Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: IVCGr8CrCV/09Ga9+fBEor8wP+xM8XYqkAvmTxwgRQI=
Subject key identifier: 5E:7B:A3:93:F8:3B:69:2A:B5:C2:A3:96:F4:40:6F:B9:91:BE:EF:4B
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019D9818869FD921CF01BBDE218CF44CC9E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 18C2
Signing time: Thu 16 Apr 2026 21:00:37 +0000
Manifest this update: Thu 16 Apr 2026 21:00:37 +0000
Manifest next update: Fri 17 Apr 2026 21:00:37 +0000
Files and hashes: 1: ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa (hash: ZZQdUJPsVGvVmbO6BIZT7SnJBcEBT1ZftSP8BYy67GI=)
2: c57e1whtl5eogTBCeFXU_KrAjnI.roa (hash: rui/Yx3IAn8AclnySbYIVuFoxnyBxQ2AYt9fq4YiyHI=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: 9qCMkhEChlbPrSV0WRYeXHfLRgN9srmBXUVf6Zs/yMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:18:86:9f:d9:21:cf:01:bb:de:21:8c:f4:4c:c9:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Apr 16 21:00:37 2026 GMT
Not After : Apr 17 21:00:37 2026 GMT
Subject: CN=5e7ba393f83b692ab5c2a396f4406fb991beef4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:f8:d4:43:ce:d4:ad:90:9b:b7:66:4d:6d:
cc:95:28:7f:2f:07:af:71:d8:f7:53:bf:2d:fd:17:
23:d9:8a:b2:45:b9:bb:64:b0:52:8b:0e:d8:b6:f7:
b0:50:b3:45:f0:cd:b1:cf:ac:78:77:67:a4:ea:b2:
1c:7e:82:a5:f5:75:08:40:11:cf:64:73:2e:69:8b:
68:12:7f:37:39:8b:cf:25:76:15:11:78:09:a7:d4:
07:a1:71:d7:39:94:a2:49:25:74:61:cf:13:7f:78:
b1:7a:c5:aa:31:d6:3a:c1:7a:0c:f5:e3:bc:3b:a9:
7b:35:a5:8c:c1:28:6e:c4:8e:65:dd:16:6f:83:e5:
41:59:63:72:7a:42:0a:f6:3f:1a:65:3b:bc:52:92:
1a:aa:50:32:b0:0c:c9:e8:ea:ac:39:76:e8:f3:f8:
1e:2d:3e:1f:50:b0:8d:a8:12:8f:db:a7:15:e3:a8:
fe:3a:5c:e1:37:fb:aa:86:2c:7c:74:a5:d1:a6:65:
9c:c3:7f:ac:42:b7:18:b0:88:a6:b0:0e:9f:e3:e8:
b3:69:72:08:63:94:66:7f:a5:f0:e7:26:2a:38:bb:
14:3e:00:8f:3f:b6:f3:df:88:e9:be:2f:19:75:d0:
1d:82:32:96:27:86:1a:3f:d1:f3:9b:66:83:d5:de:
22:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:7B:A3:93:F8:3B:69:2A:B5:C2:A3:96:F4:40:6F:B9:91:BE:EF:4B
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:33:6b:41:96:32:f2:57:0a:85:88:08:4c:5b:2c:77:0b:5e:
f8:0a:1c:ee:cc:5a:d2:b4:00:6f:68:1d:00:40:ed:1a:48:72:
46:c3:c5:2a:b1:a9:aa:87:12:9b:c3:00:75:21:cf:0e:2d:6f:
b3:b6:e5:a6:38:27:1c:8e:f0:16:86:ae:eb:16:96:8b:24:d8:
91:48:13:53:18:99:23:47:3b:a0:ad:b9:01:b0:9b:bd:df:03:
f3:07:61:8f:4d:c9:bc:77:94:68:20:ee:83:d7:7f:81:e6:74:
14:20:10:92:36:2a:d8:c3:43:3e:14:48:af:cb:bc:03:74:f5:
76:78:86:30:4a:77:b1:67:98:d0:44:17:4f:c4:ae:40:2d:dd:
6e:4b:18:af:eb:c3:21:09:e7:9f:c4:1d:17:10:9a:f2:79:03:
cb:76:b9:0d:51:12:cb:28:3b:d3:d0:bb:40:5e:70:5a:63:90:
be:ac:81:56:78:29:8d:7b:ab:b0:05:71:0d:8e:08:09:f3:45:
33:ee:2f:b7:a8:3c:90:5c:4d:50:ba:76:19:71:fc:cc:51:ff:
29:b0:62:fd:90:b3:ba:6f:b9:f3:e0:21:c1:ce:ff:83:0e:e3:
60:c5:b6:3b:ab:0a:2a:af:15:7b:fe:d6:cb:66:15:4c:b1:2c:
b5:7a:90:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:24:08 2026 by rpki-client