:e6:7e:b7:23:82:
e1:12:08:56:c7:fa:e0:19:78:58:bc:4e:c4:37:4e:
c1:36:bd:57:ff:08:b0:d1:56:44:ef:ae:42:8f:47:
b2:f5:6c:b5:d6:0a:05:14:c7:55:e1:2b:0e:0e:fb:
cf:fd:17:cb:0c:3c:d9:d7:17:11:51:58:9c:54:32:
62:a7:75:80:8f:c5:0e:de:dc:c6:a1:4a:53:20:ee:
27:6f:5a:30:de:d1:45:cd:85:82:35:a9:45:65:aa:
d9:0c:0d:63:e7:25:23:4a:97:6a:5f:b9:9d:f8:30:
17:98:94:6d:fd:13:02:54:ec:68:fb:23:29:61:55:
6d:f8:d0:b4:27:9a:88:93:c4:68:c7:45:a3:9e:38:
fd:51:18:51:18:ce:fa:f2:da:c6:d4:04:6c:24:11:
96:a5:94:d5:27:59:62:b1:46:76:e6:85:98:8a:72:
d8:e0:c8:82:e3:b0:10:64:2a:9c:9a:95:36:ed:d4:
fd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:30:62:97:E1:57:82:01:91:7E:AF:0F:DC:E9:36:5F:73:83:6A:41
X509v3 Authority Key Identifier:
keyid:9E:6F:26:22:E6:5C:2E:E8:63:50:1D:77:21:47:5A:05:EF:53:43:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nm8mIuZcLuhjUB13IUdaBe9TQ_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/593dd5-b907-4de8-80cd-b1db70071dde/1/nm8mIuZcLuhjUB13IUdaBe9TQ_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:db:ed:25:83:32:fc:fe:ea:52:f6:25:63:79:5e:29:6a:d5:
cc:83:4c:78:b0:2f:b3:46:3d:a0:12:2a:81:cc:af:cc:a6:15:
19:f3:72:0e:74:5b:82:90:bf:ad:08:09:d6:3e:05:0d:a4:b3:
f0:4b:13:f5:b4:42:d4:f5:c6:8b:6a:ab:60:d2:6f:1a:ec:29:
1b:76:0c:61:c2:6b:8d:88:e3:b8:ba:5d:d0:f0:7e:c6:0d:0a:
38:41:81:b3:83:f2:8d:d8:79:ac:08:4b:4b:d8:28:e1:0b:fb:
1b:c4:f9:a1:0b:54:e2:0e:8b:c2:86:84:68:0f:a0:9f:f4:17:
13:8e:5f:b1:db:15:7f:57:6e:dd:6e:ca:7a:0c:fd:8f:15:51:
8b:87:1b:ac:a8:fe:f0:b4:c4:e9:fd:b1:da:30:5f:2f:9b:db:
79:2e:5a:c4:03:c7:b4:ff:74:f2:fb:89:b2:d9:e4:ea:c1:a8:
ae:91:17:4d:d1:80:1d:b1:10:60:0d:f9:43:b0:1b:3a:71:00:
f3:e0:f5:52:ad:ef:95:70:98:eb:25:8f:d8:0d:39:58:e3:29:
f5:fa:0b:10:21:ea:45:70:d7:10:f6:1a:fb:10:45:8f:0f:56:
40:65:26:12:50:bb:42:81:dd:cc:2d:9c:89:3f:56:a0:65:6d:
d8:6e:48:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:22:45 2026 by rpki-client