Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
File: nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft (raw, json)
Hash identifier: 20yrfhKxXvkrRPqdW0y828rla+XcGPxtc71a3qHXTZI=
Subject key identifier: 07:E0:53:34:96:3C:82:25:5C:CF:BB:8A:18:05:F1:83:BF:92:09:A3
Authority key identifier: 9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
Certificate issuer: /CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Certificate serial: 019D9B19A008B374FF66139FBEAA94BB9042
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
Manifest number: 18C2
Signing time: Fri 17 Apr 2026 11:00:40 +0000
Manifest this update: Fri 17 Apr 2026 11:00:40 +0000
Manifest next update: Sat 18 Apr 2026 11:00:40 +0000
Files and hashes: 1: D1Nv2f8o0HAr_nbVAGPtRiAi3cw.roa (hash: R0V6ZIQY2hcuRRo+byPK6DVVEuSr1ojs/WwAjiQIcr8=)
2: nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl (hash: xrVkD+MAEVWK8WGCki238Zu72sabkgZabp6b5yhRQt0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:a0:08:b3:74:ff:66:13:9f:be:aa:94:bb:90:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d23c330ebe853e125b0c1ad2b16d79d25e4f3f8
Validity
Not Before: Apr 17 11:00:40 2026 GMT
Not After : Apr 18 11:00:40 2026 GMT
Subject: CN=07e05334963c82255ccfbb8a1805f183bf9209a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:ed:9e:91:a7:11:26:a3:6f:ff:1d:b3:f7:1b:
69:0d:64:9d:55:75:8c:21:f6:5b:fe:dc:7b:c4:60:
83:df:b6:b8:9a:54:4d:74:88:ea:4d:5d:9c:cf:c9:
0a:02:c5:cd:7d:95:19:8a:14:00:97:5a:48:eb:82:
57:07:a1:10:30:bf:58:d3:32:4c:bf:05:93:57:08:
06:b4:71:b7:96:1c:da:57:fa:93:b9:88:1b:3d:7c:
39:5d:d5:7c:1e:6a:f7:f2:f4:2c:40:76:8d:4c:16:
db:90:d0:2b:0c:32:d5:c0:fa:d6:cc:6d:e9:87:17:
b3:5b:21:bb:15:30:ab:52:10:aa:67:a4:19:a3:2b:
08:cb:1f:17:ef:f9:5d:59:f5:25:9d:45:e4:e3:6f:
00:61:d8:0b:3f:7c:e4:23:9e:70:2f:f3:a3:38:29:
d6:28:18:fe:9f:3a:a4:b0:5f:47:af:f8:ac:89:8d:
b7:70:46:d8:06:eb:ae:c5:da:d9:11:16:19:92:fe:
10:85:cd:1f:66:53:14:c6:dd:93:ab:7d:17:f3:fa:
ac:6b:06:57:6e:7c:9a:1c:10:51:88:a8:66:77:9e:
98:04:24:d6:a7:38:ef:e3:52:2c:5b:82:df:b8:9f:
c6:da:5b:c8:d9:b9:d4:a5:2d:f2:b6:36:54:5c:18:
42:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E0:53:34:96:3C:82:25:5C:CF:BB:8A:18:05:F1:83:BF:92:09:A3
X509v3 Authority Key Identifier:
keyid:9D:23:C3:30:EB:E8:53:E1:25:B0:C1:AD:2B:16:D7:9D:25:E4:F3:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSPDMOvoU-ElsMGtKxbXnSXk8_g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/0a94e4-001c-4d15-91e9-47a412815fb4/1/nSPDMOvoU-ElsMGtKxbXnSXk8_g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b3:f8:4e:dc:56:4c:07:55:f7:7e:da:57:50:10:b0:44:92:
d6:0a:c9:61:af:60:2a:75:2f:54:ae:62:10:c8:7e:c7:21:94:
bc:46:be:0c:f5:c4:75:e6:2e:ae:fe:22:98:c2:a3:14:c0:49:
b0:c5:e5:be:0d:8a:3b:3f:e4:08:64:77:30:73:34:61:2f:86:
ee:a5:81:7b:51:b4:94:69:55:61:8d:a6:62:f9:0b:84:fc:e7:
0a:86:1c:f7:0c:c5:e6:93:25:37:50:f5:50:e5:7d:1a:7c:60:
8a:cc:02:a9:2a:93:65:73:bb:b9:ce:ab:3e:44:d4:55:bf:ce:
bc:50:c2:ab:38:e3:e2:7e:8a:df:d3:b3:06:a6:4e:ec:3c:ed:
e7:6a:90:58:20:fe:86:0c:35:1a:fd:38:68:d7:04:21:5c:fa:
87:52:87:1c:7b:75:01:43:29:38:d5:12:11:c4:37:40:0e:1a:
c3:86:58:36:dd:b4:62:09:ae:43:1b:23:50:60:76:6d:13:2f:
82:54:7b:be:f6:7c:0a:88:2f:27:57:a3:dd:75:2d:4a:46:ff:
ae:33:95:a6:b8:df:18:8b:de:57:5c:cb:40:27:51:03:ee:fb:
92:0e:8e:87:48:e4:2a:01:54:e3:ca:6e:af:2c:21:e2:f0:b6:
75:1a:fc:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bGaAIs3T/ZhOfvqqUu5BCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMjNjMzMwZWJlODUzZTEyNWIwYzFhZDJiMTZkNzlkMjVl
NGYzZjgwHhcNMjYwNDE3MTEwMDQwWhcNMjYwNDE4MTEwMDQwWjAzMTEwLwYDVQQD
EygwN2UwNTMzNDk2M2M4MjI1NWNjZmJiOGExODA1ZjE4M2JmOTIwOWEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAle2ekacRJqNv/x2z9xtpDWSdVXWM
IfZb/tx7xGCD37a4mlRNdIjqTV2cz8kKAsXNfZUZihQAl1pI64JXB6EQML9Y0zJM
vwWTVwgGtHG3lhzaV/qTuYgbPXw5XdV8Hmr38vQsQHaNTBbbkNArDDLVwPrWzG3p
hxezWyG7FTCrUhCqZ6QZoysIyx8X7/ldWfUlnUXk428AYdgLP3zkI55wL/OjOCnW
KBj+nzqksF9Hr/isiY23cEbYBuuuxdrZERYZkv4Qhc0fZlMUxt2Tq30X8/qsawZX
bnyaHBBRiKhmd56YBCTWpzjv41IsW4LfuJ/G2lvI2bnUpS3ytjZUXBhCPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAfgUzSWPIIlXM+7ihgF8YO/kgmjMB8GA1UdIwQY
MBaAFJ0jwzDr6FPhJbDBrSsW150l5PP4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTkt
NDdhNDEyODE1ZmI0LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8wYTk0ZTQtMDAxYy00ZDE1LTkxZTktNDdhNDEyODE1ZmI0
LzEvblNQRE1Pdm9VLUVsc01HdEt4YlhuU1hrOF9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh7P4TtxW
TAdV937aV1AQsESS1grJYa9gKnUvVK5iEMh+xyGUvEa+DPXEdeYurv4imMKjFMBJ
sMXlvg2KOz/kCGR3MHM0YS+G7qWBe1G0lGlVYY2mYvkLhPznCoYc9wzF5pMlN1D1
UOV9GnxgiswCqSqTZXO7uc6rPkTUVb/OvFDCqzjj4n6K39OzBqZO7Dzt52qQWCD+
hgw1Gv04aNcEIVz6h1KHHHt1AUMpONUSEcQ3QA4aw4ZYNt20YgmuQxsjUGB2bRMv
glR7vvZ8CogvJ1ej3XUtSkb/rjOVprjfGIveV1zLQCdRA+77kg6Oh0jkKgFU48pu
rywh4vC2dRr8OQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:09 2026 by rpki-client