Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: kDoYRjzBD5tkEesAvCFSWCeDsAbzgW+y6VxREkD/tNU=
Subject key identifier: E0:57:F7:4D:E0:57:E3:A3:BE:96:87:8F:0A:2A:6D:3D:01:E1:BF:94
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019DA3E68C6AFA09FE77EBA28945BDFA151A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 037E
Signing time: Sun 19 Apr 2026 04:01:28 +0000
Manifest this update: Sun 19 Apr 2026 04:01:28 +0000
Manifest next update: Mon 20 Apr 2026 04:01:28 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: 5LhTmy9QG73gmsmD/ociLQ3//SX3wXBRThBka5xCcKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:8c:6a:fa:09:fe:77:eb:a2:89:45:bd:fa:15:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Apr 19 04:01:28 2026 GMT
Not After : Apr 20 04:01:28 2026 GMT
Subject: CN=e057f74de057e3a3be96878f0a2a6d3d01e1bf94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:3a:5c:d1:75:b5:6e:e6:fc:3e:e2:f4:63:
bb:60:75:9e:49:d4:9e:69:3e:b3:ea:52:d4:34:4c:
d2:af:0f:18:4b:48:08:be:ea:0e:b2:2d:90:ee:ca:
ba:09:73:05:b2:57:46:16:00:97:d6:f1:71:fe:fb:
43:14:dc:46:41:be:eb:33:47:f3:11:09:91:42:02:
21:ca:ca:2a:0e:39:68:25:52:2d:86:be:22:8c:8a:
9b:a3:78:c0:26:d7:8e:16:a4:67:96:6f:37:69:d2:
9a:cf:ab:93:14:ab:73:ab:b0:a4:42:c3:47:27:ee:
72:4e:6d:31:d3:b6:bb:ec:e7:e8:1f:09:63:6c:ba:
b3:cf:6c:16:6f:ae:26:be:ab:82:88:a1:f6:dc:40:
43:6d:82:72:67:10:a9:81:01:c8:99:bd:dd:55:ca:
13:b1:fc:09:cc:3d:d3:a4:6f:e9:4c:25:69:2b:7b:
a5:52:9d:5c:30:73:ff:de:71:24:1f:16:66:52:fb:
65:ba:93:a7:e2:22:07:a4:d7:cf:22:40:f4:98:d0:
a2:fd:1e:c5:e5:bf:1a:69:46:e3:69:0e:18:f1:9b:
b8:82:a7:1e:a6:50:28:09:f9:39:77:10:a2:aa:59:
0d:fc:9f:88:78:01:2c:8b:57:a7:d9:03:36:3b:d5:
bd:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:57:F7:4D:E0:57:E3:A3:BE:96:87:8F:0A:2A:6D:3D:01:E1:BF:94
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:5c:b2:53:8e:b4:3f:6b:6a:9b:70:52:e9:90:b0:30:74:8d:
3e:40:b9:d1:c4:3a:27:50:e9:5f:25:66:70:f6:16:56:8f:c9:
0e:0b:c8:f0:0e:fa:43:cd:3d:61:e8:d8:b2:89:55:b6:48:64:
eb:11:b6:a3:bd:61:ea:27:38:85:01:e1:63:f5:73:74:72:d5:
fb:a8:79:1f:5c:8c:a1:15:a4:0d:71:56:f8:a3:52:2c:be:cb:
10:95:9e:da:5e:6e:0f:76:9b:7c:77:95:a1:18:de:5d:ff:93:
ed:90:03:54:1e:e0:81:77:e5:73:77:fa:c7:5e:d0:31:b2:d9:
89:7b:90:10:22:51:c5:d5:ca:1e:25:4b:3b:29:ea:c0:80:17:
83:8a:76:0b:a3:d7:a1:50:52:31:fd:36:5f:02:2f:17:0a:37:
0d:e2:eb:10:e7:9f:cd:3e:cb:71:64:48:17:83:fa:6d:1a:f5:
f1:8d:97:ac:06:35:df:d5:55:16:11:89:35:c8:f9:85:24:e7:
a4:00:fc:ab:6e:ec:8c:8d:e5:99:89:73:d7:c4:bc:0e:c8:1f:
16:5d:ec:3a:49:2a:79:2f:2e:1e:6f:46:a1:33:6f:63:aa:62:
43:5d:85:71:fd:bc:42:da:15:8b:e1:6b:cb:17:f6:bd:f7:8e:
1d:68:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 12:19:07 2026 by rpki-client