Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
File: nl1ITra0tWiaVEzwsTt--TJFfvE.mft (raw, json)
Hash identifier: F/p9UfqzwCnW7chu/Id4VaasuoTYQHHxpBB4ZmZurTw=
Subject key identifier: 26:C6:98:1E:5C:CD:54:44:2A:D7:D1:07:34:8E:00:F5:39:CE:11:5F
Authority key identifier: 9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
Certificate issuer: /CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Certificate serial: 019D9AAC28FC0A096AFBED492F820F10FFE7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
Manifest number: 1778
Signing time: Fri 17 Apr 2026 09:01:06 +0000
Manifest this update: Fri 17 Apr 2026 09:01:06 +0000
Manifest next update: Sat 18 Apr 2026 09:01:06 +0000
Files and hashes: 1: fOzoYMnI727icUByo14Jb0elADg.roa (hash: H2kPNJ2J5KQbcSM3KTsy/JJVmpzgkcwioFna5QOuXKo=)
2: nl1ITra0tWiaVEzwsTt--TJFfvE.crl (hash: itgAvOFaFf75Y1lD/TH6hJdXntowKXDEn2P9Fd11/hY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:28:fc:0a:09:6a:fb:ed:49:2f:82:0f:10:ff:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e5d484eb6b4b5689a544cf0b13b7ef932457ef1
Validity
Not Before: Apr 17 09:01:06 2026 GMT
Not After : Apr 18 09:01:06 2026 GMT
Subject: CN=26c6981e5ccd54442ad7d107348e00f539ce115f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d4:ce:e9:b1:ce:ae:45:d8:92:54:38:4f:d1:
30:a1:b3:5b:82:82:42:ba:53:c3:eb:29:50:ec:5f:
ad:6a:c5:60:91:84:fe:29:f5:98:6c:22:c8:01:68:
84:fb:3f:de:c7:24:39:98:3e:db:d5:17:e4:6e:72:
27:6a:c4:9a:35:6c:43:0f:34:7a:ea:4b:52:66:dd:
f2:38:d9:79:25:b3:88:a1:9e:b2:b3:37:5b:4d:f6:
0f:e4:67:e4:99:1c:25:69:5d:d5:a9:eb:06:ad:91:
25:92:e2:4a:85:e7:cc:82:9b:2d:8f:99:70:d9:39:
4a:f3:08:39:4a:83:70:0b:bb:b1:e3:78:fd:95:ee:
6c:ba:d0:69:2b:9b:ba:de:5b:4f:14:7a:a6:2a:0c:
56:8d:06:ec:9c:1c:ac:88:b2:8e:1b:0c:38:33:26:
7d:c5:2f:93:93:9d:6c:1b:de:e3:7f:42:37:5e:cd:
b1:9c:9c:d8:ea:55:ae:ab:3d:4a:b6:54:2d:cb:39:
55:90:77:fc:bb:f0:6d:3e:d1:45:c8:e0:5e:de:74:
45:96:58:d8:54:a6:59:45:17:63:4e:93:4d:59:7e:
35:99:e7:31:5e:f9:0d:15:92:78:30:64:31:81:78:
cc:37:37:70:96:8c:f6:12:bf:ca:e2:43:f3:e6:92:
9f:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:C6:98:1E:5C:CD:54:44:2A:D7:D1:07:34:8E:00:F5:39:CE:11:5F
X509v3 Authority Key Identifier:
keyid:9E:5D:48:4E:B6:B4:B5:68:9A:54:4C:F0:B1:3B:7E:F9:32:45:7E:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nl1ITra0tWiaVEzwsTt--TJFfvE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/b674bb-0447-4d72-b302-6ec40a381819/1/nl1ITra0tWiaVEzwsTt--TJFfvE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:50:f0:a7:91:4b:84:21:d7:88:ca:60:e3:9a:8d:9b:40:49:
e2:7e:4f:bf:0f:20:de:52:1e:a3:c6:25:f1:b5:e9:0c:19:ca:
db:b0:33:82:0b:87:2d:73:f5:cf:f5:97:82:36:30:81:7a:0e:
e9:02:7a:f2:2d:df:28:40:2d:14:c9:c9:e2:3e:16:97:e9:09:
c9:2b:26:45:66:64:40:f6:68:94:a4:d0:59:77:f8:e0:87:7c:
f6:c9:6b:ae:e8:a8:45:29:ed:c5:6a:22:f7:ac:9c:92:d0:d9:
19:02:1c:eb:d9:12:d8:2b:23:dc:11:73:17:15:03:c0:cc:fb:
b8:30:f6:36:9a:4f:06:b9:e9:df:fb:41:d9:40:82:ca:b8:4b:
a8:a1:2d:e9:48:90:95:89:eb:e6:21:e1:cf:ae:ea:de:3d:2b:
49:5f:6c:47:df:59:43:95:5c:7a:99:40:c8:19:4a:f1:75:bd:
ab:78:3c:62:2a:95:17:c4:d8:99:ca:83:83:20:fa:d9:3c:9f:
80:6d:c8:2b:4a:50:80:c2:29:2c:51:b2:04:de:84:f9:66:89:
df:0c:98:03:2f:72:8b:f4:04:a6:77:d9:f5:7d:fe:27:0c:96:
27:d5:0a:c9:14:5d:c4:35:be:47:7e:4f:34:25:c2:7b:81:1a:
3d:75:38:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:14:12 2026 by rpki-client