Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
File: NRNTQp5y6yhswY7L64-nGjHAgZA.mft (raw, json)
Hash identifier: wTfpk9U1LGsZNWYcNW4anyJt5b4DLQEUpFUPyIJeRk8=
Subject key identifier: 7F:4D:D4:25:AF:37:28:D5:27:C2:E4:7E:CA:03:D4:4C:B4:D6:A2:83
Authority key identifier: 35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
Certificate issuer: /CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Certificate serial: 019DA52FEC0C787D087DEA74D7E0B3F44E6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 10:01:14 +0000
Manifest this update: Sun 19 Apr 2026 10:01:14 +0000
Manifest next update: Mon 20 Apr 2026 10:01:14 +0000
Files and hashes: 1: 4HYOyK7UVPMY-7-PRIJm1n9dsEM.roa (hash: Z+M0a2CeBocn+5J0DpLY2Wi61/jCPMoAwEWgcIu3zn8=)
2: NRNTQp5y6yhswY7L64-nGjHAgZA.crl (hash: bGYNE6naLC4iWuwvXamrrB6ZuiV8JruB4ZPqUjmaEJc=)
3: RxH1gaSjLMp0tnHIqiMkmznCeLE.roa (hash: p4krdNmYmG1wZdtq1raA8Nmp1Uo/DFzB3h6x0GajZ1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:2f:ec:0c:78:7d:08:7d:ea:74:d7:e0:b3:f4:4e:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351353429e72eb286cc18ecbeb8fa71a31c08190
Validity
Not Before: Apr 19 10:01:14 2026 GMT
Not After : Apr 20 10:01:14 2026 GMT
Subject: CN=7f4dd425af3728d527c2e47eca03d44cb4d6a283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:41:85:d5:e1:58:54:1b:48:5e:ee:bd:ae:ec:
13:57:c7:37:b7:e5:50:cf:1a:be:94:e2:d6:c8:14:
eb:ab:70:50:05:0b:28:1b:44:06:66:45:a3:f4:58:
b3:12:d3:6c:db:c5:e7:db:05:26:56:1b:36:8a:83:
e9:ed:d1:b0:0b:f1:30:2c:28:5b:5f:db:af:ab:2e:
a1:bf:84:45:85:19:4d:d1:d0:c4:50:b4:b5:7b:11:
43:81:7a:eb:d4:bd:39:3e:4d:30:2e:aa:45:4a:96:
06:40:a8:e8:10:4c:ca:6b:ac:02:11:1f:56:94:fe:
29:d2:32:58:5d:01:50:2b:26:83:c0:67:02:6a:e4:
31:ab:ad:91:ae:0a:8d:5f:87:89:d5:6c:45:96:60:
90:34:d3:42:4e:6b:f8:13:51:c2:1c:20:5b:e4:91:
b4:99:5d:e0:e3:28:2b:0a:96:d8:16:e3:b7:14:8a:
76:3f:fc:69:ca:23:a6:ae:07:e1:57:45:d2:54:ea:
93:59:15:a1:d5:8a:92:49:fd:8d:e2:86:ab:ad:61:
b1:5d:02:c6:65:19:78:c4:c6:c7:30:30:52:79:0f:
85:3f:12:97:66:f9:40:07:da:41:59:65:34:d6:46:
40:99:f0:fb:61:2d:f8:9d:31:9b:b8:cb:65:95:8c:
87:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:4D:D4:25:AF:37:28:D5:27:C2:E4:7E:CA:03:D4:4C:B4:D6:A2:83
X509v3 Authority Key Identifier:
keyid:35:13:53:42:9E:72:EB:28:6C:C1:8E:CB:EB:8F:A7:1A:31:C0:81:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRNTQp5y6yhswY7L64-nGjHAgZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/6a2302-85c5-4ebc-9641-39369689f27e/1/NRNTQp5y6yhswY7L64-nGjHAgZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:f7:6e:5e:95:3f:35:71:99:3e:9d:9a:a4:1f:69:bc:47:5d:
ec:68:c9:50:97:9f:55:c7:72:9b:eb:22:81:97:96:36:2c:17:
eb:e2:37:87:95:88:41:4c:18:2a:13:cd:98:5a:3a:cc:07:bc:
84:e1:25:2b:bd:b4:63:6b:16:26:55:78:99:a3:ca:00:9b:a2:
ba:36:1d:c7:8b:2a:d5:2b:02:76:d1:8f:19:24:d5:ba:c1:63:
3f:0b:af:a0:f3:7a:0d:54:c6:31:52:ec:bc:f7:ec:ff:81:cd:
10:fa:c7:8c:37:9d:b2:02:27:40:3a:e9:13:45:ee:f1:97:60:
88:3b:25:1f:b5:75:08:4d:95:b9:c7:3d:ff:d5:fc:ed:a6:32:
72:91:8b:44:26:f2:f4:44:39:e1:1b:e9:8a:a6:6f:2a:2c:4b:
7e:03:1b:cb:79:05:7d:3a:04:c7:c3:b1:88:09:75:60:0d:c7:
c1:66:c0:b0:09:64:50:66:9c:4d:8e:e0:42:7c:0f:08:24:1a:
b3:36:66:db:c1:a2:13:2d:59:35:1c:e5:31:0b:92:a0:a6:52:
2a:a6:75:8d:ae:5a:06:62:64:22:e2:72:9b:16:ed:87:c1:e3:
cd:9e:02:c0:46:82:75:72:9e:b6:8e:5f:3d:48:b1:1c:2f:9c:
3e:ef:6f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lL+wMeH0Ifep01+Cz9E5qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1MTM1MzQyOWU3MmViMjg2Y2MxOGVjYmViOGZhNzFhMzFj
MDgxOTAwHhcNMjYwNDE5MTAwMTE0WhcNMjYwNDIwMTAwMTE0WjAzMTEwLwYDVQQD
Eyg3ZjRkZDQyNWFmMzcyOGQ1MjdjMmU0N2VjYTAzZDQ0Y2I0ZDZhMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0GF1eFYVBtIXu69ruwTV8c3t+VQ
zxq+lOLWyBTrq3BQBQsoG0QGZkWj9FizEtNs28Xn2wUmVhs2ioPp7dGwC/EwLChb
X9uvqy6hv4RFhRlN0dDEULS1exFDgXrr1L05Pk0wLqpFSpYGQKjoEEzKa6wCER9W
lP4p0jJYXQFQKyaDwGcCauQxq62RrgqNX4eJ1WxFlmCQNNNCTmv4E1HCHCBb5JG0
mV3g4ygrCpbYFuO3FIp2P/xpyiOmrgfhV0XSVOqTWRWh1YqSSf2N4oarrWGxXQLG
ZRl4xMbHMDBSeQ+FPxKXZvlAB9pBWWU01kZAmfD7YS34nTGbuMtllYyHIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH9N1CWvNyjVJ8LkfsoD1Ey01qKDMB8GA1UdIwQY
MBaAFDUTU0KecusobMGOy+uPpxoxwIGQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEt
MzkzNjk2ODlmMjdlLzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS82YTIzMDItODVjNS00ZWJjLTk2NDEtMzkzNjk2ODlmMjdl
LzEvTlJOVFFwNXk2eWhzd1k3TDY0LW5HakhBZ1pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfvduXpU/
NXGZPp2apB9pvEdd7GjJUJefVcdym+sigZeWNiwX6+I3h5WIQUwYKhPNmFo6zAe8
hOElK720Y2sWJlV4maPKAJuiujYdx4sq1SsCdtGPGSTVusFjPwuvoPN6DVTGMVLs
vPfs/4HNEPrHjDedsgInQDrpE0Xu8ZdgiDslH7V1CE2Vucc9/9X87aYycpGLRCby
9EQ54RvpiqZvKixLfgMby3kFfToEx8OxiAl1YA3HwWbAsAlkUGacTY7gQnwPCCQa
szZm28GiEy1ZNRzlMQuSoKZSKqZ1ja5aBmJkIuJymxbth8HjzZ4CwEaCdXKeto5f
PUixHC+cPu9vWQ==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:24:41 2026 by rpki-client