Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
File: nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft (raw, json)
Hash identifier: xhIXfAaBA40P5R8NmfOejYv9GXvrJ+qEcDZsGvP9Mfw=
Subject key identifier: BA:D4:4C:D0:D7:A3:A6:C2:19:DD:E7:D5:1F:02:B9:E3:42:8F:2E:02
Authority key identifier: 9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
Certificate issuer: /CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Certificate serial: 019DCFAC54E62939D597A1D7393D09F2544D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 16:01:10 +0000
Manifest this update: Mon 27 Apr 2026 16:01:10 +0000
Manifest next update: Tue 28 Apr 2026 16:01:10 +0000
Files and hashes: 1: E8tqgGls_idrTZuBqV9BquCiz3o.roa (hash: vdVKiL0mPT/WkeBXx2QcT7V9CByZB8/0+IekjVyDQ9g=)
2: QyIrj4KBT2VQqHgbFbL2BDxfgr0.roa (hash: kp1CwaLzqr/s/iouj0Yw+AzVZxO6+NVySzklWCo6UCs=)
3: dltfgErKAVJhiBmKINA17o0-QCo.roa (hash: h63lR9XrHkLU6v+ibOR56TO6e1KLvDhOUG9IZ5RNy9k=)
4: hQDLXIuFPbPeMoA0n3wg3FSKYSw.roa (hash: BBMPveKRndrvVUm7Cra4ibGzFpyOil4iXtzIOV4kIxg=)
5: nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl (hash: CH86EkGsnPGz6+RPyR+oonlpAfa8ySeFJegJomV+Nuc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 14:27:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:ac:54:e6:29:39:d5:97:a1:d7:39:3d:09:f2:54:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c47ee73c28780b12f152cfa259ade3d8ae0d13b
Validity
Not Before: Apr 27 16:01:10 2026 GMT
Not After : Apr 28 16:01:10 2026 GMT
Subject: CN=bad44cd0d7a3a6c219dde7d51f02b9e3428f2e02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:66:f7:0f:8a:89:4b:a5:b8:e3:f9:82:78:d2:
50:0b:51:95:a8:e3:e2:26:0c:01:f0:e7:0e:a1:12:
09:a9:32:b8:67:97:ca:94:ff:ef:bc:b2:87:46:4d:
6e:d3:47:6b:15:2e:b8:72:32:86:fc:c7:97:20:de:
d9:e0:e9:2a:be:7a:a5:f5:49:df:96:84:dc:f8:31:
9f:40:04:d4:0e:ca:ff:e1:2e:30:4d:fd:e0:9d:6a:
88:fc:ba:d2:e9:1d:4c:06:9c:52:62:a0:a2:b1:83:
d5:c7:92:5a:87:c2:5a:5a:5e:87:99:06:ad:78:be:
b5:be:02:d0:78:e3:63:bf:6e:4c:a6:02:63:90:a0:
ce:f5:d5:0c:17:4c:1f:af:1e:87:86:48:24:f0:ca:
c2:e7:1c:c8:48:59:18:93:76:d2:89:ea:d9:d9:49:
db:ec:34:2d:ec:b3:34:1c:a9:97:21:f7:ee:0a:9b:
5e:29:33:76:80:2b:b6:12:a8:3d:73:b0:7e:7f:77:
f0:eb:cf:ae:36:29:b4:d3:7f:ae:64:49:f3:cf:81:
23:e5:81:90:c9:75:13:1c:f2:b8:b5:b0:d1:9a:ef:
2c:a3:e2:28:46:a8:94:62:d6:82:30:33:5e:3c:3f:
c0:ee:cf:41:ac:ff:4e:b6:67:da:4e:88:93:4d:5b:
e0:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D4:4C:D0:D7:A3:A6:C2:19:DD:E7:D5:1F:02:B9:E3:42:8F:2E:02
X509v3 Authority Key Identifier:
keyid:9C:47:EE:73:C2:87:80:B1:2F:15:2C:FA:25:9A:DE:3D:8A:E0:D1:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEfuc8KHgLEvFSz6JZrePYrg0Ts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/c7c51d-4f90-4087-a13a-f3c1a9a11d73/1/nEfuc8KHgLEvFSz6JZrePYrg0Ts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:cb:46:03:92:83:8e:8f:d9:1a:6c:8f:69:3a:70:16:69:8e:
18:3c:49:4e:22:33:f8:9b:e6:42:60:06:5c:de:79:69:bb:62:
f5:54:77:3e:39:56:2e:7b:09:1d:fa:d6:03:6f:49:70:e4:32:
90:02:0f:38:f8:95:5d:8a:13:65:f9:f2:6f:51:f2:5f:e9:98:
b4:78:34:c2:7b:93:a2:1b:91:3d:b6:64:bb:1a:c5:5a:8f:b0:
d4:d7:c1:22:fb:2a:db:6d:08:eb:2b:6f:86:44:a7:69:26:7a:
5a:9e:d6:35:e0:64:d9:3c:fc:4d:ec:5e:ff:44:0a:e3:88:ef:
be:da:87:09:ba:28:82:b5:fe:92:ce:19:b2:7e:75:75:9d:36:
7c:ab:5c:95:8e:4d:0e:30:7e:43:19:c8:51:de:87:a5:2b:9d:
69:eb:58:17:d9:3e:ca:85:bf:cb:37:38:77:38:fc:d6:9a:10:
8b:4f:0d:15:01:31:18:84:6b:b4:94:af:ea:dd:93:9b:b2:b2:
3b:aa:a1:06:59:5e:1f:56:3e:3f:d1:a0:5f:b5:22:7b:32:df:
26:3f:f9:52:d6:f7:e0:7d:21:0b:c6:d8:42:5c:5e:01:f0:25:
a6:74:09:24:97:58:50:96:ee:fc:aa:9c:e4:9b:bb:31:27:6c:
5d:c6:41:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 18:42:05 2026 by rpki-client