Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
File: NcClulvILiDgRvu1TAZYBvTHtqE.mft (raw, json)
Hash identifier: 0cyIsNSXNoVO9y5ih+LzGSWgNjCSOmRIhq+WQqp3TgA=
Subject key identifier: 44:5C:BE:87:69:68:56:EC:C3:BC:FC:D8:41:57:17:2A:3C:C1:4E:A6
Authority key identifier: 35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
Certificate issuer: /CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Certificate serial: 019DA4F8599DFC9AAAE83D4D9F4EB3E46F5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 09:00:32 +0000
Manifest this update: Sun 19 Apr 2026 09:00:32 +0000
Manifest next update: Mon 20 Apr 2026 09:00:32 +0000
Files and hashes: 1: Gc2XvyP01-fby2wIcpCQAXK9NNI.roa (hash: TqTwmJ2kXyM/+f6YO1uN50U7uVnjd7tFzIbHZN9RIuA=)
2: NcClulvILiDgRvu1TAZYBvTHtqE.crl (hash: xJrgnMTogDMFqQF9GZDBKncZlDdZ1g8KK44XDaq+xB0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:f8:59:9d:fc:9a:aa:e8:3d:4d:9f:4e:b3:e4:6f:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35c0a5ba5bc82e20e046fbb54c065806f4c7b6a1
Validity
Not Before: Apr 19 09:00:32 2026 GMT
Not After : Apr 20 09:00:32 2026 GMT
Subject: CN=445cbe87696856ecc3bcfcd84157172a3cc14ea6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ca:b8:f9:17:bb:fa:f2:ef:da:77:24:e1:25:
c3:cf:d5:3e:96:16:8c:6e:c0:b9:dc:92:b6:33:47:
e2:83:b9:ce:33:4d:64:ff:78:df:0a:60:0c:f3:6a:
81:ba:74:8a:e3:09:97:8c:3c:ab:a0:2d:4e:1d:5c:
63:b2:52:48:ba:08:f9:79:0d:ef:e3:bc:87:80:54:
ad:94:52:12:ca:51:92:b3:d4:a8:00:6b:88:20:39:
dc:85:5d:10:97:07:6e:99:1d:f8:38:9a:8e:dd:24:
ce:b2:fc:5a:77:b3:6d:70:72:48:80:c4:29:d9:40:
36:e9:3d:e3:e8:b3:7f:b4:11:e4:dc:57:a2:28:62:
23:fd:3f:29:26:33:81:93:b8:de:18:3e:e6:27:29:
fc:35:44:6d:23:1b:3b:bd:88:cb:ed:ae:b3:ce:5a:
01:d6:dd:f1:4d:e4:16:1e:d4:7a:73:58:fe:e8:21:
c6:5b:41:57:74:4c:04:3b:02:ee:73:cd:d4:f7:50:
05:3e:d5:91:2b:cf:da:f7:c5:01:8c:60:db:13:cd:
21:6f:14:8a:11:f3:66:0d:3b:3e:0e:17:b4:32:78:
65:06:32:d9:17:6a:61:86:03:0e:94:8d:33:eb:4c:
e8:a3:62:3c:24:d6:d5:42:e7:2b:34:58:e9:74:e4:
36:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:5C:BE:87:69:68:56:EC:C3:BC:FC:D8:41:57:17:2A:3C:C1:4E:A6
X509v3 Authority Key Identifier:
keyid:35:C0:A5:BA:5B:C8:2E:20:E0:46:FB:B5:4C:06:58:06:F4:C7:B6:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NcClulvILiDgRvu1TAZYBvTHtqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d9/7073f1-3a08-4e4a-bedf-58ccf95d282b/1/NcClulvILiDgRvu1TAZYBvTHtqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:41:b2:7a:1f:d5:08:4b:35:06:e8:48:a2:19:5f:63:40:3e:
5f:6c:a2:2b:a9:dd:9f:e0:d5:d8:4a:92:2a:9d:fd:58:cf:9c:
5f:5e:d8:02:7f:04:5e:2d:9c:e9:c0:79:c3:fe:d6:47:f2:09:
f8:ee:d1:cf:6d:7a:30:7b:f7:6b:84:ba:77:d2:c5:2e:79:42:
c5:2f:6a:d3:8c:d4:9f:bd:df:30:08:7d:d0:59:2a:38:c9:f4:
da:a3:cf:ff:d0:33:b1:2f:0d:13:e2:45:d8:fe:34:e5:b8:73:
bc:0f:3d:dd:2c:4a:26:a8:a2:33:98:40:c3:69:e7:d7:3e:54:
cc:20:e3:6d:a7:ff:32:06:f1:67:82:1d:07:05:f6:a8:49:5f:
40:a7:43:d9:0a:95:f1:78:62:c6:2c:69:e1:ce:d9:b9:1e:f9:
03:19:ca:4b:96:76:21:cc:08:06:dd:0e:e0:64:fa:cc:4e:5b:
2d:d1:e9:0f:c7:58:59:d5:5c:17:23:41:96:b7:5a:f3:33:26:
0e:a2:76:60:98:71:7c:f1:73:f8:1e:ee:1b:ac:e4:64:80:a4:
b0:47:1d:46:94:03:45:bc:cd:0d:7c:d7:09:57:41:e6:f9:6e:
43:df:da:97:9d:d4:e0:ad:6c:db:a2:22:0a:75:8e:ad:bf:23:
b9:3b:e1:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:54:27 2026 by rpki-client