Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
File: nFK2oFFHG-xR23TXJW56MKVezxo.mft (raw, json)
Hash identifier: +aCJsIEmaNWUqk9J3NIevMPnhxnMG4p4Puu8wQV2JmA=
Subject key identifier: 39:62:1A:7D:44:B8:53:8C:87:79:91:34:6C:AF:A2:88:76:DF:C9:99
Authority key identifier: 9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
Certificate issuer: /CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Certificate serial: 019D9AAB9DE99BAACBFB0536973F64367E6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
Manifest number: 18C3
Signing time: Fri 17 Apr 2026 09:00:31 +0000
Manifest this update: Fri 17 Apr 2026 09:00:31 +0000
Manifest next update: Sat 18 Apr 2026 09:00:31 +0000
Files and hashes: 1: 9mN_oHf4GD05-BUH6BsB01tvt3Y.roa (hash: ZuxdvlwmVs1w0KroWX43G/v/gBodCt7QRPbyICFM9A0=)
2: nFK2oFFHG-xR23TXJW56MKVezxo.crl (hash: o/v+YXQofTVlPSoeUrXIxtrKeVu4DpHaB/9Bb2MgrmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:9d:e9:9b:aa:cb:fb:05:36:97:3f:64:36:7e:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c52b6a051471bec51db74d7256e7a30a55ecf1a
Validity
Not Before: Apr 17 09:00:31 2026 GMT
Not After : Apr 18 09:00:31 2026 GMT
Subject: CN=39621a7d44b8538c877991346cafa28876dfc999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:0c:52:fa:d4:4d:0a:b7:24:15:7c:80:8a:13:
70:da:cd:c6:2b:5d:1a:c6:05:f2:52:ab:48:2d:ce:
e5:d5:bd:42:2d:63:03:1a:72:fe:a9:66:31:b4:d4:
89:19:13:59:f7:a8:3d:7c:50:a6:d0:15:b0:b9:3b:
cb:ff:5a:ec:c0:58:ee:36:e4:be:73:fa:cd:af:07:
bd:08:d3:e9:2c:8a:a8:53:d1:76:75:c8:00:f9:9f:
e7:c8:2c:de:8f:7e:47:74:9b:64:1a:a6:7f:9a:c7:
07:4d:d5:e7:88:b1:35:0e:a8:11:55:21:a5:94:25:
2e:69:61:de:35:53:c8:83:d4:f7:e3:4d:f7:de:52:
52:7e:3d:c1:5b:e2:d0:f9:46:c3:e3:81:0d:7b:d0:
58:9d:49:84:6b:94:3a:d3:8b:bc:0b:c5:55:f8:ea:
40:78:e3:98:79:95:36:23:95:ed:48:6c:d9:15:50:
05:df:5c:57:d6:ce:4d:f8:e7:f2:29:2c:c3:1b:13:
76:a3:ec:4b:82:30:0b:35:4f:09:fa:90:91:2a:87:
40:a1:41:c7:2b:9b:8e:fa:97:91:11:25:6e:65:55:
5f:6f:c9:90:6b:59:e3:02:15:4b:6a:6b:60:25:b1:
b8:a3:db:9c:74:e5:db:2d:a7:12:fc:9d:4b:b2:bd:
ac:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:62:1A:7D:44:B8:53:8C:87:79:91:34:6C:AF:A2:88:76:DF:C9:99
X509v3 Authority Key Identifier:
keyid:9C:52:B6:A0:51:47:1B:EC:51:DB:74:D7:25:6E:7A:30:A5:5E:CF:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nFK2oFFHG-xR23TXJW56MKVezxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/f8434c-0230-4adf-bd00-2829aa3df258/1/nFK2oFFHG-xR23TXJW56MKVezxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:70:73:1c:39:85:c6:dd:91:f4:b0:c3:e7:28:3b:ca:97:82:
34:ce:44:ca:67:b2:2f:d7:79:12:84:01:60:bc:b7:9d:75:8d:
4f:c3:ff:cb:74:24:ec:68:13:45:d2:f5:a4:04:5e:91:ea:ad:
30:db:4f:bd:32:d2:01:a5:f8:06:bf:80:d8:3a:76:46:ca:0d:
e5:69:1e:9d:85:fd:57:0b:21:2d:73:bf:08:55:24:50:f3:6e:
2f:17:c8:4d:17:cb:51:2c:8e:11:36:8c:55:4d:19:51:23:8b:
27:7c:d3:41:12:a8:a2:30:df:64:85:58:72:01:81:b3:75:85:
b2:9d:15:c4:ab:ae:09:67:ea:f1:0e:19:66:1c:e1:52:49:70:
2c:90:16:8b:5f:29:a2:64:33:73:04:3d:ee:3f:86:86:9a:72:
04:88:10:c6:05:e1:ff:4c:09:0f:14:50:bf:9e:14:fe:d0:11:
e0:5e:3b:42:de:30:e1:ee:8c:6b:e2:ad:b9:40:4d:09:5e:36:
64:81:b4:49:7a:30:fd:30:77:af:32:f7:1e:50:42:20:e3:27:
20:60:95:65:e7:82:65:a3:90:0e:7e:7f:da:9b:e1:a6:cf:e7:
38:1d:e1:84:7f:9c:1d:0d:9e:1c:8b:cc:73:7f:6f:ba:c7:df:
7d:26:49:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:07:15 2026 by rpki-client