Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
File: NfH9aecZau9eKbp5VoDaw-NIaMg.mft (raw, json)
Hash identifier: UkARRLhqN5EDNihnHx12AwqkhjvThNW2aCQJYOwYCYM=
Subject key identifier: F6:78:CB:CF:E8:A8:94:F7:32:FF:C6:A7:34:95:D1:83:CA:1A:CA:C8
Authority key identifier: 35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
Certificate issuer: /CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Certificate serial: 019D9C2C68659B829B70E89562D7BDA3AA01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
Manifest number: 1847
Signing time: Fri 17 Apr 2026 16:00:49 +0000
Manifest this update: Fri 17 Apr 2026 16:00:49 +0000
Manifest next update: Sat 18 Apr 2026 16:00:49 +0000
Files and hashes: 1: NfH9aecZau9eKbp5VoDaw-NIaMg.crl (hash: HCQyOey0d7bDXvpRdtV86ubvbp0g/hiYPb4YxlMaHtc=)
2: zX13-oU7cBG6cIg8ROGm1tDQrik.roa (hash: iojJpLqSVjV4cIjGJVDdqQHg6vG+JzagzhFK3HWdZsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:47:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:68:65:9b:82:9b:70:e8:95:62:d7:bd:a3:aa:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35f1fd69e7196aef5e29ba795680dac3e34868c8
Validity
Not Before: Apr 17 16:00:49 2026 GMT
Not After : Apr 18 16:00:49 2026 GMT
Subject: CN=f678cbcfe8a894f732ffc6a73495d183ca1acac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:13:e8:af:b8:19:b3:46:25:a3:ff:c4:64:
b5:98:3d:0a:90:59:25:86:c5:27:31:bd:2a:ee:73:
1a:b6:49:a1:a0:ce:03:b6:6e:61:4c:3f:da:7d:de:
55:90:e4:d7:4c:c3:94:44:b4:13:7c:3f:15:f2:b0:
34:90:56:9f:9b:a5:8f:44:84:66:c0:84:ca:a2:f5:
0e:ec:8a:38:40:8b:c6:2c:db:f1:06:05:be:96:cf:
ea:cf:51:22:4a:a4:cb:28:4b:ce:9b:7a:7a:6f:bc:
7c:0c:a4:87:c5:8e:fd:17:a7:9e:39:7b:c7:20:54:
ae:e9:32:6d:be:14:02:60:dd:54:34:f4:85:a3:ae:
6b:eb:7c:0b:4d:ef:4d:dd:e7:fd:94:d4:04:a7:e6:
76:5d:f9:99:2b:6c:75:ba:4d:d7:9e:34:4b:ed:22:
9b:10:e3:95:42:41:72:6a:7d:13:b4:bf:2c:d0:9a:
f8:04:6b:71:82:5b:10:b8:1e:21:15:b0:66:06:65:
8a:7a:b4:aa:0a:0c:d1:7e:9b:49:1d:df:0d:e9:a4:
e8:e6:a6:b1:b2:fd:6b:fb:b2:1b:b8:aa:27:ad:d0:
52:32:3a:5b:83:2b:1b:f2:c3:92:1d:54:fc:f2:bb:
b3:97:b0:1a:b6:06:b7:a4:0e:c0:35:f5:67:8f:69:
01:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:78:CB:CF:E8:A8:94:F7:32:FF:C6:A7:34:95:D1:83:CA:1A:CA:C8
X509v3 Authority Key Identifier:
keyid:35:F1:FD:69:E7:19:6A:EF:5E:29:BA:79:56:80:DA:C3:E3:48:68:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NfH9aecZau9eKbp5VoDaw-NIaMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/66f379-f598-4e60-b493-f9ca7124f098/1/NfH9aecZau9eKbp5VoDaw-NIaMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:db:79:d3:51:a8:7f:38:ae:2b:6b:33:34:c4:55:28:de:19:
fa:b3:e4:62:07:75:3b:41:4a:19:de:85:e9:84:3d:5b:e3:4d:
49:30:73:a6:86:a7:e9:03:ce:54:4d:65:f8:4f:49:9f:67:87:
08:ce:9c:8f:9a:27:84:3a:8e:c7:fa:5b:d6:da:05:f1:bf:5b:
7a:7e:b6:34:cf:b5:c5:f0:0f:92:82:66:35:e0:39:7a:b3:fa:
02:57:9a:50:6b:de:49:d0:38:eb:e0:b4:c8:a7:b7:77:d5:60:
15:f2:58:8c:f5:72:03:f4:18:7b:56:42:3d:d9:6d:cc:38:a1:
9a:d4:a1:6b:01:77:fe:db:5c:5a:25:fe:2d:18:0e:ea:b2:41:
1d:aa:2f:eb:97:e8:c0:82:ce:96:4b:c1:a7:fd:d8:97:a4:8c:
c2:8f:5c:8f:d1:52:e8:17:41:ca:ef:19:80:19:05:c6:95:95:
df:7f:79:33:5d:c1:b5:fb:e6:aa:51:44:71:22:cf:b9:d9:3e:
57:09:53:ed:a1:e8:d6:b3:fa:ee:08:96:7d:e1:34:28:12:d3:
df:51:ae:50:4c:68:b3:e9:54:bf:56:97:62:5f:24:df:4e:ee:
9c:2e:2d:7a:1b:25:2f:84:fd:75:46:42:37:d7:ca:3c:c7:00:
3e:1b:bd:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:06 2026 by rpki-client