Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: 7gixi6QzfWa6SdDIE0P+3pH0ojTb2ISMiNl2tORSRAI=
Subject key identifier: 45:8F:75:EC:9C:3F:12:9A:4C:FC:78:0E:38:D5:3F:B8:9F:63:E2:A3
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019D98862743AFCD9BFE147371B31E9F23DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 18A4
Signing time: Thu 16 Apr 2026 23:00:21 +0000
Manifest this update: Thu 16 Apr 2026 23:00:21 +0000
Manifest next update: Fri 17 Apr 2026 23:00:21 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: j8PWzJrT/63NDbjvQYA47y7FTUwzoO0aHZnsn+ZHrss=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:86:27:43:af:cd:9b:fe:14:73:71:b3:1e:9f:23:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Apr 16 23:00:21 2026 GMT
Not After : Apr 17 23:00:21 2026 GMT
Subject: CN=458f75ec9c3f129a4cfc780e38d53fb89f63e2a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f9:3f:b1:45:dd:60:61:8a:2a:b6:e8:e4:4d:
a5:2f:ff:0b:92:5e:be:91:67:8f:1c:af:f0:9d:d9:
75:ea:b5:8b:a4:b6:08:68:99:76:4d:fa:9c:0f:ed:
17:35:fe:e4:07:2e:c0:18:56:4b:e8:5d:92:8d:d6:
7b:4f:9e:e7:01:26:66:1a:87:7c:d9:49:db:a5:bb:
c4:0b:57:8f:0d:a8:6c:d5:a1:81:f3:2a:9c:98:71:
6c:c1:4e:be:07:b3:10:63:7b:c2:ce:e3:12:7d:20:
22:7a:3b:f1:e3:77:b1:2b:6a:87:b3:ed:00:da:e5:
6f:4a:55:2a:2d:f0:9e:5e:c9:57:8c:51:f0:fe:10:
e7:20:99:67:c3:48:73:53:20:12:78:97:b9:f1:21:
0a:b5:e8:ec:b3:34:a8:0c:84:97:7f:d9:49:cf:8a:
83:ec:e3:64:18:76:65:00:c4:0c:7f:1a:ad:a7:be:
41:1e:34:97:3c:ce:99:97:b1:6e:e7:61:68:7b:eb:
73:39:6d:e0:92:38:fb:55:bc:eb:14:a1:09:f2:ad:
8a:0d:cf:a4:69:e3:41:14:4d:bf:cb:af:b2:08:06:
f8:d5:f0:70:c9:95:ab:9a:5a:84:91:78:68:90:ac:
d4:33:39:35:6e:4e:60:dc:d7:16:21:4e:cb:cc:f4:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:8F:75:EC:9C:3F:12:9A:4C:FC:78:0E:38:D5:3F:B8:9F:63:E2:A3
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:dd:cc:e7:8d:8f:e0:b7:fd:ad:61:c7:55:8d:6b:0a:8c:bd:
e8:bd:67:92:ff:d3:a4:de:00:83:4f:6c:81:53:72:e6:e7:1d:
0e:58:82:cd:cc:16:c8:e3:d7:14:8b:13:6f:d9:de:58:08:92:
1f:11:e6:bf:ce:ad:06:57:4b:9c:7d:ca:00:c3:35:b7:40:c6:
7e:7b:56:4c:48:bb:19:b0:1d:87:7b:5a:04:97:58:3d:b1:43:
0f:4e:fa:90:41:03:d5:c4:c5:1d:38:56:36:f9:63:3d:c3:cc:
92:0e:8e:8e:5a:38:5d:c9:1b:bf:b8:74:9a:a5:39:89:1b:c5:
21:2e:4d:a9:00:d1:1b:0b:d6:b2:78:e5:c3:a8:6d:a4:7a:e9:
ad:73:3f:86:fb:ff:17:1e:4d:13:49:83:d5:bb:1d:cd:1d:73:
ac:5b:c4:7c:6d:72:b5:72:db:69:59:ec:5b:e8:de:f0:dc:0a:
30:6d:88:d2:11:2e:0f:74:02:57:76:e0:88:d7:8c:61:c5:86:
15:b4:8f:e1:04:f9:96:05:86:f4:bb:89:94:b5:72:a8:b6:61:
75:7a:13:98:0f:b4:4b:2d:f8:7e:f3:aa:29:d1:fc:d8:97:9c:
06:fa:21:5e:39:13:42:db:1c:db:bf:0b:c1:74:26:08:c4:11:
21:e2:aa:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:02:02 2026 by rpki-client