Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
File: NLjV-ROFaLUssJNuK0yU93zleuw.mft (raw, json)
Hash identifier: lf2JSB7ihJwLh0cNC8Cejo3lncntiUT46XsvqHK2zdM=
Subject key identifier: 98:EF:07:E3:E3:87:C5:C1:C4:34:C5:0E:16:BA:1B:40:D4:34:24:31
Authority key identifier: 34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
Certificate issuer: /CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Certificate serial: 019D99621B7933646CFB0E885D813EFC3693
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
Manifest number: 15FB
Signing time: Fri 17 Apr 2026 03:00:36 +0000
Manifest this update: Fri 17 Apr 2026 03:00:36 +0000
Manifest next update: Sat 18 Apr 2026 03:00:36 +0000
Files and hashes: 1: 2qExfB805-R2i4AdQ2Nza5P_ogA.roa (hash: I7bRoDVEoiwuKeHZcRlXKBPzc5ivPBkAnRRWojlZ0Wc=)
2: NLjV-ROFaLUssJNuK0yU93zleuw.crl (hash: 76wkt496SxGPQM03bUqr+Q6ad9KPaf3+IpoJdd7dAgk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:1b:79:33:64:6c:fb:0e:88:5d:81:3e:fc:36:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34b8d5f9138568b52cb0936e2b4c94f77ce57aec
Validity
Not Before: Apr 17 03:00:36 2026 GMT
Not After : Apr 18 03:00:36 2026 GMT
Subject: CN=98ef07e3e387c5c1c434c50e16ba1b40d4342431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2e:8e:0d:31:11:6a:9f:81:dd:36:0c:a7:95:
ff:4c:8d:d9:e9:27:c1:e0:92:9f:18:f4:8f:ff:fe:
df:2d:3c:1c:66:30:55:49:df:ab:93:cb:a5:48:10:
a9:b3:04:8a:34:b7:76:b5:bf:f5:82:d2:64:b3:be:
37:e2:58:bc:b3:6e:80:01:24:56:e7:a4:dd:d2:b7:
d9:57:fc:06:34:42:46:19:73:92:74:39:15:47:bd:
52:46:ed:aa:33:bb:54:80:72:4e:b6:ea:ef:f5:1a:
6d:0c:39:63:6b:e8:2e:7f:53:ad:8c:0b:f0:7d:be:
b2:e8:4c:d1:8d:16:fe:43:94:9d:08:b8:6d:71:ce:
0c:22:fb:d3:e8:72:d0:24:36:96:e8:f3:95:e5:71:
e6:99:ff:e9:83:e0:b1:a2:fc:cf:60:3f:4f:47:6a:
69:22:d5:b5:bf:33:85:63:69:61:a4:be:36:27:42:
6e:00:bf:82:cf:ac:b8:6e:5e:bf:ad:de:07:18:4d:
10:50:5a:1f:38:55:d8:d0:1a:09:50:20:7a:c5:b6:
29:a8:0e:2a:5a:1f:0e:86:ba:33:a7:b1:48:4e:74:
91:dc:84:71:62:68:cf:9f:65:8d:1e:43:30:9b:69:
b5:62:ae:67:c8:fc:3b:02:ae:b9:59:01:56:18:d4:
c7:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:EF:07:E3:E3:87:C5:C1:C4:34:C5:0E:16:BA:1B:40:D4:34:24:31
X509v3 Authority Key Identifier:
keyid:34:B8:D5:F9:13:85:68:B5:2C:B0:93:6E:2B:4C:94:F7:7C:E5:7A:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NLjV-ROFaLUssJNuK0yU93zleuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/fc5820-8197-4f3d-b625-e20ebbd085e1/1/NLjV-ROFaLUssJNuK0yU93zleuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:9a:81:8a:7d:2a:e7:6f:67:60:61:64:44:36:e0:5f:89:93:
14:88:f5:91:18:3a:c0:7a:63:41:ab:b9:ee:7b:f5:9d:f0:76:
24:f5:b9:17:30:99:3c:21:a4:d2:32:43:e9:2f:9b:af:e8:2a:
90:0a:e6:6f:b1:2d:eb:72:2a:c4:96:cf:e4:ba:d0:3c:7d:1a:
b2:d1:32:06:67:bd:d1:d5:e1:ab:26:8e:d2:01:b5:1e:37:7c:
55:2a:a4:9b:b7:03:5c:85:8a:50:c7:19:63:e8:4e:d2:86:ec:
69:d9:8f:f4:ea:b2:6e:92:cb:6f:7e:7d:2d:1b:9d:b6:c6:2f:
bf:c5:34:66:5f:eb:6d:03:b9:0c:e4:7b:2f:fc:53:a5:30:51:
95:51:fd:c8:8d:e5:12:4f:68:f9:0d:50:69:c5:92:2d:37:da:
49:ac:d8:38:dc:71:08:6a:55:c3:d6:d6:1d:38:6c:ec:59:ab:
32:8b:fa:85:23:ab:75:fa:a7:98:fe:71:bd:70:97:23:aa:ef:
b3:9f:47:8c:03:bc:4b:49:cf:9c:7a:2b:0b:ee:86:48:8d:c7:
b8:b1:2e:8e:65:be:db:b3:23:be:ea:a2:e4:6d:14:26:7f:00:
4d:90:11:71:9c:3d:e7:28:b2:4b:7c:cf:32:f1:81:c1:0b:28:
9b:69:ec:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:47:25 2026 by rpki-client