Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
File: nNZ9EDPKRytbuA_VlruDbRLiImE.mft (raw, json)
Hash identifier: RXMzPwgcFGawyW1CzTAcIYcHk4YO07DvhtDgHXmS/C8=
Subject key identifier: 3A:D7:55:A3:DD:A5:54:2D:20:6C:CE:84:0F:58:5B:B3:BC:7D:09:D2
Authority key identifier: 9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
Certificate issuer: /CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Certificate serial: 019D992B39CF4D6F6D235BF7B3612F6431BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
Manifest number: 0EB2
Signing time: Fri 17 Apr 2026 02:00:39 +0000
Manifest this update: Fri 17 Apr 2026 02:00:39 +0000
Manifest next update: Sat 18 Apr 2026 02:00:39 +0000
Files and hashes: 1: UyjG7mUKw_csY7SyBZFvUhkSaPc.roa (hash: n9HYRjqT7Yx/CpHx7zXXC15FE0G/joD1gI9dynyvC54=)
2: nNZ9EDPKRytbuA_VlruDbRLiImE.crl (hash: 9r9r+pAd1+8qM9V7QPfXH1jfCvhy3330hKJGKmwuZOs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:39:cf:4d:6f:6d:23:5b:f7:b3:61:2f:64:31:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd67d1033ca472b5bb80fd596bb836d12e22261
Validity
Not Before: Apr 17 02:00:39 2026 GMT
Not After : Apr 18 02:00:39 2026 GMT
Subject: CN=3ad755a3dda5542d206cce840f585bb3bc7d09d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:24:c7:49:78:6e:19:b1:b8:39:33:ce:63:14:
6b:9d:36:02:5a:d9:b0:ec:e5:3e:b9:54:60:77:7b:
62:49:e5:4f:ef:1b:bd:d9:42:68:04:ee:e3:47:63:
ed:9e:17:4e:33:a3:50:fe:6c:b3:8b:bf:33:04:94:
8b:dd:d9:31:93:6a:e9:51:87:bd:0e:e5:c7:42:4d:
84:19:3a:dc:2d:1e:0d:df:1d:d5:94:04:bf:6a:ec:
8a:3b:76:a0:b1:69:e0:40:cc:3f:c3:07:f7:62:50:
17:2e:71:05:99:8e:4e:e2:d7:21:c5:ce:19:83:d8:
45:4b:17:79:7e:69:6d:a5:92:d4:25:3d:ca:50:36:
bf:dc:59:7f:e5:d6:b7:f5:4a:66:86:6f:27:05:0c:
ec:12:8e:3b:5c:6d:6c:ca:27:af:b0:f2:1e:df:06:
6e:ff:00:1c:9d:06:61:04:c0:3c:30:43:86:c9:3d:
4a:f6:37:52:bd:fb:0f:b3:93:91:fd:d5:ef:a4:3a:
a7:b3:e7:68:76:c3:cc:67:d1:96:56:9f:6a:85:48:
40:f3:13:13:11:ba:17:5d:57:34:83:fe:56:d1:f2:
bf:4d:a8:0c:41:65:0f:d5:e7:fc:b9:f5:85:2c:f9:
95:11:79:24:a8:1c:3f:9c:3d:1c:c7:73:6e:c4:a2:
b2:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:D7:55:A3:DD:A5:54:2D:20:6C:CE:84:0F:58:5B:B3:BC:7D:09:D2
X509v3 Authority Key Identifier:
keyid:9C:D6:7D:10:33:CA:47:2B:5B:B8:0F:D5:96:BB:83:6D:12:E2:22:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNZ9EDPKRytbuA_VlruDbRLiImE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f17722-e58b-4452-8135-eaa5acf35fd1/1/nNZ9EDPKRytbuA_VlruDbRLiImE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:a5:40:e2:4b:de:ff:0a:9d:95:45:56:50:07:5a:bf:90:c7:
1b:61:ee:8b:60:1c:bc:b4:82:1c:59:91:45:38:98:cf:91:ba:
35:af:a4:2e:43:9c:71:9d:51:32:bc:e4:23:2c:9b:95:90:6b:
8e:40:83:51:0f:50:99:35:c7:c8:25:a1:75:7f:c8:1b:85:2b:
69:42:27:45:67:5a:ee:0f:27:56:e6:12:de:13:bf:f2:7c:5b:
b1:50:03:e2:28:75:ce:66:72:ef:82:3f:a0:f9:18:2f:58:4f:
3a:bf:87:e7:e9:30:95:a4:d1:66:0e:54:5b:a1:3c:76:9e:3f:
30:53:45:53:2c:31:83:54:74:61:63:97:a9:60:d4:ba:cf:ff:
0c:d0:fb:9d:b2:d0:bf:0b:be:43:5c:6f:ba:b3:24:4c:ad:a9:
54:47:42:78:83:92:49:e3:2c:f2:f4:dd:f9:e4:4e:92:a7:9f:
7b:24:8c:12:9c:50:8f:98:7f:62:19:d5:ad:a6:37:ad:9c:91:
6c:57:fc:46:69:ba:83:cd:b2:f3:b6:bf:eb:3e:3d:d5:56:79:
ee:8a:f4:8f:49:a3:6a:66:af:65:98:58:9b:f5:17:4d:15:f6:
7f:fa:61:ad:01:cd:38:23:29:1c:fd:c8:23:84:6c:04:ac:e3:
22:41:3b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:29:19 2026 by rpki-client