Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
File: Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft (raw, json)
Hash identifier: 4OL4mOpOFk8LLXpx/IDtfc3uLYXsP/QWLWbexWM6gsw=
Subject key identifier: 9C:41:3C:C5:93:71:E8:C7:D7:79:92:F7:33:63:5E:07:E5:1E:23:07
Authority key identifier: 37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
Certificate issuer: /CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Certificate serial: 019D9B196B44520C071D3AFC1DCE7249F5B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
Manifest number: 18C4
Signing time: Fri 17 Apr 2026 11:00:27 +0000
Manifest this update: Fri 17 Apr 2026 11:00:27 +0000
Manifest next update: Sat 18 Apr 2026 11:00:27 +0000
Files and hashes: 1: Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl (hash: MxNzCvXDPye6RmuI1eeq4tRclioJvNx6SRCwe1ktbs8=)
2: TM1bxUMPDPyCHRavcIw7WxQjRbU.roa (hash: UaG8J2YnGAjViEmyxsyTzCRJYYoHOIo0htvybh8voBc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:6b:44:52:0c:07:1d:3a:fc:1d:ce:72:49:f5:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=371fb85d4f808cb1607a2be4f4a798ca3ead3810
Validity
Not Before: Apr 17 11:00:27 2026 GMT
Not After : Apr 18 11:00:27 2026 GMT
Subject: CN=9c413cc59371e8c7d77992f733635e07e51e2307
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:f8:2d:e8:a1:4b:8b:63:a3:da:17:c4:95:e0:
39:95:e6:51:fe:fb:cf:b2:c5:a5:96:a3:14:49:de:
86:a9:3d:85:7a:dd:6c:65:9e:8a:1b:29:17:93:fd:
46:68:30:1b:ec:30:6e:95:86:a9:38:4a:dd:8c:fe:
77:c1:7a:b6:4e:12:98:a9:c1:64:0a:0c:7f:b6:42:
17:47:76:1a:a3:56:f9:85:e0:15:a5:b8:08:b5:bf:
83:1c:b5:dd:2f:df:4e:94:24:26:a7:d7:75:ee:be:
be:a6:93:6c:54:1d:d4:e0:39:83:c8:52:60:8a:51:
36:9d:3e:fc:c8:31:43:11:4a:ca:cb:62:da:1d:05:
c7:7a:54:35:b4:6c:d1:f7:4c:b7:33:4c:62:bd:9b:
76:59:1e:d5:74:a5:dd:fa:41:e8:93:0d:52:43:df:
64:2a:3d:33:fb:5d:b1:69:91:bb:3c:06:71:e7:80:
35:14:d7:eb:d7:45:ce:35:93:ae:90:c7:83:6f:6e:
5a:ef:ca:2c:6a:36:9b:b8:e9:5f:d9:27:1a:99:5f:
85:48:15:f6:07:7c:34:64:d3:47:e4:e2:68:ec:84:
88:b7:20:3a:ee:8f:6b:2c:e4:50:f1:c8:6c:e6:c6:
99:c3:6f:a7:85:1a:39:d0:64:75:31:b6:5d:ae:5c:
ff:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:41:3C:C5:93:71:E8:C7:D7:79:92:F7:33:63:5E:07:E5:1E:23:07
X509v3 Authority Key Identifier:
keyid:37:1F:B8:5D:4F:80:8C:B1:60:7A:2B:E4:F4:A7:98:CA:3E:AD:38:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nx-4XU-AjLFgeivk9KeYyj6tOBA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/c5a848-260d-4ad0-aef3-d7b2c93442d3/1/Nx-4XU-AjLFgeivk9KeYyj6tOBA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:72:4d:16:48:97:2e:57:41:0d:0c:54:0b:e1:ed:5e:47:60:
4b:6b:1e:6b:87:80:62:82:24:bf:e4:78:d0:e1:49:74:ce:bf:
10:b3:80:3c:29:66:10:bf:46:3a:c8:5a:27:57:be:e2:09:45:
15:43:7a:78:94:79:56:74:c2:ca:77:78:f5:d1:9c:5b:14:c7:
ab:73:ee:ef:c0:a3:2d:49:c5:66:58:e8:0b:aa:ab:7b:bc:30:
27:e9:2c:01:f3:19:bd:50:4b:db:3b:51:83:bc:d8:67:28:2d:
1c:f5:92:26:9f:4e:db:21:e4:16:5a:1d:69:a0:b5:08:54:65:
04:5a:28:02:c1:5e:f0:11:b3:96:3d:9f:b8:71:4b:33:f6:48:
a8:65:3b:dc:33:bb:03:2b:cd:52:b4:41:bd:7e:2f:fb:b6:f2:
2e:9a:95:db:f0:04:dd:6f:7d:99:ab:a0:28:f5:91:3d:89:34:
23:75:b4:99:f3:f4:8b:79:69:58:46:d9:e3:77:60:86:5d:23:
d0:a4:ba:1b:51:1e:94:43:cc:cb:29:c5:8a:12:56:e1:37:71:
44:3a:64:45:17:3a:f7:50:ed:0c:d5:f1:a3:ca:f1:59:a4:00:
12:25:be:53:a3:2d:9d:fb:bb:22:26:f8:7d:48:41:8d:0b:97:
6c:42:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:47:13 2026 by rpki-client