Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
File: nAK6r7b7qr_o-oTdJp9bopIPFYM.mft (raw, json)
Hash identifier: hoMJ/4l5zSYlegyR2SjSkraPNqdW1eBUnKUx1/kEJ70=
Subject key identifier: DE:EC:9F:A3:C3:4C:C6:48:26:67:97:F9:E6:82:7A:60:28:7D:EE:DF
Authority key identifier: 9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
Certificate issuer: /CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Certificate serial: 019DA309C9EF6B0BE3F13CF4A481D1C13E17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
Manifest number: 18C1
Signing time: Sun 19 Apr 2026 00:00:20 +0000
Manifest this update: Sun 19 Apr 2026 00:00:20 +0000
Manifest next update: Mon 20 Apr 2026 00:00:20 +0000
Files and hashes: 1: nAK6r7b7qr_o-oTdJp9bopIPFYM.crl (hash: SIIy1pAcFFEtWgerSow0Y3gK2n7f08xrTHJKGhfRpiQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 00:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:09:c9:ef:6b:0b:e3:f1:3c:f4:a4:81:d1:c1:3e:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c02baafb6fbaabfe8fa84dd269f5ba2920f1583
Validity
Not Before: Apr 19 00:00:20 2026 GMT
Not After : Apr 20 00:00:20 2026 GMT
Subject: CN=deec9fa3c34cc648266797f9e6827a60287deedf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:86:45:da:b2:0e:06:3c:08:95:32:12:a5:79:
56:4b:ac:5c:6a:ed:b7:79:b3:76:f0:eb:3d:ad:fa:
fd:ee:2c:10:98:6b:e1:2a:86:33:e0:8f:f9:7f:2b:
f8:2f:0d:b4:d6:64:85:e2:0a:12:3d:78:80:d0:82:
17:8c:c6:a1:c8:d2:df:f9:38:03:6f:05:d6:5c:86:
78:ab:ea:be:51:ae:fa:ee:9e:d8:a9:00:cf:7d:26:
56:c7:af:a2:df:7e:f7:71:6d:ee:f6:58:f6:e4:8a:
61:47:58:58:e4:4c:27:bd:38:11:08:ef:04:8d:38:
f2:87:a8:a0:c6:77:8e:19:1b:ca:c8:20:77:48:5b:
8e:fe:14:42:d6:9e:a9:57:a0:09:a8:6a:ae:72:90:
16:85:8c:8d:b8:dd:48:7a:3f:68:1f:6c:50:fd:ba:
58:7b:83:a9:d9:f6:3d:e2:ed:36:54:c3:9c:94:1a:
c4:8f:3a:79:dc:45:08:0d:ff:8c:c8:cb:e8:ba:ad:
92:78:61:7f:81:78:f4:c3:08:37:ea:ee:55:c1:47:
6d:89:48:9d:b1:aa:13:e8:71:bc:03:a2:cc:da:82:
0b:9d:b4:f3:3d:8d:d6:4c:ef:4b:f5:b3:22:61:ca:
39:ad:b5:0a:d5:75:4c:0f:f9:bb:57:87:6b:6c:31:
d9:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:EC:9F:A3:C3:4C:C6:48:26:67:97:F9:E6:82:7A:60:28:7D:EE:DF
X509v3 Authority Key Identifier:
keyid:9C:02:BA:AF:B6:FB:AA:BF:E8:FA:84:DD:26:9F:5B:A2:92:0F:15:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nAK6r7b7qr_o-oTdJp9bopIPFYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/b947da-e2f2-4cdd-ab30-624cd19e1aad/1/nAK6r7b7qr_o-oTdJp9bopIPFYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:48:84:a6:66:ac:75:0a:0c:77:37:9a:af:4a:39:ed:93:3f:
dd:78:cf:74:fd:30:38:9e:ad:47:28:6e:10:e1:a2:24:c4:df:
f6:96:0e:c8:cb:b1:0c:14:d9:30:b5:4e:c7:06:2c:10:dc:77:
f9:2b:6b:52:77:2e:89:2b:ed:38:f9:2d:65:9f:2f:88:42:fe:
ac:24:b6:06:ab:df:7f:e8:64:3b:9a:24:a6:e2:2e:e6:16:7a:
1f:92:e7:eb:7e:a1:f8:0c:55:7c:24:2d:17:ce:e7:ec:80:ee:
ad:50:4c:3e:32:f3:3e:32:4b:5a:0f:d4:b4:68:6d:ae:1f:19:
2d:08:11:a2:82:70:73:63:fb:47:8e:34:80:76:7e:56:a3:12:
bc:21:d9:73:e1:82:b9:f0:06:23:98:01:2e:0d:37:8a:5e:54:
36:9d:ff:ef:9e:be:8d:3a:c7:25:a1:8f:b8:a7:1a:8d:e9:eb:
b2:c2:a9:3a:aa:ae:72:8a:f1:08:82:d4:bc:3c:f3:95:6d:54:
d7:fe:2d:d6:ab:08:52:7f:73:40:c9:34:ac:aa:7f:bd:89:d5:
77:28:e1:9d:08:cb:15:3d:28:98:79:27:73:6e:7d:27:01:81:
fc:5d:d2:a4:3a:86:a0:21:e6:f9:46:ce:f9:00:90:16:f2:29:
1c:0f:c9:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:04:32 2026 by rpki-client