Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
File: nPMilEsEi3BX5F7SyzQbVg4KxsM.mft (raw, json)
Hash identifier: QWCUQqJHmarQ1RaeXmGlHmq9mvuM+15WpQ4OfRiW0VQ=
Subject key identifier: 4D:70:65:02:B2:06:3C:3B:85:1D:81:53:1B:C1:AA:81:03:28:06:84
Authority key identifier: 9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
Certificate issuer: /CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Certificate serial: 019D9B5095CF6644F87EE4334CC8A7DA0DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
Manifest number: 18BE
Signing time: Fri 17 Apr 2026 12:00:42 +0000
Manifest this update: Fri 17 Apr 2026 12:00:42 +0000
Manifest next update: Sat 18 Apr 2026 12:00:42 +0000
Files and hashes: 1: nPMilEsEi3BX5F7SyzQbVg4KxsM.crl (hash: epzlpJIfJeX4n7BpjPvlZUdR7l8At1yLfmZY4kaecYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:50:95:cf:66:44:f8:7e:e4:33:4c:c8:a7:da:0d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cf322944b048b7057e45ed2cb341b560e0ac6c3
Validity
Not Before: Apr 17 12:00:42 2026 GMT
Not After : Apr 18 12:00:42 2026 GMT
Subject: CN=4d706502b2063c3b851d81531bc1aa8103280684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:9f:84:98:31:6a:cd:7f:bb:21:c8:04:dd:8c:
ae:14:93:0a:32:73:c3:62:99:dd:27:61:da:a7:03:
1d:27:6b:dd:b8:4b:ac:64:6f:21:d0:a2:d9:4b:ac:
30:01:4a:22:de:48:5e:06:df:76:ac:3d:e5:e3:ff:
9c:ac:0e:5b:bc:ee:da:ef:be:4f:57:51:1f:03:6b:
d6:85:ba:f8:30:aa:fb:5a:b1:9a:f8:34:a5:a6:21:
cd:f1:88:35:f4:30:94:26:5f:00:45:51:34:29:97:
e7:30:4b:a8:24:93:a3:62:cc:a5:f6:7f:eb:e5:f0:
aa:fd:db:5e:b5:c0:4e:8c:64:00:68:3c:24:aa:d4:
0d:dd:a0:98:70:42:30:25:90:c8:87:5f:aa:d0:f2:
da:76:94:4d:97:2f:51:42:78:f2:2b:de:73:67:82:
7c:f5:59:61:1d:d5:00:1b:bb:9c:90:80:d1:c3:20:
75:3c:b0:02:89:61:f0:22:44:37:f3:73:e3:2e:0d:
3f:94:b3:b4:f1:71:74:be:d2:1d:11:c2:66:e2:e9:
5b:ec:76:c3:14:0a:2e:11:ac:17:e6:5d:c7:1b:86:
13:9a:3a:5e:2d:c3:8c:bb:21:0b:5b:05:5c:ea:1e:
da:47:b9:be:9c:c1:d9:d7:c4:44:91:27:e4:e7:e9:
e9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:70:65:02:B2:06:3C:3B:85:1D:81:53:1B:C1:AA:81:03:28:06:84
X509v3 Authority Key Identifier:
keyid:9C:F3:22:94:4B:04:8B:70:57:E4:5E:D2:CB:34:1B:56:0E:0A:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nPMilEsEi3BX5F7SyzQbVg4KxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/fad06c-f368-46ab-ae79-b3c5c0933d97/1/nPMilEsEi3BX5F7SyzQbVg4KxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:68:fb:ed:30:89:63:2d:85:57:d3:ef:0c:56:33:de:a3:e1:
9b:da:e0:2a:de:4c:de:10:7f:ab:94:7f:93:cc:fe:a1:56:bb:
50:b2:f2:13:db:52:b8:f6:4d:ba:8e:60:d0:5e:06:b4:15:0d:
0d:5e:a1:08:a4:08:ee:2b:5c:bb:ba:27:54:c1:78:09:53:77:
3a:ba:69:e0:90:75:88:5d:70:b8:ec:97:9f:7c:21:20:76:73:
23:2d:b0:f5:61:13:69:14:b0:ee:3e:eb:e1:58:e8:4c:94:17:
73:ae:47:70:b1:65:45:c9:0a:4b:af:8a:32:ad:72:d3:95:ab:
62:ed:fc:46:8a:ac:38:40:3e:40:f9:96:49:2a:ff:ee:c5:44:
7f:fa:fe:f7:64:8d:a6:36:28:e5:fa:1a:06:41:d3:29:11:07:
fe:2d:06:63:c9:70:4c:f0:2a:b0:04:22:17:8b:34:bc:35:4c:
c1:70:2c:b7:f9:fc:96:32:24:f0:80:2d:59:c4:bd:e0:18:4f:
c3:f9:cc:fa:aa:d6:92:4e:61:28:73:2c:2c:cd:b2:dc:2f:ac:
11:e3:df:2c:73:cf:7b:cb:2b:6c:30:da:54:25:4c:72:f9:c6:
9a:8f:e6:3b:5b:a2:12:d5:06:17:a1:ab:74:81:f3:02:d7:5b:
a4:3f:b9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:04:38 2026 by rpki-client