Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: xgv1uM54k32tSpARgSxAMDrdOSfD0uRpAwg73heEwdQ=
Subject key identifier: 7D:7F:DC:C0:0D:1D:B5:B7:44:90:B4:98:1C:80:2A:84:78:B8:B6:20
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 019DA4C1E1A4606330480C0245BC63D3EE19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 08:01:02 +0000
Manifest this update: Sun 19 Apr 2026 08:01:02 +0000
Manifest next update: Mon 20 Apr 2026 08:01:02 +0000
Files and hashes: 1: 2l0GtVQPrSMldc422HjTQSRdXVk.roa (hash: I2BTLtTZzbsnuRGEuGg3P61ep2ZFLBTas3um/pZvHuU=)
2: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: 8w42qpUuWB/mwO2NmuSRwqDdaHAqvfTeUoCVp4GUbPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:c1:e1:a4:60:63:30:48:0c:02:45:bc:63:d3:ee:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Apr 19 08:01:02 2026 GMT
Not After : Apr 20 08:01:02 2026 GMT
Subject: CN=7d7fdcc00d1db5b74490b4981c802a8478b8b620
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4c:9c:8b:c6:02:e0:87:4c:3b:d7:92:2b:7d:
4b:2e:2d:4e:82:ea:78:98:81:cd:71:49:a6:21:cc:
f8:01:03:3d:ec:87:6c:2c:58:2f:b2:92:fd:a3:6a:
58:f7:b1:ec:b2:49:4a:69:44:28:3f:e7:f6:50:af:
5f:82:11:79:ff:ad:4a:3f:6e:0b:fc:7e:05:fb:38:
3b:20:d3:c3:bd:4e:b8:6a:6e:03:6d:35:13:95:5b:
ab:6a:42:0a:0b:d2:8f:6d:ca:3a:e2:69:f0:4f:41:
5f:56:45:d7:1b:eb:2e:5e:c1:cd:bd:d7:40:c3:f7:
47:a2:af:fa:e8:4c:77:10:4a:76:5a:c4:03:cf:75:
88:f4:5b:b2:1f:f7:97:ab:1b:50:7f:08:a2:3f:73:
68:fd:f8:83:54:49:bf:7e:57:08:09:96:4e:2b:a6:
2c:98:e5:92:6d:86:e8:5b:79:e8:ed:d8:aa:cd:75:
39:da:c9:e2:c4:be:e8:ec:26:06:57:cd:0e:e3:cb:
d3:e9:e3:ab:1a:c5:32:b5:24:15:4f:17:97:57:52:
51:f1:b9:66:c9:a1:7e:e6:be:dc:c6:a8:af:8b:71:
17:76:6c:48:8d:c6:81:88:20:25:19:bf:c2:2d:3e:
7a:db:7a:04:2b:b2:c0:36:7e:5c:f1:a7:ef:b1:fb:
80:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:7F:DC:C0:0D:1D:B5:B7:44:90:B4:98:1C:80:2A:84:78:B8:B6:20
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:30:23:35:a7:ab:50:60:9f:3e:89:03:01:2d:33:18:68:c5:
f8:13:c8:b1:2a:95:cb:f0:da:69:72:0b:fc:22:a7:b6:64:59:
47:4d:5b:fa:91:c0:8f:59:62:8b:2d:19:05:19:cd:a9:bd:f8:
42:0d:73:e4:8c:12:e0:53:66:a8:a9:67:43:d9:66:1a:be:56:
0e:9e:65:8f:34:b8:e4:17:9a:c1:d2:f3:57:e0:e6:ef:1d:94:
8b:de:56:c5:00:0b:a7:95:b2:d9:8c:0f:68:f0:c0:c2:f8:ec:
0a:d0:78:4b:43:82:61:e5:69:41:19:68:54:b6:42:12:36:ef:
93:80:42:28:f4:32:2a:88:17:47:74:08:ee:0f:96:3c:82:2f:
84:66:c6:d5:fa:bd:1c:09:a9:ef:b1:33:8d:88:91:97:34:36:
88:52:cd:f0:55:26:4a:ad:26:2c:76:0e:f1:e9:08:e9:11:3c:
68:4f:85:cd:b1:ad:57:a0:9d:c0:46:0d:17:36:31:27:86:8a:
15:a9:d8:1d:15:ba:2c:68:e6:bc:29:ee:7c:94:7a:78:76:aa:
3b:50:e7:dd:78:1a:cd:1b:0e:3d:5f:3b:87:0f:62:16:95:53:
19:d2:80:2d:6d:27:ec:89:76:33:9b:70:82:d2:7a:f1:4f:8e:
60:43:a3:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:00:49 2026 by rpki-client