Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
File: NbHM5NW62NnC7cpADiv8VKJBhb8.mft (raw, json)
Hash identifier: EQs4xum4fBI6pE1HqUEEZOc+qSxodp0AwphiUnc1xXY=
Subject key identifier: C1:7B:7D:DF:3B:7A:02:3E:DD:7B:4C:48:F1:BB:15:C8:9C:F0:A3:D2
Authority key identifier: 35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
Certificate issuer: /CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Certificate serial: 019D9962705DAD75E511E2D11EF3628D6098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 03:00:58 +0000
Manifest this update: Fri 17 Apr 2026 03:00:58 +0000
Manifest next update: Sat 18 Apr 2026 03:00:58 +0000
Files and hashes: 1: NbHM5NW62NnC7cpADiv8VKJBhb8.crl (hash: Bg3SbWYxfK/m2xDgyStleKsiqL/8/izeFfC+6IWtuak=)
2: h0Ifd57oi9lfBeUdeRd9nSCgSg8.roa (hash: kiI/t9Fma+sRPCboiwT26YcfI7j4ilrF6LxmsduO9hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:70:5d:ad:75:e5:11:e2:d1:1e:f3:62:8d:60:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b1cce4d5bad8d9c2edca400e2bfc54a24185bf
Validity
Not Before: Apr 17 03:00:58 2026 GMT
Not After : Apr 18 03:00:58 2026 GMT
Subject: CN=c17b7ddf3b7a023edd7b4c48f1bb15c89cf0a3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:16:28:c7:b8:3b:cc:4e:6b:39:dc:22:18:7e:
bf:55:dd:06:52:1f:46:f7:97:b0:cd:97:ac:65:8d:
43:b3:bc:53:9f:d2:e1:78:72:84:cd:78:8f:83:07:
19:67:98:db:47:29:9a:73:56:c5:e0:2a:6f:2e:70:
ff:99:7e:78:fe:84:b5:67:52:f8:fd:08:2e:de:c6:
e7:a1:bf:0c:eb:f0:f0:fd:97:30:30:29:49:81:1a:
2f:b8:58:a8:d0:4d:38:9e:a3:5a:3a:80:7d:45:3c:
6e:1d:55:40:95:07:e4:d3:07:31:f1:8e:65:1b:ee:
f3:d6:28:e3:57:43:12:2a:07:06:ee:95:39:86:98:
3d:3f:f2:3d:7e:d5:9a:95:14:fb:84:fb:a5:00:b7:
0b:64:08:b2:73:ad:63:90:5e:84:9a:8f:61:ed:d9:
d8:d7:74:bc:f3:2b:6f:c7:cd:96:bb:0a:8b:57:21:
58:f5:db:e9:e0:e1:30:a7:e5:8e:6a:ba:36:17:f1:
24:3c:2a:e9:77:28:38:d3:9b:c3:62:4b:c1:85:d6:
fe:df:88:19:1a:7e:06:26:33:13:3b:4b:36:f4:53:
79:1c:4b:59:c2:77:69:2d:ad:0a:e5:d4:0f:87:1c:
32:f6:13:3a:9a:04:dd:14:a7:05:22:25:1f:4a:e6:
39:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:7B:7D:DF:3B:7A:02:3E:DD:7B:4C:48:F1:BB:15:C8:9C:F0:A3:D2
X509v3 Authority Key Identifier:
keyid:35:B1:CC:E4:D5:BA:D8:D9:C2:ED:CA:40:0E:2B:FC:54:A2:41:85:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NbHM5NW62NnC7cpADiv8VKJBhb8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/303184-9f7e-4583-80ba-cfd3b53dc456/1/NbHM5NW62NnC7cpADiv8VKJBhb8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:a5:7d:c1:8e:39:4d:f3:58:b2:a9:03:35:d7:19:48:53:e9:
f5:1a:ac:fc:ca:cd:f4:05:3d:a6:d0:65:3f:53:9e:ed:44:e3:
8d:83:e9:fa:6b:1c:10:d0:6f:c9:2b:31:3c:0a:4b:8f:24:d5:
7b:0b:eb:2e:c4:27:d1:2a:4f:2c:fa:73:c2:86:db:36:26:47:
52:52:b3:eb:46:55:03:21:07:96:0f:10:58:ae:e9:54:04:55:
1a:85:4b:ac:8e:3f:26:d1:43:42:22:1f:51:46:a8:57:d3:40:
cd:66:73:0b:76:f6:4e:13:47:d1:cb:b0:1e:5e:f6:03:a8:57:
e0:dd:75:65:28:5d:ab:91:b6:f7:90:d4:f7:6e:e6:f0:ac:e1:
06:72:c4:c7:26:f5:d1:cf:1d:f4:0c:7a:2a:32:04:9a:9e:d8:
ca:66:c9:3c:3c:e1:62:2a:f1:dd:fe:df:f5:3a:98:c1:fa:1b:
27:c9:f8:f1:12:03:05:c2:6a:72:4a:e2:47:2c:43:92:3a:0c:
ba:35:0a:71:bb:8f:b2:0e:60:6c:23:c6:78:de:49:27:83:03:
ff:52:ab:f1:6c:2c:23:fc:1a:36:e3:57:2a:35:85:64:a4:94:
90:31:ce:48:6f:a5:bf:cb:bf:e6:0c:66:17:aa:a1:7b:36:7c:
bb:13:f1:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:17 2026 by rpki-client