Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
File: nOItyiotsKWf5WaByNHEBnenRbU.mft (raw, json)
Hash identifier: FL8o4WLgOFuz3zRtt+khSYLA3LH/2QqyiFnQfPc89Ms=
Subject key identifier: 93:3F:5D:9B:1D:5D:51:72:3A:2A:F8:D2:22:08:8D:29:10:17:2C:15
Authority key identifier: 9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
Certificate issuer: /CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Certificate serial: 019DA3781052470C106F4E954037EB598052
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
Manifest number: 1485
Signing time: Sun 19 Apr 2026 02:00:47 +0000
Manifest this update: Sun 19 Apr 2026 02:00:47 +0000
Manifest next update: Mon 20 Apr 2026 02:00:47 +0000
Files and hashes: 1: G0aKcDsl1PqdjVR3FQskokbeFo4.roa (hash: 1L7mF5eSE/OQ8Z7D7J6lT/W3zitG2LYDWe4kI69m0FM=)
2: nOItyiotsKWf5WaByNHEBnenRbU.crl (hash: N/QqLDSOsw5keoJuZ71J92oB7AhuYgg/s2RCwVgHa/E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:78:10:52:47:0c:10:6f:4e:95:40:37:eb:59:80:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce22dca2a2db0a59fe56681c8d1c40677a745b5
Validity
Not Before: Apr 19 02:00:47 2026 GMT
Not After : Apr 20 02:00:47 2026 GMT
Subject: CN=933f5d9b1d5d51723a2af8d222088d2910172c15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:cc:8a:46:f2:a6:f4:18:e0:78:d8:02:7f:
53:4c:b3:03:0b:82:d3:ca:79:e3:05:50:e4:8d:a1:
78:bc:b4:ea:de:17:1b:82:79:1b:53:88:cc:e8:d9:
3f:fc:48:1a:29:fb:49:a5:38:46:dd:2b:47:59:97:
aa:e1:fc:e6:3a:99:48:e3:b5:0a:f6:87:77:0c:cb:
13:5b:ce:eb:64:40:dd:7b:c5:10:43:78:09:88:68:
31:a0:51:5c:16:1b:6f:1e:4a:1c:b1:8d:50:3a:a4:
e9:f3:d7:ff:e1:ad:04:2d:a2:ad:21:6d:84:e0:86:
76:f0:88:e2:c5:c5:8e:0d:34:e4:d1:da:e7:4e:5a:
d8:2c:a6:d0:7e:e3:6b:9d:4e:61:ac:64:9a:d7:68:
65:06:33:dd:d3:28:1d:ab:61:a6:75:40:6c:21:b7:
93:4f:5a:e9:d1:9e:be:8a:f9:5d:35:29:42:56:0e:
e8:06:95:20:18:e4:a8:df:61:79:e7:15:cc:9e:62:
b8:f5:4d:ac:8a:8b:76:cb:77:e9:1e:a5:f6:ee:4a:
1a:fb:4b:a7:68:66:33:f6:94:2b:84:64:bf:58:de:
01:dd:1c:94:9b:9f:cb:f1:ea:ff:d9:ba:b5:f2:1f:
2e:c0:fa:d4:e2:d6:24:72:ae:cd:d1:1a:ae:24:da:
33:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:3F:5D:9B:1D:5D:51:72:3A:2A:F8:D2:22:08:8D:29:10:17:2C:15
X509v3 Authority Key Identifier:
keyid:9C:E2:2D:CA:2A:2D:B0:A5:9F:E5:66:81:C8:D1:C4:06:77:A7:45:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOItyiotsKWf5WaByNHEBnenRbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/6b0e0e-8be5-4bf9-b427-70d63107d05d/1/nOItyiotsKWf5WaByNHEBnenRbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:03:10:58:ae:22:a4:ee:c6:5e:d5:fe:9c:a4:21:fd:cd:cf:
2d:77:22:12:ed:a1:a3:c3:41:72:c5:34:c3:1a:85:77:69:1a:
fa:cd:25:2e:b4:7c:9f:13:56:38:8f:e1:b5:a0:b8:21:31:b8:
b4:75:8f:cf:23:ee:91:3d:e0:2d:a9:17:50:81:0f:ee:87:07:
b7:54:9d:d8:eb:ca:35:cc:0d:78:1b:66:c4:68:07:9e:f4:f0:
92:e7:ef:75:71:c9:fd:87:f0:8b:5a:8b:bb:54:70:66:3b:57:
86:3c:3a:c5:1e:3a:81:3d:6b:13:bf:cd:40:bd:45:ff:66:59:
b9:3a:fa:ba:04:e6:28:74:06:d4:24:9f:4d:64:52:ec:25:aa:
77:67:a1:5c:05:12:93:d0:d1:ba:b0:ff:5e:48:67:91:30:bb:
7b:e4:b6:c9:1a:8f:c3:e2:ce:93:38:ab:09:02:c3:66:f5:0b:
7c:df:d8:e0:48:25:ef:16:59:d4:f4:dd:da:0a:e8:ef:e5:d9:
76:68:48:21:c6:2e:34:b9:97:de:19:cb:9c:9b:d8:3b:5e:90:
92:f2:64:5a:ba:a6:3f:9b:9c:48:31:53:2c:cb:dc:dc:f7:69:
14:78:1b:74:c2:c7:fe:7e:ec:3f:12:af:04:ea:97:5a:77:9d:
60:e1:9e:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:09 2026 by rpki-client