Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
File: nJB6oEaogfuAUFGVIBYwYCYNfzE.mft (raw, json)
Hash identifier: yhxA0Ir6MtrGytOm0DvvJ20GzZYc8E1tlLjQWoLviHw=
Subject key identifier: 87:44:14:6C:AF:42:C7:EA:B1:9D:31:D2:49:B2:F4:84:BD:00:38:F4
Authority key identifier: 9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
Certificate issuer: /CN=9c907aa046a881fb8050519520163060260d7f31
Certificate serial: 019DA48AE7E8AF124C8FD99685CED9AE9762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
Manifest number: 04A2
Signing time: Sun 19 Apr 2026 07:00:59 +0000
Manifest this update: Sun 19 Apr 2026 07:00:59 +0000
Manifest next update: Mon 20 Apr 2026 07:00:59 +0000
Files and hashes: 1: 87sPgGS78gNXnDIuF37apaMYRbQ.roa (hash: gwbpEBETTamHMzi2lyqeLf+vpyBZoN6/hFjwP/nt39I=)
2: nJB6oEaogfuAUFGVIBYwYCYNfzE.crl (hash: IlP+iFMmpwZPKGpbd8LM4Xuy3gN0YIhHxBS5gvn7V08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a4:8a:e7:e8:af:12:4c:8f:d9:96:85:ce:d9:ae:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c907aa046a881fb8050519520163060260d7f31
Validity
Not Before: Apr 19 07:00:59 2026 GMT
Not After : Apr 20 07:00:59 2026 GMT
Subject: CN=8744146caf42c7eab19d31d249b2f484bd0038f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f6:07:9a:4b:ad:df:63:fb:bc:d4:a5:cb:2c:
52:9d:1d:7f:64:2a:56:eb:74:7c:5b:8f:1e:09:a4:
78:6b:b1:78:c8:d4:41:c7:5a:2c:9a:f7:68:8e:71:
15:23:80:37:ec:fb:0f:7b:25:67:dc:ee:7d:78:e4:
fe:89:ef:7c:b2:61:2b:71:eb:9c:4f:86:77:51:5a:
45:f9:a6:ef:a4:79:d2:9f:a8:e6:11:c9:b1:c9:b2:
54:76:77:81:d8:5d:46:a1:17:06:55:d8:95:7f:23:
ad:4f:4f:6d:cf:f1:47:ad:58:0d:36:67:61:51:eb:
1f:f0:92:34:61:00:d3:16:3b:7f:76:f7:00:96:19:
26:35:85:97:38:08:b2:80:c0:56:ce:6b:f8:de:cf:
26:a6:22:75:e7:48:1e:d5:e9:31:7f:9a:40:da:98:
ee:5f:4b:75:ef:11:00:74:1e:a6:37:c2:81:5e:7d:
7a:d8:6e:c4:b5:ad:5d:58:7e:8b:f7:7f:dc:87:67:
2d:11:6d:20:56:d0:54:e1:a2:6b:ce:8b:c0:af:26:
20:86:ef:e1:ed:dd:c9:9f:97:1a:8e:6c:37:68:05:
89:bb:a6:de:cd:86:83:1d:51:d5:5b:8f:fb:a6:00:
bd:b5:0e:3d:1c:68:1b:13:f3:40:d1:ff:92:af:96:
83:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:44:14:6C:AF:42:C7:EA:B1:9D:31:D2:49:B2:F4:84:BD:00:38:F4
X509v3 Authority Key Identifier:
keyid:9C:90:7A:A0:46:A8:81:FB:80:50:51:95:20:16:30:60:26:0D:7F:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJB6oEaogfuAUFGVIBYwYCYNfzE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/dcb613-93eb-4e86-895b-b1e698708f59/1/nJB6oEaogfuAUFGVIBYwYCYNfzE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:3b:13:87:d4:74:86:08:16:dd:27:60:63:10:2a:b5:33:ee:
0a:38:d7:4e:f2:50:5e:98:37:4b:87:c3:ac:ad:4a:bb:e0:94:
61:73:be:b4:bd:8d:c9:89:d4:52:de:9f:ea:6c:14:84:df:4e:
e6:cc:10:34:b0:13:3c:99:41:66:92:71:7d:a8:8d:66:5a:46:
c6:c9:f2:13:21:64:92:cc:29:28:41:fa:2f:32:01:39:c8:74:
4e:5f:b8:08:ca:d1:12:51:17:3e:50:f0:d5:0b:87:30:d9:89:
32:27:5a:73:88:b0:76:15:68:12:da:f9:aa:40:91:e6:dc:be:
27:91:3c:e5:eb:b9:f9:f8:6c:f1:01:72:35:ba:a8:2a:fb:cf:
d5:f3:93:2c:fe:2f:1d:8e:e3:21:d4:ef:80:25:e1:6f:8d:69:
7c:6f:9b:b3:b6:da:4a:a8:a0:8d:7b:7d:4e:aa:b5:ec:1d:73:
e5:d3:93:99:e3:16:be:54:6c:0b:c0:21:3d:94:68:19:26:8e:
15:98:ec:b3:5c:bf:b4:55:a3:77:59:45:08:d3:3c:c1:8e:64:
56:27:10:73:5c:e1:27:af:bf:e5:ab:33:0f:c2:5f:bb:03:8c:
ad:8c:c6:8b:16:e7:92:ef:28:e1:5d:03:16:5e:f7:cf:f3:05:
21:88:61:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:03:44 2026 by rpki-client