Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
File: NRoUzp0lI5uS_lq85TJRUETBq6Q.mft (raw, json)
Hash identifier: 7otJKYkGfnfiDp6uJSMcXIqXMInH2eqgdoLm6KeLfb0=
Subject key identifier: EC:B1:F3:07:2A:E4:A8:EA:C9:BB:42:5F:E0:DA:0C:6F:D5:4F:80:3F
Authority key identifier: 35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
Certificate issuer: /CN=351a14ce9d25239b92fe5abce532515044c1aba4
Certificate serial: 019DCCAAF2CBFB6C066B7D0C1DAD5D339428
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
Manifest number: 18E0
Signing time: Mon 27 Apr 2026 02:00:48 +0000
Manifest this update: Mon 27 Apr 2026 02:00:48 +0000
Manifest next update: Tue 28 Apr 2026 02:00:48 +0000
Files and hashes: 1: 7KmiHeTQXRSzn1pRizVCv_INZ1Y.roa (hash: ovjEW9N/bVELgNzaDJYrGYeSdyjGcKIXWsIKwlhcxp8=)
2: 9oyInYSuVnIf7zTVtB6sDcf1XhI.roa (hash: l1RSHVmCnQUWX+RzMHEaP0MGuYdTYp413ef1exVSOrk=)
3: AWHMjmic5cEKV8bVpt2xGeWTmJw.roa (hash: iFYqoLqjFem2aNEBBJqDmHNGhtphtI842p4krYOCFlM=)
4: EEC5l5eXa30hCWFdS6hfFowX3rA.roa (hash: qk+PwcZd13BEPmyxQv9Vn7VhXPswQPDvSlTrq8etALc=)
5: NKEp3h0kLvUlKUBge8tH1e64kVg.roa (hash: CPAjmXfG691xeh9K3OoL/4UktX+XY9sMhvIbOiyTjzk=)
6: NRoUzp0lI5uS_lq85TJRUETBq6Q.crl (hash: +4wOKArI3Y6gRRAt3bkVjmq+DLyS/s7eon5M8NtaY3Q=)
7: opbJdENGQKlgxiw3UzXsb5urRe8.roa (hash: 6DXHz5IMpgCFLQr3dZW4IiHNXv7NbkZD9862/Rjdnts=)
8: qUTKfMDduS5G83IwddW0Srvow3k.roa (hash: cOBAb4cGXrEFXoWSmcqXtalPKxlVlDLrCL2/MXUlMlg=)
9: xwHnchiOAHRSaPxQfMUxp_joUnY.roa (hash: qFPxwS1wi1Jk3om9qexO1e1HC4tkLXTweeGEIkEplvU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Apr 2026 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:aa:f2:cb:fb:6c:06:6b:7d:0c:1d:ad:5d:33:94:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=351a14ce9d25239b92fe5abce532515044c1aba4
Validity
Not Before: Apr 27 02:00:48 2026 GMT
Not After : Apr 28 02:00:48 2026 GMT
Subject: CN=ecb1f3072ae4a8eac9bb425fe0da0c6fd54f803f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:b6:66:b9:c3:26:21:cf:81:20:46:b9:1d:e3:
66:63:f4:e5:69:39:90:03:4b:69:db:11:6d:59:51:
90:39:78:16:cb:f8:db:93:e0:65:ac:8d:fa:aa:57:
20:5f:21:bd:94:b9:b5:fa:07:b6:00:36:3d:74:82:
33:d4:1c:63:3d:22:35:98:e1:34:f7:85:e1:53:1e:
82:9a:23:e3:78:af:f3:ab:e1:95:03:8f:2e:f3:cb:
12:44:b9:ca:d8:9c:ef:92:03:34:ab:0c:23:d5:7c:
e6:df:dc:4b:a0:34:46:d0:fa:99:27:6b:3d:fe:47:
87:3e:2a:96:bd:38:f5:20:c5:e2:27:2b:32:7c:c2:
e1:fe:de:8c:a0:42:83:4a:28:3e:87:b8:bb:81:2b:
a5:d0:18:19:b8:71:86:f1:53:6d:b8:a8:c7:5b:df:
08:7d:61:f0:16:a9:e5:64:b8:b0:46:3e:62:4a:dd:
1f:a3:b9:e1:d7:03:e8:e5:54:8e:c4:e5:4e:02:9c:
1c:11:77:8e:49:16:6c:df:a6:db:b9:e0:3e:80:48:
1c:15:90:1a:b5:0a:20:6d:7d:39:4b:e3:99:31:68:
d0:96:36:36:98:27:46:0c:87:32:29:ad:0b:c1:51:
c2:90:2f:23:d4:8f:06:14:09:39:58:88:ca:d7:b5:
3a:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:B1:F3:07:2A:E4:A8:EA:C9:BB:42:5F:E0:DA:0C:6F:D5:4F:80:3F
X509v3 Authority Key Identifier:
keyid:35:1A:14:CE:9D:25:23:9B:92:FE:5A:BC:E5:32:51:50:44:C1:AB:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NRoUzp0lI5uS_lq85TJRUETBq6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/3e2165-3bb5-45c3-989a-2953894b1f6d/1/NRoUzp0lI5uS_lq85TJRUETBq6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:0b:c2:45:a0:85:9e:bb:99:3c:7a:d8:3d:ed:08:20:ed:e3:
70:a6:ed:64:de:ce:c1:01:36:87:ce:23:d7:80:c0:de:3c:3f:
4e:b1:93:bd:be:b4:8d:89:d1:4f:3d:7c:6e:ee:51:a4:93:c4:
fb:0d:63:29:f8:e3:53:8c:e4:d0:d9:00:24:42:e1:90:31:09:
b2:00:b2:f2:2d:21:a0:91:58:e6:bd:27:c6:3e:87:41:ed:fe:
f1:08:4e:81:ac:e2:91:73:be:f5:8d:4b:a2:17:e7:65:12:77:
49:c0:f5:ac:9b:fa:a2:55:0b:e0:9f:7c:d6:78:6e:b9:22:0c:
4b:e1:c9:0a:ff:83:cb:70:f2:3c:11:bc:dc:ac:2f:51:09:ed:
89:ba:16:ed:51:dc:8a:fb:10:5c:da:f2:a1:1c:d0:b1:fa:d9:
62:67:4e:84:1d:49:0e:c8:96:4a:2c:4c:8d:c9:cf:35:69:2e:
c9:c4:81:a2:36:49:84:a5:0e:24:02:99:96:25:88:12:49:cc:
32:af:7c:73:51:c1:de:18:9c:de:bc:79:c8:42:27:f7:bc:47:
dd:1e:25:06:bc:1c:48:a0:88:59:c2:4c:dd:a5:b2:d9:f9:91:
06:b8:0c:76:23:a6:f7:b2:ae:a5:13:32:7b:b1:b7:93:08:12:
dd:3a:6f:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:17:03 2026 by rpki-client