Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
File: NkK7yD4owQPBfVogHt71ZyY02-g.mft (raw, json)
Hash identifier: l6j/dcj8SZpjSpiPF/+1LYlS7/1GlIZ7EwlokjSA88w=
Subject key identifier: A7:DA:61:E3:F0:AA:82:11:87:0F:72:04:27:F1:C4:FC:EE:0F:F1:7D
Authority key identifier: 36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
Certificate issuer: /CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Certificate serial: 019DA41CC214E7B025F601040A9439B699F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
Manifest number: 13C3
Signing time: Sun 19 Apr 2026 05:00:41 +0000
Manifest this update: Sun 19 Apr 2026 05:00:41 +0000
Manifest next update: Mon 20 Apr 2026 05:00:41 +0000
Files and hashes: 1: NkK7yD4owQPBfVogHt71ZyY02-g.crl (hash: wxa1nOfrl3vBnI6Ri1pSQesdQBV+qlJGBZVUUw4OxL8=)
2: dZFOf_4rHWP0daflfl4Ux8b9Boc.roa (hash: 0QO7/byKb+RG54RJyLydLAZJC5oemICOMqsjQMbIvGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:1c:c2:14:e7:b0:25:f6:01:04:0a:94:39:b6:99:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3642bbc83e28c103c17d5a201edef5672634dbe8
Validity
Not Before: Apr 19 05:00:41 2026 GMT
Not After : Apr 20 05:00:41 2026 GMT
Subject: CN=a7da61e3f0aa8211870f720427f1c4fcee0ff17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:b8:39:00:e2:d5:5f:03:20:83:b4:bb:ba:b1:
06:96:c3:ff:f0:f0:77:4a:0e:c1:45:a9:96:68:bf:
f1:b7:2a:a7:b1:8c:c4:2c:5e:02:b0:ab:f9:00:b0:
a2:37:c5:a0:ce:03:ab:43:24:81:fa:45:ea:20:b1:
69:44:6f:b2:fd:05:a0:58:fd:4b:4a:4d:bd:2d:97:
bb:7f:5b:aa:e8:1e:db:5e:99:d6:46:e6:35:7c:97:
d1:d3:b3:35:55:07:71:a7:16:f5:ce:2e:a9:2c:32:
98:4c:39:92:9b:da:85:c6:71:c7:e0:d7:05:45:43:
59:45:a4:73:79:1f:36:d3:9a:ad:4c:b5:d3:13:b6:
7d:1f:50:02:e9:0c:5d:90:33:1d:fd:f8:b4:80:36:
af:a2:2c:46:af:dd:28:b8:73:76:35:3e:4a:41:0c:
7c:3c:d0:96:c0:ea:23:07:56:64:09:81:ca:1f:54:
2e:89:81:66:15:be:76:70:02:04:bd:bb:32:84:41:
e8:df:24:61:d6:e2:ad:17:1f:f5:e6:0c:49:8d:82:
d6:58:02:dc:26:1b:d4:7e:6b:22:b7:54:54:1a:48:
d8:63:fd:1a:1d:04:08:8e:a7:cc:06:79:1e:90:ba:
a4:0f:26:24:52:fe:5e:9d:94:f8:67:b7:84:9c:f8:
6e:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:DA:61:E3:F0:AA:82:11:87:0F:72:04:27:F1:C4:FC:EE:0F:F1:7D
X509v3 Authority Key Identifier:
keyid:36:42:BB:C8:3E:28:C1:03:C1:7D:5A:20:1E:DE:F5:67:26:34:DB:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NkK7yD4owQPBfVogHt71ZyY02-g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/1519a9-ac9f-4f5d-bf4f-6cb2e02caef2/1/NkK7yD4owQPBfVogHt71ZyY02-g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:61:77:fb:41:d7:b7:32:8d:fc:92:73:3e:4b:a1:7a:91:6c:
0f:a2:f9:88:70:a5:bc:bb:ad:f8:4b:23:42:7f:30:0c:0d:bf:
8c:26:06:de:ba:ab:48:0c:78:57:23:fa:b8:eb:d8:40:64:3a:
f2:4e:9f:69:76:47:f7:a5:b9:d5:d7:51:ad:6c:f6:d8:e1:5b:
ac:3b:20:94:85:56:42:73:52:c9:51:de:a4:34:74:f8:cd:2f:
29:48:b3:b4:56:73:2d:26:fa:e7:96:bb:19:b3:d1:70:1a:6e:
e3:6d:d6:22:06:05:69:76:2f:6a:92:e9:80:9a:8e:e1:cf:9b:
4c:e8:ba:1a:71:67:c0:03:e7:4c:d4:0e:10:d4:73:ac:02:73:
78:8b:b4:23:d7:d9:49:36:cb:78:80:42:6c:e4:4d:11:83:98:
76:d2:18:96:5b:c5:c7:5b:af:19:62:ed:9d:45:41:12:bc:87:
ed:3f:36:eb:ba:7d:10:9f:e3:33:43:c0:f4:f2:5e:e0:e6:7d:
e2:64:04:16:9e:07:d5:68:fb:43:51:4c:78:54:8e:5a:1a:9f:
85:b1:62:f6:16:8d:de:0d:38:fc:6b:a6:34:e7:7e:dc:3c:90:
0c:26:b4:13:87:03:f7:ef:68:98:6d:87:4c:7f:34:48:d2:48:
81:0a:14:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:30:05 2026 by rpki-client