Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
File: Nv7S1etbPFJmq6phfJYHA8VdB4U.mft (raw, json)
Hash identifier: 1WrbyrEoTbqbkotCvKva/2Fp4HaUUX9D8TJ/TqFxKo8=
Subject key identifier: 9A:25:3F:9E:57:66:1E:5B:16:23:2F:97:D0:FA:D2:0D:39:17:45:F9
Authority key identifier: 36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
Certificate issuer: /CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Certificate serial: 019DA30AA28038C80E6206BB4A006B3E3A49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 00:01:16 +0000
Manifest this update: Sun 19 Apr 2026 00:01:16 +0000
Manifest next update: Mon 20 Apr 2026 00:01:16 +0000
Files and hashes: 1: 4k6D88-Mglvm1b3SeMgt30G2VwI.roa (hash: XMgdcG2fobHQupndrORqC3NlYthXxCSVasK7qXxsXZo=)
2: Nv7S1etbPFJmq6phfJYHA8VdB4U.crl (hash: jS9A2P1TaGM25vtltCHkj9Z8+n4w99DQyc9ScuuCgLc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:0a:a2:80:38:c8:0e:62:06:bb:4a:00:6b:3e:3a:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fed2d5eb5b3c5266abaa617c960703c55d0785
Validity
Not Before: Apr 19 00:01:16 2026 GMT
Not After : Apr 20 00:01:16 2026 GMT
Subject: CN=9a253f9e57661e5b16232f97d0fad20d391745f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:4b:bb:4d:43:86:8c:61:a6:4c:f2:35:c9:63:
be:56:fa:a4:c7:e3:43:4e:70:9b:e0:a4:c1:5a:4b:
a4:22:8a:8f:00:08:6d:db:3c:cd:5c:6f:69:04:d5:
2c:68:dc:65:63:20:c5:98:15:4c:9e:a2:02:3a:a7:
16:a5:7f:0d:b5:71:1f:05:98:e9:51:ed:f8:95:94:
78:c3:65:5f:3a:d0:48:8e:85:6b:ad:8d:79:c2:9b:
bc:2a:14:41:c8:91:fb:0d:0f:8d:84:c5:ef:57:d0:
cc:4a:23:1d:03:c2:b2:99:a5:98:e4:1d:99:2d:8e:
41:a9:a4:df:5a:bc:2c:28:d5:19:fa:93:e1:9c:eb:
98:29:f9:53:4c:82:a4:c8:60:05:8c:ba:21:c0:49:
15:aa:c9:66:29:fd:2d:87:ee:a1:17:01:db:11:e3:
3e:f9:68:14:b5:d4:c3:87:da:2d:e0:77:a9:ff:1e:
9c:ce:25:7c:c0:e9:dc:e9:48:af:36:7e:a5:62:8f:
3c:5d:b8:61:ab:4c:bd:2e:5d:48:2e:36:36:e9:92:
eb:5a:21:7c:17:1e:1a:c3:69:48:c3:99:1b:6f:2c:
48:fe:72:d9:40:c6:82:2f:73:b7:93:0c:c7:a6:4e:
e0:58:14:a8:1a:40:55:b0:89:28:54:ac:c8:12:1d:
69:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:25:3F:9E:57:66:1E:5B:16:23:2F:97:D0:FA:D2:0D:39:17:45:F9
X509v3 Authority Key Identifier:
keyid:36:FE:D2:D5:EB:5B:3C:52:66:AB:AA:61:7C:96:07:03:C5:5D:07:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv7S1etbPFJmq6phfJYHA8VdB4U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/5324bd-7926-4513-bd1f-68ef3238a72e/1/Nv7S1etbPFJmq6phfJYHA8VdB4U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:39:c7:eb:30:69:24:d7:3e:f1:4e:40:a6:55:ca:27:b2:22:
84:e2:98:83:09:71:15:b7:f0:b8:47:62:a1:e5:42:2a:71:56:
2e:76:82:03:a0:37:82:d0:a9:8a:49:c1:e7:e6:c8:0d:ee:dc:
b8:30:88:d3:dd:18:11:f0:66:33:33:a9:d0:bc:62:7c:6e:07:
fe:99:3c:ef:ab:39:dd:52:ea:99:15:88:11:9b:ca:10:d8:84:
4b:df:86:e4:22:ea:87:ed:84:5d:4f:de:56:29:45:75:9c:09:
e2:92:a7:2a:70:11:ae:b0:9a:88:15:20:26:bc:ca:44:7c:9d:
16:8d:15:57:e2:38:9a:57:8c:a3:61:e2:6a:cb:43:ef:b7:33:
04:72:ea:cc:2b:0a:fa:08:01:ce:49:9f:6f:4c:23:f1:3a:42:
c4:4d:a6:8b:fa:a4:90:ae:9f:43:12:ba:8a:a7:b1:0f:cb:61:
f1:44:89:50:94:f0:2d:00:e4:20:fb:3c:f1:49:c9:a1:92:22:
d3:68:fa:7c:7d:35:38:43:ee:db:53:5c:ab:01:f8:6a:14:7a:
80:41:c3:52:18:a1:bc:47:30:d7:48:71:dc:95:e4:da:78:82:
e3:90:4a:8b:56:bb:78:d0:b2:2b:2e:6f:19:f3:e8:68:0c:fd:
af:ad:7a:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2jCqKAOMgOYga7SgBrPjpJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZmVkMmQ1ZWI1YjNjNTI2NmFiYWE2MTdjOTYwNzAzYzU1
ZDA3ODUwHhcNMjYwNDE5MDAwMTE2WhcNMjYwNDIwMDAwMTE2WjAzMTEwLwYDVQQD
Eyg5YTI1M2Y5ZTU3NjYxZTViMTYyMzJmOTdkMGZhZDIwZDM5MTc0NWY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnUu7TUOGjGGmTPI1yWO+Vvqkx+ND
TnCb4KTBWkukIoqPAAht2zzNXG9pBNUsaNxlYyDFmBVMnqICOqcWpX8NtXEfBZjp
Ue34lZR4w2VfOtBIjoVrrY15wpu8KhRByJH7DQ+NhMXvV9DMSiMdA8KymaWY5B2Z
LY5BqaTfWrwsKNUZ+pPhnOuYKflTTIKkyGAFjLohwEkVqslmKf0th+6hFwHbEeM+
+WgUtdTDh9ot4Hep/x6cziV8wOnc6UivNn6lYo88Xbhhq0y9Ll1ILjY26ZLrWiF8
Fx4aw2lIw5kbbyxI/nLZQMaCL3O3kwzHpk7gWBSoGkBVsIkoVKzIEh1pywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJolP55XZh5bFiMvl9D60g05F0X5MB8GA1UdIwQY
MBaAFDb+0tXrWzxSZquqYXyWBwPFXQeFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS81MzI0YmQtNzkyNi00NTEzLWJkMWYt
NjhlZjMyMzhhNzJlLzEvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS81MzI0YmQtNzkyNi00NTEzLWJkMWYtNjhlZjMyMzhhNzJl
LzEvTnY3UzFldGJQRkptcTZwaGZKWUhBOFZkQjRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALznH6zBp
JNc+8U5AplXKJ7IihOKYgwlxFbfwuEdioeVCKnFWLnaCA6A3gtCpiknB5+bIDe7c
uDCI090YEfBmMzOp0LxifG4H/pk876s53VLqmRWIEZvKENiES9+G5CLqh+2EXU/e
VilFdZwJ4pKnKnARrrCaiBUgJrzKRHydFo0VV+I4mleMo2HiastD77czBHLqzCsK
+ggBzkmfb0wj8TpCxE2mi/qkkK6fQxK6iqexD8th8USJUJTwLQDkIPs88UnJoZIi
02j6fH01OEPu21NcqwH4ahR6gEHDUhihvEcw10hx3JXk2niC45BKi1a7eNCyKy5v
GfPoaAz9r616Jw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 08:22:59 2026 by rpki-client