Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
File: nNB1iCXdic_uX97MfctlHwpdEBg.mft (raw, json)
Hash identifier: kv+3cgxMYgVC0VN9PUONf33EdNglGWwnBe4Sw4pYwFg=
Subject key identifier: 9B:DF:6B:9B:C9:47:9C:7E:DA:4B:7D:40:54:37:06:96:98:A9:D4:57
Authority key identifier: 9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
Certificate issuer: /CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Certificate serial: 019DA7550F1A45267FCDD8005BF832DC0115
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
Manifest number: 1817
Signing time: Sun 19 Apr 2026 20:01:02 +0000
Manifest this update: Sun 19 Apr 2026 20:01:02 +0000
Manifest next update: Mon 20 Apr 2026 20:01:02 +0000
Files and hashes: 1: _uU5ssxCIcQAM3SMyMjxB94UIdI.roa (hash: tSyW1+iSOIbLDd34f8vgQPxMHckfLQ3hITt8+wBJJ/8=)
2: hKnH4_PBXV3UF-XGZ7oON7TpqG0.roa (hash: 5fNEwIWTM8f5kPudjLWMTnzG5MVAJgnQ7t3OXyoc4xg=)
3: nNB1iCXdic_uX97MfctlHwpdEBg.crl (hash: JQ3f2QiBlo/fkgBZk+4XdQgCqedHQsJUTXhmBFe3TVA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 20:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a7:55:0f:1a:45:26:7f:cd:d8:00:5b:f8:32:dc:01:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9cd0758825dd89cfee5fdecc7dcb651f0a5d1018
Validity
Not Before: Apr 19 20:01:02 2026 GMT
Not After : Apr 20 20:01:02 2026 GMT
Subject: CN=9bdf6b9bc9479c7eda4b7d405437069698a9d457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:77:22:07:23:b0:da:90:d4:16:6a:cc:4c:b2:
79:1c:33:08:31:b8:3b:c6:64:51:ca:dc:86:4b:a0:
2c:bd:72:90:8c:6f:87:1a:a4:e5:80:6a:e9:a9:6d:
c0:8b:6f:d1:d6:35:7f:43:81:48:3f:fd:ef:a3:ff:
f5:04:bb:ff:03:a3:79:45:7e:64:e8:6a:bb:70:4a:
78:d7:1e:e7:cf:03:dd:d9:07:ea:9e:ce:37:61:f5:
02:38:50:01:80:33:ba:08:d0:54:8f:37:a8:64:dd:
4d:99:b5:18:f6:52:e5:8b:16:d3:1b:b3:b6:e0:a3:
ce:ed:93:bc:97:9e:03:9f:77:c2:25:9d:21:e8:b8:
5b:b0:a4:ed:cc:9a:72:08:07:04:54:8b:8b:b5:f2:
24:6e:aa:29:b7:51:fc:4a:d2:97:1f:92:7c:b5:fa:
b3:89:63:e0:9f:6e:27:e3:ae:c2:5d:85:2c:a5:0a:
c6:1f:09:e0:dc:99:1b:fa:7a:7a:48:9f:f9:d9:1a:
3a:b6:63:18:33:ec:84:fb:cb:ad:80:18:53:61:df:
39:ed:06:5a:5e:6a:2e:35:3d:32:82:b4:12:dd:9f:
ff:27:72:9b:4d:0e:2d:23:1d:df:6c:ed:66:ef:5a:
ee:f2:84:fc:c3:29:71:89:11:88:6c:f3:db:a3:12:
c6:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:DF:6B:9B:C9:47:9C:7E:DA:4B:7D:40:54:37:06:96:98:A9:D4:57
X509v3 Authority Key Identifier:
keyid:9C:D0:75:88:25:DD:89:CF:EE:5F:DE:CC:7D:CB:65:1F:0A:5D:10:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nNB1iCXdic_uX97MfctlHwpdEBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/0e651e-90c7-4acd-97b9-a54f8e4813e7/1/nNB1iCXdic_uX97MfctlHwpdEBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:5f:11:e2:33:de:93:b3:82:01:98:f5:df:53:c1:0d:95:fc:
73:11:9b:a9:ba:5e:64:35:0e:1d:43:e4:9f:b9:ee:59:0c:9d:
4a:8c:4b:e4:e3:c2:e1:71:2b:32:55:6a:97:05:05:c4:c5:09:
33:36:7b:7e:43:b4:7e:22:b8:9f:0b:ba:06:e4:22:98:3b:97:
97:c3:dc:64:04:4f:94:bb:96:ad:a9:de:e6:49:6a:4b:21:9e:
85:32:c8:c8:4f:f7:42:7a:27:ec:0d:a2:a5:84:a5:3a:91:09:
bd:b0:db:5a:b3:c0:f8:8e:e8:a1:d6:c8:8f:b6:d6:e9:b5:a0:
19:e5:5a:14:66:24:b7:ce:47:68:c4:80:39:8e:21:29:6f:75:
81:23:93:08:f7:98:12:f8:0f:c1:15:85:e2:8e:e7:a2:35:6f:
d3:18:73:47:7b:d4:d1:69:ea:e7:99:ea:13:b5:61:08:5e:c1:
14:a1:04:c9:3c:fc:08:59:60:05:66:4c:cb:5e:b7:55:08:5b:
e9:85:5c:fa:7e:5d:fb:dc:1b:0d:a0:4e:33:f9:d3:65:83:da:
5d:1d:9c:e5:50:11:57:32:c3:d6:91:7d:0b:1b:21:8b:9a:d5:
d7:bf:e7:c3:87:2f:f2:48:db:f3:95:09:56:02:10:04:ba:f1:
91:5a:a7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 03:26:08 2026 by rpki-client