Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
File: nY85NIPUicQp_Biwk0LXbQr-QkQ.mft (raw, json)
Hash identifier: DqF51nK+C1nQfArt+ZpHclozxEjwSYOsA3mQOVpyE+o=
Subject key identifier: 11:93:DE:67:4F:F4:34:CA:75:CB:54:CB:FF:7B:5F:03:4D:AA:40:8F
Authority key identifier: 9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
Certificate issuer: /CN=9d8f393483d489c429fc18b09342d76d0afe4244
Certificate serial: 019D999987D46CB1EC377B4FF24E6C328AA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
Manifest number: 14AB
Signing time: Fri 17 Apr 2026 04:01:08 +0000
Manifest this update: Fri 17 Apr 2026 04:01:08 +0000
Manifest next update: Sat 18 Apr 2026 04:01:08 +0000
Files and hashes: 1: PnOOh7fnmZFCfeOa_wMzgqjdxqA.roa (hash: ggogQletXZT21dYbTRV1SNWHwV2S6gHYiktJ4MjCyQI=)
2: nY85NIPUicQp_Biwk0LXbQr-QkQ.crl (hash: t3jGowyhR/QEkJ7bKfUN77GYjT3gUhEg62agXJ1rhm0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:87:d4:6c:b1:ec:37:7b:4f:f2:4e:6c:32:8a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f393483d489c429fc18b09342d76d0afe4244
Validity
Not Before: Apr 17 04:01:08 2026 GMT
Not After : Apr 18 04:01:08 2026 GMT
Subject: CN=1193de674ff434ca75cb54cbff7b5f034daa408f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:05:c6:a4:f8:ac:94:5c:a4:87:11:74:12:f1:
ab:d5:58:bc:19:c7:bb:66:2a:e5:b7:89:ef:8d:ec:
ff:e7:ae:4a:3e:35:3a:3c:e1:d2:fc:4e:0a:f7:2a:
cf:c4:c9:55:d8:6a:bb:7b:34:a3:24:71:01:24:79:
99:18:0b:61:74:34:f3:73:e4:31:c9:da:e4:84:94:
42:f2:bf:47:2e:52:ae:66:ea:6b:12:7b:f5:11:79:
86:e6:50:ee:26:a6:e7:6c:03:8b:c0:ef:77:46:99:
40:05:54:9a:ba:4b:65:21:3f:d4:ad:08:0c:f7:ed:
00:d0:88:3c:f9:1b:70:0d:d3:ac:d8:b1:6c:1e:e8:
61:42:10:ee:24:a7:5a:81:f2:18:3f:0b:e2:77:a9:
e3:a6:4e:99:ca:1a:39:2d:16:0b:ce:b4:34:c2:41:
46:62:f5:df:69:39:cb:1f:45:ec:b1:da:24:df:77:
6b:91:9a:61:40:44:92:b8:ad:82:7b:02:63:f3:1b:
68:b0:1c:d7:57:60:f0:6f:f3:f7:4e:33:f4:5f:5d:
98:3a:bc:4b:74:ac:3b:73:79:f9:f6:dc:85:bc:4a:
6b:ea:c2:5b:3f:ba:86:eb:e3:0e:2f:1f:23:0d:55:
5e:93:cc:06:e7:c6:53:c9:83:ef:05:3e:cc:9c:b8:
0e:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:93:DE:67:4F:F4:34:CA:75:CB:54:CB:FF:7B:5F:03:4D:AA:40:8F
X509v3 Authority Key Identifier:
keyid:9D:8F:39:34:83:D4:89:C4:29:FC:18:B0:93:42:D7:6D:0A:FE:42:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY85NIPUicQp_Biwk0LXbQr-QkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/9e8166-160f-4ce2-9017-1e151aa1afdc/1/nY85NIPUicQp_Biwk0LXbQr-QkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:bb:67:c8:73:3c:09:57:3c:da:4b:0d:7a:08:4f:84:b6:70:
a2:4d:19:44:39:ca:3d:78:1a:f6:d0:ea:3f:bb:af:95:56:5a:
b9:b7:37:07:24:6c:52:85:cf:5e:41:1c:66:cb:99:67:2c:37:
5c:5a:52:6d:d3:98:8b:12:10:1a:da:2f:d3:9a:73:98:92:dd:
e3:71:a2:00:66:08:35:4b:47:ad:67:2e:46:c1:b8:16:07:fe:
36:19:9e:5e:5c:a8:32:4b:73:e6:39:6c:14:4f:18:2e:6f:20:
be:96:61:ef:70:9a:5d:c2:d6:df:80:d5:cc:01:e9:a9:71:56:
eb:87:8a:68:20:2c:0c:b0:a7:95:e4:28:10:1e:04:3d:e9:30:
77:7e:5e:54:32:cb:a0:44:0d:59:8e:2d:be:71:de:a9:0c:f5:
f8:2b:74:aa:32:7a:4d:e3:e2:c8:4c:1d:40:dd:cf:76:50:a4:
4c:60:3a:be:11:6b:d5:ef:00:97:eb:0d:fa:05:ba:65:71:c5:
f0:47:97:a8:32:f4:f7:65:29:23:4b:72:e6:73:db:a5:14:e3:
5e:d6:64:2f:32:8e:ae:bb:34:30:6a:bb:e3:90:1e:a8:5c:74:
85:66:5e:7a:eb:6e:7a:43:a9:e2:34:f6:2d:85:c1:99:5d:3a:
98:ec:4d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:24:36 2026 by rpki-client