Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
File: nv9H-JUh2bSSt9BCG8J2kevwbv0.mft (raw, json)
Hash identifier: 05T7IdWReb0CWy7/0R/KGPvu/WKYvO1497TkJSr+ROQ=
Subject key identifier: A0:B8:3D:80:11:BC:F9:20:C3:8D:44:00:81:FC:50:42:3B:86:C1:38
Authority key identifier: 9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
Certificate issuer: /CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Certificate serial: 019D99D063DE8207BB09390A1962179B1147
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 05:01:04 +0000
Manifest this update: Fri 17 Apr 2026 05:01:04 +0000
Manifest next update: Sat 18 Apr 2026 05:01:04 +0000
Files and hashes: 1: XjOsjbNyG_7Z0Y40E5Yh6TkZfqk.roa (hash: 9owU8FSQINO3lTfR9sqtsGohFZw4GCK7SpkPSGYFxPs=)
2: nv9H-JUh2bSSt9BCG8J2kevwbv0.crl (hash: KS4DEleE4F4LaXXziT33dnrgOohdSVpHuv0CXJa8bFI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 05:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:d0:63:de:82:07:bb:09:39:0a:19:62:17:9b:11:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9eff47f89521d9b492b7d0421bc27691ebf06efd
Validity
Not Before: Apr 17 05:01:04 2026 GMT
Not After : Apr 18 05:01:04 2026 GMT
Subject: CN=a0b83d8011bcf920c38d440081fc50423b86c138
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:68:a0:f7:d1:4b:d7:82:0c:18:51:89:bb:56:
4c:8e:32:86:cf:40:ba:a6:8b:7f:25:05:a3:ee:b7:
24:f4:b2:da:82:73:03:6c:9e:79:d5:9a:17:b3:41:
c9:1b:12:53:99:8c:b9:fc:f4:b5:5f:88:39:ff:c8:
6a:71:44:53:64:5f:f3:08:b9:92:2b:c0:33:0c:2b:
18:34:56:15:cb:d4:2e:cb:d9:fd:e1:c4:82:ef:7a:
08:45:c9:42:60:36:cd:b2:b7:41:96:bb:41:b1:c1:
98:71:e6:8a:ff:54:51:20:79:fe:02:66:fe:2e:95:
4a:4c:b7:27:63:88:80:21:38:a6:26:4a:ab:b1:b0:
d3:70:4b:76:e8:c6:aa:c6:4c:f1:05:84:7a:3a:ec:
ae:22:e7:ad:dd:d3:be:4c:0c:bc:5b:80:e0:59:99:
9d:12:25:a0:2d:a2:fe:cd:71:a2:2f:c0:4b:38:7e:
10:78:a9:02:48:39:25:af:a3:4c:c3:3d:71:e6:e1:
f3:c9:7a:b3:1f:39:d5:94:56:5a:95:7a:f4:35:56:
eb:47:87:76:d5:d1:2d:88:a8:3d:aa:9c:1b:8d:2b:
95:17:89:cd:df:33:6c:0d:d0:25:46:ba:f7:61:95:
fb:98:0a:89:d1:d1:dd:e3:9e:ee:49:dd:71:92:9d:
f6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B8:3D:80:11:BC:F9:20:C3:8D:44:00:81:FC:50:42:3B:86:C1:38
X509v3 Authority Key Identifier:
keyid:9E:FF:47:F8:95:21:D9:B4:92:B7:D0:42:1B:C2:76:91:EB:F0:6E:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nv9H-JUh2bSSt9BCG8J2kevwbv0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/c39b2f-ce86-40bc-9ee5-9f0ad18f039a/1/nv9H-JUh2bSSt9BCG8J2kevwbv0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:f2:1f:94:84:0d:3b:1c:78:34:73:28:10:39:96:64:fd:2b:
7d:ee:39:56:17:60:39:83:e0:48:32:f0:6e:c2:bd:9a:63:89:
2a:3f:9f:5d:7c:18:e4:72:7a:ad:81:c9:2c:d1:02:31:9d:e6:
87:fb:0a:87:db:e8:12:26:f1:be:8d:45:7c:7c:d6:f0:7d:86:
70:4a:55:83:c7:2a:67:c0:29:83:ed:7e:bb:51:8a:35:21:b2:
af:67:d0:bb:f2:f6:c1:94:fd:08:fe:54:58:8b:59:6e:4c:4a:
aa:88:6f:8b:2c:0a:eb:e4:04:b3:d5:95:91:e4:76:96:f0:8a:
59:08:94:f5:4d:58:03:05:27:bc:f8:6f:2c:9b:e0:e9:18:1f:
71:9a:70:fd:93:a8:65:22:18:5b:25:18:f0:50:a7:69:3f:7b:
0a:5d:57:68:ab:3c:3e:59:37:f9:84:86:b0:6d:87:cc:99:85:
ab:2e:90:f3:75:1c:d0:53:b2:c7:b4:75:d1:36:9d:66:e2:83:
06:15:16:2e:b1:76:28:96:c3:a9:30:1d:32:96:28:47:72:0f:
49:cf:28:45:40:ea:9c:20:8c:91:25:bc:fc:ec:20:64:aa:b7:
0a:ec:9a:bc:10:11:6a:fe:e9:34:ec:2c:16:d7:ec:50:13:71:
1d:b6:fa:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:56:08 2026 by rpki-client