Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
File: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft (raw, json)
Hash identifier: ubGK4RKk6NBEzS6NNzXO68f6EDvLSZO93ic44evbb6o=
Subject key identifier: D5:EB:D5:6A:D4:59:2E:93:5E:68:D1:4B:1C:53:91:BC:AA:9F:CE:30
Authority key identifier: FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
Certificate issuer: /CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Certificate serial: 019DB2B4AD34EBF695F0A60BE3681690B809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
Manifest number: 16
Signing time: Wed 22 Apr 2026 01:01:18 +0000
Manifest this update: Wed 22 Apr 2026 01:01:18 +0000
Manifest next update: Thu 23 Apr 2026 01:01:18 +0000
Files and hashes: 1: MaIKlII8OqQMUgcccB9oH2ZcXoQ.asa (hash: F5TME2g2H+4oztuAWuswsZ8BHq80CCL87upK2MSDfeA=)
2: _nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl (hash: hG7tjH+CBq4WOQcG+FeB7WFjt3IRpIcNpHSLCHNa640=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 21:56:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b2:b4:ad:34:eb:f6:95:f0:a6:0b:e3:68:16:90:b8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe784aac7d1e6d11cc6ba3a42740cbc9fa85c884
Validity
Not Before: Apr 22 01:01:18 2026 GMT
Not After : Apr 23 01:01:18 2026 GMT
Subject: CN=d5ebd56ad4592e935e68d14b1c5391bcaa9fce30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c4:31:43:d9:e1:bf:b3:18:cf:3e:51:9e:77:
fe:8b:45:4d:de:52:d3:6c:7e:16:c2:25:4e:d5:19:
6b:41:6d:d0:c1:96:19:50:5a:5d:e8:ed:f9:6c:43:
8b:2d:3b:b7:26:ba:17:8b:aa:6e:be:b7:a4:0e:7f:
0e:be:66:ed:9e:f5:91:b8:2a:e7:40:a1:5b:71:1e:
bb:9b:8a:c5:c7:b5:1b:56:bd:66:a8:87:ba:3c:5f:
78:ca:ed:ee:13:af:eb:da:d8:08:93:bb:da:45:cc:
d4:a4:b2:39:bb:bb:a5:5d:e4:48:ca:92:a1:ce:25:
8d:5d:69:be:37:bf:44:05:2e:f9:2e:b3:63:81:19:
d4:a9:3b:b5:cf:8e:60:45:3d:4a:46:0a:fb:40:8d:
90:52:18:3b:34:76:de:7d:e7:df:8e:1b:f6:72:5e:
41:89:04:52:df:02:30:aa:fd:ad:63:d1:83:ac:87:
2e:c0:20:8e:25:d5:7c:03:dd:90:e7:8d:b2:9e:88:
05:07:f0:9e:23:9b:2c:ea:79:8c:ab:8d:5f:62:c9:
62:93:c2:f7:39:86:8f:4a:01:00:01:71:f2:87:94:
dd:42:42:99:3c:e9:1d:a6:49:70:1b:f6:cf:08:80:
71:67:f4:98:a8:98:08:d1:ba:bd:e3:51:96:fe:2f:
6e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EB:D5:6A:D4:59:2E:93:5E:68:D1:4B:1C:53:91:BC:AA:9F:CE:30
X509v3 Authority Key Identifier:
keyid:FE:78:4A:AC:7D:1E:6D:11:CC:6B:A3:A4:27:40:CB:C9:FA:85:C8:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/0ccd6d-6dc0-45ad-b8c0-fff814d11f15/1/_nhKrH0ebRHMa6OkJ0DLyfqFyIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:77:66:4c:f3:3a:1c:70:c0:85:14:11:b9:62:40:7a:e2:d0:
54:ce:b1:0a:ba:fd:9c:e5:cb:7e:37:b5:91:9d:10:03:a8:91:
cd:f3:69:02:4c:e5:e1:8b:f4:80:77:50:78:aa:74:33:b9:ec:
17:a4:d1:1c:7c:58:bd:05:9b:5c:d4:0b:82:7b:e7:57:c5:83:
76:5d:1f:18:af:0a:57:aa:07:78:be:76:bc:2d:c9:df:b8:87:
72:23:05:43:f7:6a:3b:84:c1:05:9c:80:24:94:be:1d:c8:22:
b5:bb:b6:8e:b8:0a:31:e8:eb:3a:ca:7b:be:a4:e6:ea:46:ad:
5b:ac:85:a2:1c:f1:80:7e:a2:41:28:8a:9f:7a:de:19:7b:ec:
62:ae:8f:83:74:17:15:6a:12:9d:44:75:6e:d9:a9:34:88:29:
95:7b:10:27:ab:c0:1f:29:e8:03:34:13:db:6b:5b:de:4e:59:
63:e1:fc:63:ce:e0:11:a8:92:91:d8:34:aa:73:21:6b:79:75:
f3:56:61:b7:12:37:f0:45:a1:11:19:b3:76:e8:24:c6:bd:69:
36:d6:f4:8c:27:42:30:91:92:18:ea:b4:b0:bf:5a:53:f0:ec:
e7:1e:aa:5b:36:03:ca:e8:9e:9c:b3:52:4f:bb:15:b1:88:9b:
82:34:74:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ytK006/aV8KYL42gWkLgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNzg0YWFjN2QxZTZkMTFjYzZiYTNhNDI3NDBjYmM5ZmE4
NWM4ODQwHhcNMjYwNDIyMDEwMTE4WhcNMjYwNDIzMDEwMTE4WjAzMTEwLwYDVQQD
EyhkNWViZDU2YWQ0NTkyZTkzNWU2OGQxNGIxYzUzOTFiY2FhOWZjZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz8QxQ9nhv7MYzz5Rnnf+i0VN3lLT
bH4WwiVO1RlrQW3QwZYZUFpd6O35bEOLLTu3JroXi6puvrekDn8OvmbtnvWRuCrn
QKFbcR67m4rFx7UbVr1mqIe6PF94yu3uE6/r2tgIk7vaRczUpLI5u7ulXeRIypKh
ziWNXWm+N79EBS75LrNjgRnUqTu1z45gRT1KRgr7QI2QUhg7NHbefeffjhv2cl5B
iQRS3wIwqv2tY9GDrIcuwCCOJdV8A92Q542ynogFB/CeI5ss6nmMq41fYslik8L3
OYaPSgEAAXHyh5TdQkKZPOkdpklwG/bPCIBxZ/SYqJgI0bq941GW/i9uRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXr1WrUWS6TXmjRSxxTkbyqn84wMB8GA1UdIwQY
MBaAFP54Sqx9Hm0RzGujpCdAy8n6hciEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX25oS3JIMGViUkhNYTZPa0owREx5ZnFGeUlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi8wY2NkNmQtNmRjMC00NWFkLWI4YzAt
ZmZmODE0ZDExZjE1LzEvX25oS3JIMGViUkhNYTZPa0owREx5ZnFGeUlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZi8wY2NkNmQtNmRjMC00NWFkLWI4YzAtZmZmODE0ZDExZjE1
LzEvX25oS3JIMGViUkhNYTZPa0owREx5ZnFGeUlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY3dmTPM6
HHDAhRQRuWJAeuLQVM6xCrr9nOXLfje1kZ0QA6iRzfNpAkzl4Yv0gHdQeKp0M7ns
F6TRHHxYvQWbXNQLgnvnV8WDdl0fGK8KV6oHeL52vC3J37iHciMFQ/dqO4TBBZyA
JJS+Hcgitbu2jrgKMejrOsp7vqTm6katW6yFohzxgH6iQSiKn3reGXvsYq6Pg3QX
FWoSnUR1btmpNIgplXsQJ6vAHynoAzQT22tb3k5ZY+H8Y87gEaiSkdg0qnMha3l1
81ZhtxI38EWhERmzdugkxr1pNtb0jCdCMJGSGOq0sL9aU/Ds5x6qWzYDyuienLNS
T7sVsYibgjR09Q==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:03:56 2026 by rpki-client