Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
File: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft (raw, json)
Hash identifier: F/MmHKqAk8g9Xre6/gSma/aNGNFX355A4mOJ+syZlEQ=
Subject key identifier: BD:E0:EA:DD:88:B0:57:DF:A3:04:D2:A7:7B:BE:6F:47:C8:3D:B3:9E
Authority key identifier: 9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
Certificate issuer: /CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Certificate serial: 019D9AAB938516C7806B2E278068561CDF71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
Manifest number: 108D
Signing time: Fri 17 Apr 2026 09:00:28 +0000
Manifest this update: Fri 17 Apr 2026 09:00:28 +0000
Manifest next update: Sat 18 Apr 2026 09:00:28 +0000
Files and hashes: 1: GKUVBc7-LD1_E5BxA3s5Q24wKRc.roa (hash: PJ4tHS8apGhvLe8TYz2cpr3MotUGBCPTkvdJ0n2/4ow=)
2: nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl (hash: /3gxtpV+3zClpkWXBfDQ+4JIvUc/29AMnKofn4QXrd0=)
3: osFhLlRHFGwfKLpsV50Rjvp_9Ds.roa (hash: uL7wqYgThc5bmPjNZmNt1te0zFr+Z2xMdvjLAunveII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ab:93:85:16:c7:80:6b:2e:27:80:68:56:1c:df:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d36e91b62d3dc7c137a28aaa006ede9b9ea1fe4
Validity
Not Before: Apr 17 09:00:28 2026 GMT
Not After : Apr 18 09:00:28 2026 GMT
Subject: CN=bde0eadd88b057dfa304d2a77bbe6f47c83db39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d8:61:a2:87:2b:50:cd:51:3b:d4:00:cf:ed:
eb:f9:12:ca:e5:60:f2:be:c7:cc:77:aa:94:58:13:
57:ea:a2:e5:45:5f:6c:75:b5:d9:c5:4d:91:41:a3:
02:77:43:d5:62:1d:95:34:a0:b3:1d:28:de:95:0e:
1c:e3:0f:c9:53:55:9d:2f:e1:97:0d:26:19:60:96:
56:88:b2:5d:6f:1f:f9:96:18:a0:92:98:f3:1e:80:
61:83:cc:6e:98:f5:75:0e:68:58:a9:bf:1e:ba:e5:
63:b8:78:70:e0:61:8d:e6:23:11:22:85:55:33:82:
3e:8f:a1:90:c7:39:48:03:fc:7c:67:fd:47:71:ea:
53:12:c0:1e:b8:6b:3b:75:3a:8a:ed:4b:01:f3:38:
9f:f3:80:d8:b3:71:59:03:8d:cf:e4:64:f5:54:7b:
28:25:10:7f:c8:0e:0e:be:55:49:ae:ea:94:63:e7:
40:f6:01:fc:fd:8f:de:ea:51:5b:83:bc:8b:60:09:
ed:92:73:b0:ed:57:c7:83:e0:73:ec:93:b2:41:bc:
c2:59:5d:55:ed:14:a4:81:a9:a0:7e:ba:5a:fe:3d:
72:2a:1e:2f:43:27:21:fa:0b:2f:24:96:a4:bd:98:
30:e3:6c:20:b6:f7:f1:5c:93:dc:7b:ab:b3:85:98:
06:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:E0:EA:DD:88:B0:57:DF:A3:04:D2:A7:7B:BE:6F:47:C8:3D:B3:9E
X509v3 Authority Key Identifier:
keyid:9D:36:E9:1B:62:D3:DC:7C:13:7A:28:AA:A0:06:ED:E9:B9:EA:1F:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/c284cd-b2b7-4911-b20b-b2cea7690837/1/nTbpG2LT3HwTeiiqoAbt6bnqH-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:d6:24:fa:c5:a4:8d:fa:01:12:39:6a:06:59:d9:a2:dd:72:
bb:a4:8c:3a:6e:72:29:56:fa:53:b9:06:21:0a:f9:72:a6:d1:
03:bd:0e:03:17:0f:45:dc:2a:52:ce:9b:83:c3:0b:df:04:70:
86:ad:28:3a:67:68:3e:9c:12:ed:28:d4:b8:19:88:23:5a:62:
3a:af:f6:7b:c5:96:76:f8:17:1a:14:d1:3a:6f:41:9e:45:18:
4d:09:1d:8b:14:48:68:f8:f5:73:1c:89:4f:05:ce:94:7e:6c:
43:3e:c9:e1:03:5b:8f:66:83:c8:fa:45:8b:ad:59:d7:3a:dc:
5a:07:90:d2:51:8e:c4:36:c2:a6:95:dc:f0:67:87:76:dd:9a:
ff:0d:f2:e0:c0:9b:15:3b:a7:9b:79:d8:c4:ba:91:0c:9b:a2:
9c:2d:38:c4:63:db:4a:c8:f2:f8:58:c5:55:0a:87:5c:2d:c9:
8b:df:14:28:33:13:53:30:06:40:55:b6:72:bb:64:64:81:85:
30:e5:b9:fe:71:34:02:d1:a4:e6:60:17:14:26:35:07:21:cd:
64:9f:f0:b7:bb:45:e6:95:91:b9:cf:96:2c:e3:f9:d9:52:72:
bc:a9:ee:84:da:6c:19:3a:2e:41:ae:5a:7b:be:5d:ee:c0:5d:
fe:45:1a:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:56 2026 by rpki-client