Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
File: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft (raw, json)
Hash identifier: CInPvSBuEHD2iclYKTR/qF3U4D5vpi/YqSOF2OxQmpA=
Subject key identifier: 9C:9B:AB:3B:D0:B4:22:59:B3:7C:17:46:0A:BD:8E:D8:3D:DC:79:1E
Authority key identifier: 36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
Certificate issuer: /CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Certificate serial: 019D9AABAFC83647A476DA548B7300B145A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
Manifest number: 18C1
Signing time: Fri 17 Apr 2026 09:00:36 +0000
Manifest this update: Fri 17 Apr 2026 09:00:36 +0000
Manifest next update: Sat 18 Apr 2026 09:00:36 +0000
Files and hashes: 1: 2faiVit9OjueZahp7YpMGI9nPX0.roa (hash: OgjxqGpyZOwTD9iVONTR2DO+mW7tsVQaXV48+jDEJWE=)
2: Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl (hash: uLOA3foAH/iWyp4oRPu9kZgJEe5y3sZOWmPlln15Uwc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:af:c8:36:47:a4:76:da:54:8b:73:00:b1:45:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36aafa5c3f2f8e4a083f81f0cb87bc7aea44891f
Validity
Not Before: Apr 17 09:00:36 2026 GMT
Not After : Apr 18 09:00:36 2026 GMT
Subject: CN=9c9bab3bd0b42259b37c17460abd8ed83ddc791e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:3a:8f:bd:f2:25:52:9a:6b:e9:14:3c:dd:5a:
be:35:a0:e5:b6:35:33:58:c1:64:f5:56:d7:8e:3a:
10:57:5e:3d:81:8f:f7:45:28:7b:6f:63:94:5f:e6:
20:68:95:94:8a:55:50:1f:f8:94:d5:5f:8b:c0:d3:
c7:a3:8b:a1:b4:40:95:0a:f3:a2:13:6e:ee:d6:f1:
2e:97:c8:f3:7b:84:f1:22:1b:95:26:66:48:1f:e5:
d1:fb:3b:34:34:15:1d:63:05:dd:54:a9:ee:37:7e:
bc:f7:15:22:b4:d6:54:87:79:b3:00:ad:6a:71:0f:
4d:d5:d5:3f:54:c0:5b:c3:5a:c0:54:c9:e4:b9:61:
d6:b4:02:4d:87:a4:fe:6a:9e:40:f5:f8:04:24:28:
70:e2:8b:2d:53:21:38:f0:0b:da:99:3d:4b:c5:49:
b3:23:20:84:44:2a:fd:b2:31:c7:1c:f1:d7:1b:eb:
72:7d:a2:13:7b:e1:a0:90:14:2c:a5:49:f7:18:a8:
ac:24:f9:42:54:68:3e:5c:ae:72:f7:a3:dc:97:bc:
1b:8b:24:0b:e9:65:91:c3:c6:ec:d0:fb:32:c4:36:
51:fd:bd:be:34:76:5a:25:69:8c:0d:1d:57:de:78:
cd:be:32:28:8e:d9:49:0f:33:e7:73:a2:a7:a3:eb:
cd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:9B:AB:3B:D0:B4:22:59:B3:7C:17:46:0A:BD:8E:D8:3D:DC:79:1E
X509v3 Authority Key Identifier:
keyid:36:AA:FA:5C:3F:2F:8E:4A:08:3F:81:F0:CB:87:BC:7A:EA:44:89:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/925d4a-f5f4-4299-a829-152a59479e69/1/Nqr6XD8vjkoIP4Hwy4e8eupEiR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:fa:48:a1:27:82:21:d7:49:0b:99:e2:f4:78:2a:ef:85:e6:
e8:97:55:97:f8:5f:13:16:38:30:c2:65:4f:c5:96:10:9f:f4:
7a:27:2e:d8:76:7d:d2:7c:41:dd:f7:53:c7:85:ec:d8:9f:a0:
d0:f2:5d:f3:96:cf:14:63:47:48:3e:52:81:9c:e7:de:f2:7c:
14:d2:90:52:8d:b7:1b:df:f9:e7:39:88:0c:89:3c:dc:00:cb:
67:32:3f:ab:d5:23:40:f6:ae:a4:0e:53:3f:33:a1:25:90:a3:
53:05:31:cb:f6:3a:37:8a:43:c7:1b:d8:38:51:c8:a2:53:24:
6b:c2:1b:5f:63:11:4b:d7:13:cd:2c:46:2f:43:db:97:26:23:
e9:3a:6f:6b:3d:dd:f5:c6:d4:d7:2d:0a:db:5c:1d:c6:fe:fc:
32:b5:97:c6:5d:9b:07:1c:a4:da:21:1d:2f:4a:fb:19:93:70:
b0:dc:4a:93:d4:c1:44:63:78:7d:75:e4:98:30:72:3d:2b:2f:
9c:4f:69:4f:18:29:12:04:d8:48:a6:e4:d7:61:4a:86:46:1e:
a6:e4:45:f1:58:31:82:a4:c9:01:41:a9:46:be:1e:d1:75:b8:
ef:32:d5:59:db:2e:d4:b7:44:52:c6:b1:e3:d2:7f:92:0f:12:
94:74:fe:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:03 2026 by rpki-client