Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
File: nSZknk8seV_-VA-dl_JumcXF4_8.mft (raw, json)
Hash identifier: kJO2BSsJ3Q+huCi35raiUX9zRAX8HC6rN2BkCCtTRjI=
Subject key identifier: 73:FA:81:21:F2:D2:E1:D5:BB:32:08:68:CC:A7:13:F4:85:9E:5B:52
Authority key identifier: 9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
Certificate issuer: /CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Certificate serial: 019DCE993621A605A54244801BC61E0745E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
Manifest number: 18E3
Signing time: Mon 27 Apr 2026 11:00:40 +0000
Manifest this update: Mon 27 Apr 2026 11:00:40 +0000
Manifest next update: Tue 28 Apr 2026 11:00:40 +0000
Files and hashes: 1: GNmDEXAk_Y2HliZsrfR_YJwZxS4.roa (hash: q5k9K7OPxEr/ETIohhVcMQ1Er7f/1cnP4+q2GfC1RtE=)
2: ZbE102VRAczBwFbNm6WP3CfOeC0.roa (hash: rVoFQaYjG4H+zjgihkyFbOYOQwXJLuimbNMp54cfD9I=)
3: dteUtIVkvsySV_CjqNsNxObZOfQ.asa (hash: niDPdZHwy/VWYjuSwWSwjjYHKrxlQAl3ZNw3cbCQYuE=)
4: j5qNO9OtWF2RRXgNjRWTNtloj5A.roa (hash: fJCc6pLbTEzTC0FOS9YIyrBouGwIyWyYIw3gXlZ3Nek=)
5: nSZknk8seV_-VA-dl_JumcXF4_8.crl (hash: IbMMu9GBAAR0Epbb7GH70hRv5suv4Jyt12EOtSRvxYk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:36:21:a6:05:a5:42:44:80:1b:c6:1e:07:45:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d26649e4f2c795ffe540f9d97f26e99c5c5e3ff
Validity
Not Before: Apr 27 11:00:40 2026 GMT
Not After : Apr 28 11:00:40 2026 GMT
Subject: CN=73fa8121f2d2e1d5bb320868cca713f4859e5b52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:1d:6b:62:73:d7:26:40:1f:de:f7:a1:84:be:
c5:92:73:54:84:b2:f8:5b:3b:29:bd:1a:86:09:b4:
a8:cf:9b:df:48:81:ef:05:93:32:15:75:cf:9a:72:
c4:ba:dd:5b:dd:5f:f6:ea:6b:29:e3:ba:d9:dc:4f:
00:c2:38:73:b4:45:5a:c8:93:3d:34:b6:4b:34:c2:
cc:b3:07:97:8b:db:d3:92:ef:7e:62:f7:d5:04:34:
48:df:a3:61:27:b5:59:b5:20:97:25:71:f8:5e:73:
2f:91:4a:9c:d7:e3:09:27:3e:a9:a4:96:12:49:59:
04:9a:dd:29:c6:be:30:9f:c6:4b:fa:73:41:9f:46:
9a:33:a1:88:ba:1d:99:7d:0d:c6:27:19:83:98:1d:
b5:69:bd:97:0b:84:e0:e4:82:9d:8c:6a:f9:31:2f:
2f:5a:50:71:4a:bd:d1:1b:f9:b6:aa:44:4d:20:39:
a6:cc:f7:74:a5:33:12:0a:06:2a:c8:d3:28:31:39:
f8:06:9d:40:2c:71:8e:6c:c0:66:fb:c3:88:23:11:
ac:da:c2:09:3b:e5:bc:63:fa:ea:6b:42:07:65:ab:
54:b9:08:3c:c2:65:cb:f6:94:19:48:6a:71:fa:92:
10:1f:86:ed:ed:71:d1:cb:a4:a5:a2:8d:fe:0f:95:
ce:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:FA:81:21:F2:D2:E1:D5:BB:32:08:68:CC:A7:13:F4:85:9E:5B:52
X509v3 Authority Key Identifier:
keyid:9D:26:64:9E:4F:2C:79:5F:FE:54:0F:9D:97:F2:6E:99:C5:C5:E3:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSZknk8seV_-VA-dl_JumcXF4_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dc5c07-eb30-408f-858a-ea469c860dc6/1/nSZknk8seV_-VA-dl_JumcXF4_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f5:51:1b:51:2f:6e:bc:f3:be:66:4a:15:eb:e1:ba:ab:0d:
1a:44:87:6b:b1:5c:64:35:01:ab:68:52:75:56:27:c8:96:f8:
aa:f2:a0:34:4f:a5:38:76:28:dd:10:3a:6c:43:32:4b:a9:9a:
2e:2d:8c:89:b5:9f:bb:84:04:57:c5:24:d8:2e:64:29:07:42:
3d:f0:2f:03:21:70:5e:c5:57:e2:c2:8a:f1:66:9d:8a:a6:0a:
b6:2a:93:3f:e3:fa:58:5b:ad:1a:6d:dc:0d:5d:1a:03:d5:b0:
cf:99:e8:48:fb:98:46:3d:c0:bd:f2:30:66:70:47:43:67:3d:
c2:8d:9a:a4:4b:c8:59:ff:0d:8e:c2:e6:18:c2:db:75:f9:3b:
92:79:12:2b:63:01:f3:0e:4d:18:2a:0c:e2:e9:d3:77:83:ab:
53:dc:cb:63:d5:28:a7:0d:0b:9c:cb:20:3a:ff:48:fc:cd:92:
78:aa:1a:5d:a7:e8:c2:21:67:3f:13:4f:5f:d6:70:47:15:fc:
f9:46:85:98:15:9e:fe:ab:69:58:50:5d:e3:cd:76:85:b9:2a:
51:60:36:df:27:e9:59:6e:59:0f:6a:c1:ac:d5:b9:45:fb:bd:
df:a4:24:7b:08:43:e4:63:4d:b2:80:54:4f:fc:4f:ec:d6:c7:
47:62:28:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 21:05:12 2026 by rpki-client