Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
File: nQp0muJcHLtlhx1BanmrSohKxGg.mft (raw, json)
Hash identifier: Y4zXM386yi2vJNCamdvbmqffqLEDSVF+OUvIVtmYs5A=
Subject key identifier: 99:63:90:BE:7D:49:15:7F:9F:B7:16:74:46:5D:F1:0D:74:E9:B6:CA
Authority key identifier: 9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
Certificate issuer: /CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Certificate serial: 019D9AE32D002D4D70F918DC8A04EEDAF729
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
Manifest number: 18C7
Signing time: Fri 17 Apr 2026 10:01:12 +0000
Manifest this update: Fri 17 Apr 2026 10:01:12 +0000
Manifest next update: Sat 18 Apr 2026 10:01:12 +0000
Files and hashes: 1: hmbiAgILODH-19HoC5IuydkCSIc.roa (hash: QWw9cp6g2MsHGOQThqrJzqfLHaqPLS5ug0EanzJlcKA=)
2: nQp0muJcHLtlhx1BanmrSohKxGg.crl (hash: y2LUcSPms3rJdXIrY+Uvl6ZLB43jLNYP/lM/eg6hHxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e3:2d:00:2d:4d:70:f9:18:dc:8a:04:ee:da:f7:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d0a749ae25c1cbb65871d416a79ab4a884ac468
Validity
Not Before: Apr 17 10:01:12 2026 GMT
Not After : Apr 18 10:01:12 2026 GMT
Subject: CN=996390be7d49157f9fb71674465df10d74e9b6ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:3b:0a:18:ca:69:7b:8c:7a:05:3c:5a:67:7f:
4d:3c:8e:b8:1b:cc:28:6b:d5:19:92:0b:44:c9:7a:
64:82:f5:0b:57:7c:ee:d0:0a:0a:f7:cb:20:dc:e3:
83:36:27:88:be:ea:f0:7c:16:2e:01:f0:37:a4:14:
33:b4:1f:41:aa:3c:f7:37:6c:07:27:30:a3:87:cc:
0f:46:82:b7:03:23:0a:70:4d:07:fc:db:34:9f:d1:
ef:4a:64:97:ab:f7:a3:90:ae:9b:5d:b6:77:70:a2:
24:d0:b0:26:cf:b2:5d:6e:31:78:18:99:a5:a8:13:
da:7a:b3:07:1f:83:1b:f1:ad:a1:0d:d8:f1:d0:6d:
23:3e:26:ae:8f:f5:df:28:21:e5:d6:e9:22:ac:90:
a7:1c:3b:7d:2f:ea:44:b3:d3:d1:4d:ec:97:8c:da:
e3:87:80:c1:3a:71:64:59:26:f8:16:12:66:df:e8:
b2:55:86:22:0c:ef:f6:a5:61:71:f3:8a:d5:f4:d0:
e7:cc:76:65:bf:c0:9b:ad:e2:00:96:15:3e:41:2a:
47:3f:77:f8:fb:50:b0:c7:4d:f5:6b:a3:c7:33:a3:
61:d8:94:7a:0d:13:7c:dc:d3:36:64:eb:16:36:63:
08:e3:4e:dd:f9:c4:6d:aa:e6:8a:0d:e9:01:7f:14:
95:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:63:90:BE:7D:49:15:7F:9F:B7:16:74:46:5D:F1:0D:74:E9:B6:CA
X509v3 Authority Key Identifier:
keyid:9D:0A:74:9A:E2:5C:1C:BB:65:87:1D:41:6A:79:AB:4A:88:4A:C4:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nQp0muJcHLtlhx1BanmrSohKxGg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/85d0a7-d802-41c4-81af-1a6d3c99dc48/1/nQp0muJcHLtlhx1BanmrSohKxGg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ab:35:ee:18:6b:bd:f8:13:47:83:7f:57:0b:aa:72:15:e3:b7:
68:e5:0e:52:5f:97:4a:ce:b8:a6:5c:05:aa:1f:3c:66:09:4d:
cb:f6:a8:02:5b:3a:26:44:6f:49:ea:d6:1b:ee:33:60:d9:5b:
a9:86:8a:99:3d:95:56:1c:bc:cf:68:03:94:47:7d:7a:e7:e8:
fd:56:08:78:54:a1:8d:a4:7c:02:0d:d6:86:13:4e:56:e6:12:
14:4c:15:8f:45:93:10:9c:38:49:e4:af:04:ca:81:2e:10:50:
40:04:36:4e:bf:5a:95:86:e0:02:3e:6e:1c:64:12:5f:2a:b1:
a3:4b:09:b0:4c:dd:c3:09:df:7f:d0:8d:dd:35:dc:1a:ac:b3:
db:d3:1c:df:a8:dd:a8:ad:6f:f5:5e:f5:d0:dc:8e:a6:16:52:
a0:94:6c:be:58:0e:a1:c5:5a:93:b0:1c:fc:5d:5a:52:6b:a3:
b5:be:6a:89:61:00:2f:fe:c7:7f:fc:a4:ae:9a:d2:fb:6d:a8:
01:6a:5f:9e:6f:e3:4a:a5:fe:13:aa:b5:7b:a7:44:35:db:b4:
76:6b:31:7e:95:43:ba:9f:e7:6b:06:0d:3c:38:9a:7b:22:de:
01:60:5b:61:c8:eb:d5:3d:62:c1:09:4b:28:1c:56:da:76:a1:
63:5b:b7:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:18:20 2026 by rpki-client