Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
File: Nse0TnxfKbnepAKsgFFgspjPDaY.mft (raw, json)
Hash identifier: ZF9cU/DwqOSiDXcK+TQPsO00QGga9ZeBCW27bJ1Enaw=
Subject key identifier: C7:B9:47:02:88:C7:EA:72:B9:1D:DD:50:D4:59:40:AC:01:FA:A7:98
Authority key identifier: 36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
Certificate issuer: /CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Certificate serial: 019D992B2686F3BAC2ADDFAE55E1409DAE1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 02:00:35 +0000
Manifest this update: Fri 17 Apr 2026 02:00:35 +0000
Manifest next update: Sat 18 Apr 2026 02:00:35 +0000
Files and hashes: 1: Nse0TnxfKbnepAKsgFFgspjPDaY.crl (hash: zHxXH8Y1Jrx7p5cfwD5UJrDt0EeiuzeM0HkYCHZTSkU=)
2: r0kmA8KLPJyGWZOOvwVJTGeF-U4.roa (hash: LClJs+JlqTHZyPqNwNqgghz6JF/6AHMaeJCgatSBq2A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:26:86:f3:ba:c2:ad:df:ae:55:e1:40:9d:ae:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c7b44e7c5f29b9dea402ac805160b298cf0da6
Validity
Not Before: Apr 17 02:00:35 2026 GMT
Not After : Apr 18 02:00:35 2026 GMT
Subject: CN=c7b9470288c7ea72b91ddd50d45940ac01faa798
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:79:5e:25:0a:94:7c:a6:f1:6d:d3:3a:44:f8:
ea:63:9b:39:ea:53:2d:2f:65:18:32:85:5c:71:45:
c6:26:71:6a:69:d2:ef:b6:86:41:2d:12:fa:bd:0a:
e3:12:6a:64:1d:4c:26:45:a7:e5:fc:ee:0e:0c:27:
08:30:f1:a4:91:d1:bf:00:ad:09:67:b7:9b:55:31:
11:bc:dc:9d:03:0d:5b:c1:1a:0b:40:c0:b2:ea:c5:
ec:66:7b:f0:81:c1:7f:e3:67:d2:d6:de:0c:c4:3e:
81:e2:93:f3:4a:f0:af:b0:2a:d7:77:49:bd:dd:72:
11:90:9f:6c:da:ec:50:07:7f:18:48:63:6e:e0:e0:
60:f5:97:af:d7:e9:59:6f:52:04:e8:93:14:b4:ff:
fc:a1:d1:33:ca:f9:21:04:5e:cf:c6:b8:fb:68:10:
d6:ce:ad:46:ee:c8:dd:1e:62:7f:19:40:86:69:8c:
48:2f:e0:8c:6b:23:1f:aa:b7:17:59:26:6a:2a:fa:
12:ea:c4:f2:a1:46:6e:2a:90:ae:19:78:99:86:65:
6b:57:a9:8f:23:cd:15:40:c4:8c:a7:40:75:ea:db:
61:cd:33:02:de:7b:f6:07:b5:21:4a:f7:c8:3e:a2:
21:8f:2f:88:b6:d6:97:61:70:8c:7a:2f:8e:18:59:
a5:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B9:47:02:88:C7:EA:72:B9:1D:DD:50:D4:59:40:AC:01:FA:A7:98
X509v3 Authority Key Identifier:
keyid:36:C7:B4:4E:7C:5F:29:B9:DE:A4:02:AC:80:51:60:B2:98:CF:0D:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nse0TnxfKbnepAKsgFFgspjPDaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f7138-46d9-498b-af6d-6d6582b2b5b6/1/Nse0TnxfKbnepAKsgFFgspjPDaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:93:eb:0e:6d:ec:99:a6:57:5a:54:c8:11:3a:3c:81:81:6a:
11:36:1a:25:dc:8c:17:10:76:fc:e6:b2:e2:4b:9a:b7:fa:23:
04:a9:24:db:de:88:1f:d0:91:4a:bf:23:36:ca:c5:bc:73:7c:
42:0a:95:4e:b9:b6:bc:70:53:5d:83:c5:a0:c9:a2:95:f0:44:
64:a7:4f:c3:b1:e2:e1:75:60:95:1b:99:d2:f1:47:ca:6a:bf:
5c:07:a1:8a:5e:f0:66:4c:05:64:ae:30:b3:2a:54:77:ae:b0:
e9:41:e2:b9:97:a1:54:46:02:df:e9:d6:0c:2a:17:7a:c9:65:
73:09:17:31:d3:f9:02:90:b6:e0:ca:44:0f:c7:7e:91:10:a8:
d6:9c:64:76:fe:cc:b5:8c:c7:2c:16:42:22:5d:21:8f:c0:e6:
83:2b:dd:0c:8d:d6:27:c7:b7:a7:e8:91:14:4b:36:76:1a:ee:
77:3d:d1:02:0d:cf:31:ea:b1:36:26:1e:a7:a3:62:7e:46:93:
0b:1c:52:43:f4:f0:8e:75:93:21:c6:32:ef:1a:a6:6a:29:01:
d5:3a:c0:bd:61:c5:3a:d3:f4:89:84:7d:66:5b:02:1b:6d:6f:
2f:9c:8e:a4:2a:cd:19:10:35:b6:90:56:cd:33:a3:b2:07:2b:
db:c7:72:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:32:36 2026 by rpki-client