Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
File: nnld0BGVNBRxXMaHXf05xh5Rgcg.mft (raw, json)
Hash identifier: DyYQVf5767zjfynsHmTaVSUw4hDSmgk+WYJNonNp2wA=
Subject key identifier: FD:58:84:8B:07:45:1D:3A:D4:20:2A:1C:EC:B8:FD:17:7F:BA:0F:BD
Authority key identifier: 9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
Certificate issuer: /CN=9e795dd011953414715cc6875dfd39c61e5181c8
Certificate serial: 019DA71E5E3DD9C7964C418E2F962354EFAB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
Manifest number: 26
Signing time: Sun 19 Apr 2026 19:01:18 +0000
Manifest this update: Sun 19 Apr 2026 19:01:18 +0000
Manifest next update: Mon 20 Apr 2026 19:01:18 +0000
Files and hashes: 1: azUbLhud6FB2bh2XAm_dpaxr0YI.roa (hash: aywHfLorqu+EfWUXaUMykj9Eo6Bcs30AyfzDLZ1+ymg=)
2: nnld0BGVNBRxXMaHXf05xh5Rgcg.crl (hash: K/FOczJBbZ0v6BFTDchfARfctVF2eXdLDok8K6LAhIA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 19:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:1e:5e:3d:d9:c7:96:4c:41:8e:2f:96:23:54:ef:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e795dd011953414715cc6875dfd39c61e5181c8
Validity
Not Before: Apr 19 19:01:18 2026 GMT
Not After : Apr 20 19:01:18 2026 GMT
Subject: CN=fd58848b07451d3ad4202a1cecb8fd177fba0fbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:18:b3:27:c0:f3:91:92:99:55:5d:84:c3:29:
af:a5:db:8c:1f:b7:45:ad:c6:50:b6:58:37:71:19:
b2:6b:4d:71:70:fd:5b:67:33:55:07:06:4d:3b:6f:
5d:89:db:b5:c4:df:8e:d7:60:f3:c7:10:e4:0d:55:
c1:7e:50:10:44:4d:e1:cf:ef:da:52:9c:48:de:c3:
0f:da:63:7c:ca:b2:64:86:91:50:31:01:20:b6:c4:
e9:b2:fd:92:9f:17:1f:67:be:bb:a7:31:50:af:f8:
e6:42:69:77:54:35:4b:f2:f0:a1:41:6c:b8:7b:ca:
2b:f5:b1:35:0c:49:14:cd:34:af:0a:e3:52:f7:d8:
03:68:12:c1:bb:f4:2b:da:bd:0d:ed:2b:d7:25:24:
e6:2a:aa:6b:a2:78:6d:9d:b8:f0:8f:9e:cc:3a:f5:
62:e2:dc:dc:4f:ad:e0:ed:c3:e4:ec:ed:d5:31:3c:
1c:a0:42:5b:32:5a:ec:53:c2:ba:33:a6:9e:2b:dd:
36:ba:6f:0a:9b:ab:66:3e:36:31:e7:c5:dd:a8:ff:
b9:0f:2b:d7:3e:8b:ba:bd:19:08:d7:93:7f:85:b3:
28:32:e7:cd:fc:73:2c:7d:f1:21:5b:98:be:0a:9e:
85:00:64:24:ae:d7:01:58:0a:f5:70:74:74:f8:eb:
eb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:58:84:8B:07:45:1D:3A:D4:20:2A:1C:EC:B8:FD:17:7F:BA:0F:BD
X509v3 Authority Key Identifier:
keyid:9E:79:5D:D0:11:95:34:14:71:5C:C6:87:5D:FD:39:C6:1E:51:81:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nnld0BGVNBRxXMaHXf05xh5Rgcg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/df2e60-5b0f-4960-b9cd-55a3547abbd6/1/nnld0BGVNBRxXMaHXf05xh5Rgcg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ee:ae:0b:aa:ae:3c:d4:36:48:4b:d8:33:25:a6:d9:27:7e:
f1:57:b8:e8:df:21:c6:14:f6:06:d1:ae:04:5e:db:1f:0c:c5:
f8:08:ae:06:73:bc:92:59:1a:6e:d9:3c:49:3c:68:f1:75:db:
92:61:83:c5:b8:85:eb:03:e3:07:67:9b:ce:06:60:cb:62:f7:
d2:6e:9c:40:c0:f8:16:aa:1b:5b:45:33:c7:cc:7b:01:df:88:
a2:38:aa:78:33:cb:2e:2d:f7:db:2f:70:a3:e3:82:b3:8f:fa:
58:52:77:bd:1b:8e:dd:bf:c9:9c:db:51:05:ae:2a:d0:68:7c:
1f:3d:d3:ff:31:e5:e7:7c:83:b9:80:ad:0f:a9:bd:36:dc:10:
f6:e9:c8:65:a1:1f:fc:4b:b7:b1:c2:e7:9e:77:8c:27:c4:5e:
90:b9:14:17:e0:3b:58:fe:e8:19:46:a3:0b:f4:f2:22:c9:93:
a6:47:f7:d6:83:6f:1d:67:c4:98:72:9d:96:ed:1f:aa:bb:59:
0d:b3:31:01:e1:6c:3c:35:ea:4d:e5:d1:43:b9:41:46:70:b0:
e5:61:47:c7:b0:89:cd:ff:5e:a6:8c:70:09:c7:33:78:a9:73:
c1:ff:f5:78:1d:7c:81:4d:f5:e5:c9:4f:f0:e0:b4:f1:2d:ca:
c0:5b:1e:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2nHl492ceWTEGOL5YjVO+rMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDllNzk1ZGQwMTE5NTM0MTQ3MTVjYzY4NzVkZmQzOWM2MWU1
MTgxYzgwHhcNMjYwNDE5MTkwMTE4WhcNMjYwNDIwMTkwMTE4WjAzMTEwLwYDVQQD
EyhmZDU4ODQ4YjA3NDUxZDNhZDQyMDJhMWNlY2I4ZmQxNzdmYmEwZmJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBizJ8DzkZKZVV2EwymvpduMH7dF
rcZQtlg3cRmya01xcP1bZzNVBwZNO29didu1xN+O12DzxxDkDVXBflAQRE3hz+/a
UpxI3sMP2mN8yrJkhpFQMQEgtsTpsv2SnxcfZ767pzFQr/jmQml3VDVL8vChQWy4
e8or9bE1DEkUzTSvCuNS99gDaBLBu/Qr2r0N7SvXJSTmKqpronhtnbjwj57MOvVi
4tzcT63g7cPk7O3VMTwcoEJbMlrsU8K6M6aeK902um8Km6tmPjYx58XdqP+5DyvX
Pou6vRkI15N/hbMoMufN/HMsffEhW5i+Cp6FAGQkrtcBWAr1cHR0+OvrdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1YhIsHRR061CAqHOy4/Rd/ug+9MB8GA1UdIwQY
MBaAFJ55XdARlTQUcVzGh139OcYeUYHIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbm5sZDBCR1ZOQlJ4WE1hSFhmMDV4aDVSZ2NnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9kZjJlNjAtNWIwZi00OTYwLWI5Y2Qt
NTVhMzU0N2FiYmQ2LzEvbm5sZDBCR1ZOQlJ4WE1hSFhmMDV4aDVSZ2NnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9kZjJlNjAtNWIwZi00OTYwLWI5Y2QtNTVhMzU0N2FiYmQ2
LzEvbm5sZDBCR1ZOQlJ4WE1hSFhmMDV4aDVSZ2NnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVO6uC6qu
PNQ2SEvYMyWm2Sd+8Ve46N8hxhT2BtGuBF7bHwzF+AiuBnO8klkabtk8STxo8XXb
kmGDxbiF6wPjB2ebzgZgy2L30m6cQMD4FqobW0Uzx8x7Ad+IojiqeDPLLi332y9w
o+OCs4/6WFJ3vRuO3b/JnNtRBa4q0Gh8Hz3T/zHl53yDuYCtD6m9NtwQ9unIZaEf
/Eu3scLnnneMJ8RekLkUF+A7WP7oGUajC/TyIsmTpkf31oNvHWfEmHKdlu0fqrtZ
DbMxAeFsPDXqTeXRQ7lBRnCw5WFHx7CJzf9epoxwCcczeKlzwf/1eB18gU315clP
8OC08S3KwFse4w==
-----END CERTIFICATE-----
Generated at Mon Apr 20 03:22:36 2026 by rpki-client