Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
File: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft (raw, json)
Hash identifier: yzcg4UDm0LNADTu9tdmVQN92EGR+c61kAhHLsHcuXrQ=
Subject key identifier: 41:F4:50:64:69:42:76:25:DA:3C:97:5B:DB:18:AD:FE:15:E5:EF:34
Authority key identifier: 9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
Certificate issuer: /CN=9d8ada352982a319b54d5e483d34426346733ea4
Certificate serial: 019DA567531D975EEA279E7EA0F01070A793
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
Manifest number: 17B8
Signing time: Sun 19 Apr 2026 11:01:45 +0000
Manifest this update: Sun 19 Apr 2026 11:01:45 +0000
Manifest next update: Mon 20 Apr 2026 11:01:45 +0000
Files and hashes: 1: fPpcTKJECfYoksYEZEcUM_j0qkQ.roa (hash: E5+q7rc6m3t9onZOzrQMasG/CbDzH+1hOPd2cCu+nT4=)
2: nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl (hash: Ew7XaN8WZSsFkZimtBgPLusAlnrlwiV+GRZvb9j4tFs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:67:53:1d:97:5e:ea:27:9e:7e:a0:f0:10:70:a7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8ada352982a319b54d5e483d34426346733ea4
Validity
Not Before: Apr 19 11:01:45 2026 GMT
Not After : Apr 20 11:01:45 2026 GMT
Subject: CN=41f4506469427625da3c975bdb18adfe15e5ef34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:69:a2:19:66:f6:c0:a3:7a:88:3a:8e:2c:8f:
6b:0b:0f:f9:14:a2:d1:d2:20:e8:3c:b3:d3:9a:6b:
23:dc:bf:61:58:02:dd:56:78:c0:c0:6f:37:97:fc:
4f:de:08:10:2c:50:b4:62:7a:92:7b:11:17:be:8e:
80:a0:40:86:45:3e:02:67:82:39:5b:3b:c1:9b:13:
67:46:90:ab:7a:21:bf:0f:f2:d5:8f:13:2c:c7:e3:
91:10:0c:1f:df:f0:45:b5:8b:af:28:60:fb:09:bb:
6d:08:9d:7c:09:16:cc:4f:cc:f0:45:ee:51:19:5c:
4d:e2:f2:e1:54:fe:c0:f8:b0:6f:00:a0:63:46:30:
fb:3f:04:6f:ad:e9:74:90:55:5c:bc:a0:80:da:75:
14:ad:c4:1b:51:54:c5:f3:a3:42:ff:22:d8:2a:7d:
3b:43:c3:16:51:d3:21:51:0a:63:04:ca:f4:c7:98:
51:24:8a:e8:32:2f:4a:2f:eb:2e:3f:71:34:86:83:
21:ca:7b:ce:2b:ee:3a:14:c2:f0:05:08:92:dc:e9:
d4:c7:2c:00:ee:6a:91:6a:d3:ea:2f:b6:04:c1:73:
1b:cb:2e:7f:a0:2e:91:2e:86:42:1e:6d:2c:c5:97:
af:9b:c0:36:7a:53:0f:c4:5d:e7:67:8c:af:53:02:
09:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:F4:50:64:69:42:76:25:DA:3C:97:5B:DB:18:AD:FE:15:E5:EF:34
X509v3 Authority Key Identifier:
keyid:9D:8A:DA:35:29:82:A3:19:B5:4D:5E:48:3D:34:42:63:46:73:3E:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/f4863a-aeae-42f7-ba14-ed4a138c4113/1/nYraNSmCoxm1TV5IPTRCY0ZzPqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:3a:cf:c3:33:2f:4f:1e:59:00:b5:44:74:ce:7f:43:e3:97:
ef:34:cb:5a:3a:01:16:d0:cc:8b:22:1b:b1:12:ac:f7:b9:9d:
a7:34:37:f1:ac:3d:4c:d3:b3:c1:b4:01:15:f8:4a:8d:50:b8:
1b:9a:5b:f9:5b:ad:9c:53:9e:80:c8:ad:91:ba:1c:57:d5:8b:
fa:4f:02:6d:b8:96:63:04:ed:23:b0:e0:9b:20:d9:a3:fe:5f:
da:7c:5e:1e:47:4b:5c:11:d5:9f:d5:c5:45:b2:6f:3e:37:01:
23:dd:e1:5f:20:2a:d1:cd:71:9f:7c:a1:56:cf:c4:68:42:6f:
5d:6e:f7:88:f4:b6:26:c4:e7:a1:77:df:b4:42:ac:05:92:d9:
3b:28:1a:08:62:cf:4e:7c:11:ad:d0:3c:3e:f1:50:cc:16:4b:
eb:42:e7:38:36:17:32:d8:09:03:05:6f:60:ba:4f:5a:af:05:
b8:87:f8:78:ef:38:0c:34:dc:be:01:54:ea:c6:55:f3:97:42:
81:54:97:06:74:74:59:7c:43:e5:26:fa:36:8a:3f:e3:c7:de:
9a:d1:bf:2b:e8:ea:a4:40:08:41:14:f6:2e:6a:63:72:43:a6:
d7:70:3e:97:02:b7:a0:c0:ef:47:ce:6a:eb:07:d0:3a:6f:55:
b3:26:04:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2lZ1Mdl17qJ55+oPAQcKeTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkOGFkYTM1Mjk4MmEzMTliNTRkNWU0ODNkMzQ0MjYzNDY3
MzNlYTQwHhcNMjYwNDE5MTEwMTQ1WhcNMjYwNDIwMTEwMTQ1WjAzMTEwLwYDVQQD
Eyg0MWY0NTA2NDY5NDI3NjI1ZGEzYzk3NWJkYjE4YWRmZTE1ZTVlZjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7GmiGWb2wKN6iDqOLI9rCw/5FKLR
0iDoPLPTmmsj3L9hWALdVnjAwG83l/xP3ggQLFC0YnqSexEXvo6AoECGRT4CZ4I5
WzvBmxNnRpCreiG/D/LVjxMsx+OREAwf3/BFtYuvKGD7CbttCJ18CRbMT8zwRe5R
GVxN4vLhVP7A+LBvAKBjRjD7PwRvrel0kFVcvKCA2nUUrcQbUVTF86NC/yLYKn07
Q8MWUdMhUQpjBMr0x5hRJIroMi9KL+suP3E0hoMhynvOK+46FMLwBQiS3OnUxywA
7mqRatPqL7YEwXMbyy5/oC6RLoZCHm0sxZevm8A2elMPxF3nZ4yvUwIJvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEH0UGRpQnYl2jyXW9sYrf4V5e80MB8GA1UdIwQY
MBaAFJ2K2jUpgqMZtU1eSD00QmNGcz6kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQt
ZWQ0YTEzOGM0MTEzLzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi9mNDg2M2EtYWVhZS00MmY3LWJhMTQtZWQ0YTEzOGM0MTEz
LzEvbllyYU5TbUNveG0xVFY1SVBUUkNZMFp6UHFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEzrPwzMv
Tx5ZALVEdM5/Q+OX7zTLWjoBFtDMiyIbsRKs97mdpzQ38aw9TNOzwbQBFfhKjVC4
G5pb+VutnFOegMitkbocV9WL+k8CbbiWYwTtI7DgmyDZo/5f2nxeHkdLXBHVn9XF
RbJvPjcBI93hXyAq0c1xn3yhVs/EaEJvXW73iPS2JsTnoXfftEKsBZLZOygaCGLP
TnwRrdA8PvFQzBZL60LnODYXMtgJAwVvYLpPWq8FuIf4eO84DDTcvgFU6sZV85dC
gVSXBnR0WXxD5Sb6Noo/48femtG/K+jqpEAIQRT2LmpjckOm13A+lwK3oMDvR85q
6wfQOm9VsyYERA==
-----END CERTIFICATE-----
Generated at Sun Apr 19 14:22:36 2026 by rpki-client