Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
File: _Nbe4Pi6PCIpPWLscB7yULzI0uc.mft (raw, json)
Hash identifier: xpmYUHVw1DrvWyViqmOd4zy9Klp4syDVuhe6eYekWn8=
Subject key identifier: 6C:52:07:2C:06:A4:D7:97:4D:75:55:E2:3C:46:9A:79:20:D4:36:2A
Authority key identifier: FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
Certificate issuer: /CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Certificate serial: 019D9A3EDBD23F8DE4590B57A4BAAE5DA3C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
Manifest number: 089D
Signing time: Fri 17 Apr 2026 07:01:43 +0000
Manifest this update: Fri 17 Apr 2026 07:01:43 +0000
Manifest next update: Sat 18 Apr 2026 07:01:43 +0000
Files and hashes: 1: _Nbe4Pi6PCIpPWLscB7yULzI0uc.crl (hash: mNHdQyK72o09tPCCSlRWFBcDpjmt9+FsyMhaSq+TiDw=)
2: cGNM2kUYGwh1pqp3KDfnuGuO-40.roa (hash: RBzO91NF0DSPBv6o+tDtIFzqxm7krs8U6K6aFGD7SjE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:db:d2:3f:8d:e4:59:0b:57:a4:ba:ae:5d:a3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd6dee0f8ba3c22293d62ec701ef250bcc8d2e7
Validity
Not Before: Apr 17 07:01:43 2026 GMT
Not After : Apr 18 07:01:43 2026 GMT
Subject: CN=6c52072c06a4d7974d7555e23c469a7920d4362a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:6d:26:db:10:36:1d:6f:40:aa:86:9d:e9:db:
7f:53:ed:7c:35:d9:03:6b:bf:89:c8:fc:8f:2a:b1:
5e:01:60:49:f4:db:28:e7:cf:12:b5:15:8f:c8:34:
a4:fb:4c:21:d6:af:2c:b7:11:34:75:08:2e:d5:ce:
d3:93:5b:dd:80:92:9b:a1:a3:31:3b:ba:14:56:d3:
eb:3e:41:97:d2:69:51:b8:e1:fc:80:57:1c:92:f2:
9f:7c:5b:7b:f8:74:56:eb:de:36:1b:24:7a:09:b3:
2b:4f:40:09:92:a8:e1:09:b2:0a:72:52:8b:db:e9:
e8:43:40:41:26:dd:31:f1:cd:fc:72:54:82:fc:a8:
64:69:55:5c:11:3e:43:fe:c5:4d:68:b6:ae:ce:7a:
7d:bc:fd:51:c1:4c:1a:16:15:a3:21:9b:19:dc:30:
10:f7:ca:d2:8d:25:ad:38:01:65:be:3b:64:17:0a:
e1:c5:87:1e:20:56:90:fa:a0:e9:7c:e3:41:9a:bb:
ea:1e:3d:12:df:6e:ab:ee:3d:b5:5d:fe:b7:31:b4:
3e:85:b9:42:dc:4a:74:f4:96:2e:cd:54:85:b5:84:
61:64:d8:4a:fa:d5:11:08:85:db:fc:db:cb:08:38:
04:f8:e0:eb:68:e1:1f:22:d3:41:9f:af:da:fe:4e:
00:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:52:07:2C:06:A4:D7:97:4D:75:55:E2:3C:46:9A:79:20:D4:36:2A
X509v3 Authority Key Identifier:
keyid:FC:D6:DE:E0:F8:BA:3C:22:29:3D:62:EC:70:1E:F2:50:BC:C8:D2:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nbe4Pi6PCIpPWLscB7yULzI0uc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/d2dc9b-bcdc-42de-a1ae-42ce2d2be097/1/_Nbe4Pi6PCIpPWLscB7yULzI0uc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:96:81:8b:6c:16:de:22:be:93:e9:53:60:70:82:f7:6d:1b:
1e:09:31:41:e2:05:00:0d:1e:31:3c:02:be:6d:24:4a:c7:d4:
72:d3:c0:89:ec:cf:c8:46:b1:ec:92:14:ee:95:66:7e:02:f1:
55:07:76:46:70:47:e0:19:e6:63:78:ae:fc:e5:93:fd:b1:d0:
59:e9:f0:9f:07:62:0f:48:76:ef:64:6b:ea:29:f0:e2:ba:ad:
46:0a:a9:76:13:1b:fb:15:5c:a4:ee:ed:8f:65:b2:20:f2:66:
87:b1:0f:e8:64:da:cd:f6:0f:cf:c2:30:ea:a1:dd:d5:16:37:
c2:17:5a:3e:8a:29:9e:e4:5f:43:e4:6c:95:d1:0b:5c:59:2c:
08:c6:09:ef:3b:16:04:0f:ea:01:ce:19:3c:3d:ff:aa:24:87:
84:a9:44:fb:ad:35:fa:5f:1a:32:f9:d8:c7:14:9e:bc:61:35:
60:c3:80:7f:ac:e4:e5:f0:1f:5d:96:31:5e:ef:51:04:d4:0f:
fa:73:2f:32:92:04:9a:a3:99:38:bf:13:07:11:fb:d5:4d:aa:
41:eb:81:c1:ff:45:49:e7:a6:45:5d:60:01:ef:b3:75:fb:38:
fb:11:47:87:18:e7:6b:93:bf:73:64:bc:03:8a:29:76:b4:15:
03:1a:65:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:03:36 2026 by rpki-client