Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
File: nJGTyUKgcOtue3bTPBFwwauqq8A.mft (raw, json)
Hash identifier: 1m/I3Z8FbpAfLOjpjWTlUR3n+NBn0xeZA+r4VIyfeXg=
Subject key identifier: 45:F8:CB:27:84:10:06:67:D4:6E:D9:D3:EF:EF:88:67:9A:DF:FA:90
Authority key identifier: 9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
Certificate issuer: /CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Certificate serial: 019DA566D0C989D907393B56AB72FA6A3662
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
Manifest number: 03CD
Signing time: Sun 19 Apr 2026 11:01:11 +0000
Manifest this update: Sun 19 Apr 2026 11:01:11 +0000
Manifest next update: Mon 20 Apr 2026 11:01:11 +0000
Files and hashes: 1: nJGTyUKgcOtue3bTPBFwwauqq8A.crl (hash: q31aSIC9qhYGWeitbavxeFL1pMROGie0uVAMeUPUP8c=)
2: sYd3XN4uHfxAz8H1K9PwUScQprc.roa (hash: DDMqRvtsXQN4lxerdF1mUWxEx9IF8CVqZoQJ/ajBN8A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:d0:c9:89:d9:07:39:3b:56:ab:72:fa:6a:36:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9193c942a070eb6e7b76d33c1170c1abaaabc0
Validity
Not Before: Apr 19 11:01:11 2026 GMT
Not After : Apr 20 11:01:11 2026 GMT
Subject: CN=45f8cb2784100667d46ed9d3efef88679adffa90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:2e:69:14:52:91:d8:78:bb:38:b5:5c:39:02:
db:ae:b8:cc:08:fb:15:e7:fc:2b:3d:9a:60:4b:3a:
44:c2:de:0b:27:72:f3:26:cb:50:de:55:71:37:3d:
f9:11:e2:44:a7:84:af:ac:f4:2d:d3:71:e9:d0:07:
10:9a:17:a6:e4:7b:89:89:f3:4e:1e:df:f5:ae:98:
dc:c1:03:e8:da:53:09:2d:78:c4:54:17:d0:e9:28:
92:b5:83:39:d6:75:88:b2:bd:b5:56:57:7e:7c:6c:
b0:73:be:6a:b3:77:ab:90:65:79:1b:8c:76:70:2d:
03:7c:fb:63:d2:56:b4:4d:09:10:f2:55:6d:49:ec:
6a:f8:64:b8:cc:60:00:d6:fe:21:4a:2d:f9:8f:49:
6c:5c:6f:bc:5d:8b:98:7b:a0:cb:d5:12:df:f3:cf:
bf:28:be:f2:04:76:f8:3b:36:17:be:9b:4c:4e:7d:
9b:9b:30:c8:c5:af:09:25:c6:b9:63:3d:3f:eb:fb:
d2:78:73:9f:a9:65:6d:e0:a2:04:20:f6:47:58:9f:
a2:99:cf:89:31:b0:d1:62:7d:fd:0f:38:8d:64:68:
a9:36:73:5a:df:03:4c:f7:3f:7b:3d:82:cf:84:38:
73:5b:06:1a:d7:d4:4f:63:da:9b:0d:0b:f0:85:63:
c9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:F8:CB:27:84:10:06:67:D4:6E:D9:D3:EF:EF:88:67:9A:DF:FA:90
X509v3 Authority Key Identifier:
keyid:9C:91:93:C9:42:A0:70:EB:6E:7B:76:D3:3C:11:70:C1:AB:AA:AB:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJGTyUKgcOtue3bTPBFwwauqq8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/e67e82-74d1-4598-80ee-ce0e97bab6a7/1/nJGTyUKgcOtue3bTPBFwwauqq8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:ac:45:1e:46:d2:e1:3e:97:c7:3e:28:9b:ea:47:af:77:a3:
f9:e3:cb:7b:75:d5:4b:30:ec:b0:07:e0:c7:d4:f1:99:8b:ea:
64:d6:a7:1e:4c:a8:68:c5:b3:d3:59:8c:a9:4d:86:76:64:a9:
87:d7:49:14:ae:6c:0b:7a:26:a8:7f:76:18:14:80:e4:6e:c4:
16:fd:d4:ab:7c:d5:71:bc:89:e9:d9:4e:d2:73:87:5a:f4:41:
40:3a:18:72:95:77:82:48:08:5f:3e:5d:9f:e7:2f:a5:22:b2:
3d:8d:c6:4d:7a:47:54:cd:72:dc:84:20:e0:e4:75:14:b4:23:
6d:f4:da:b0:2e:be:9e:b5:2e:06:fe:7b:5c:cb:9e:55:11:53:
ad:b4:21:cf:55:79:69:33:9f:d3:82:d0:7e:b2:1b:bb:b1:28:
9f:8d:cb:2b:6c:9e:4d:6d:95:18:a0:4a:bf:c8:7a:43:7c:44:
9e:7b:0f:51:3c:9a:e5:ee:b8:a9:3c:f8:50:7f:27:e1:cc:de:
09:49:19:83:f7:fa:6e:eb:17:54:22:23:1c:63:58:45:2e:70:
64:47:e4:20:05:67:ec:db:05:0d:0b:23:42:d7:62:89:60:3f:
52:62:1c:2d:ab:6b:ee:59:90:0e:d5:6d:6f:a8:98:b1:94:d8:
f1:85:cd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:13:43 2026 by rpki-client