Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
File: nCGl5M9uni5wM4ruv6DRWI1ztu8.mft (raw, json)
Hash identifier: ar7Yq5tcfzeNpUMRPalmv86ID5BzbVt1JbrJy/cghww=
Subject key identifier: A3:A7:3B:7F:A4:A1:06:2F:1C:BE:72:4E:1C:AA:2E:49:59:EA:03:9C
Authority key identifier: 9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
Certificate issuer: /CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Certificate serial: 019DDB7A05982F9F9B0F16FF222713720615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
Manifest number: 0C17
Signing time: Wed 29 Apr 2026 23:01:40 +0000
Manifest this update: Wed 29 Apr 2026 23:01:40 +0000
Manifest next update: Thu 30 Apr 2026 23:01:40 +0000
Files and hashes: 1: MErwd1Mq4UEFUDPDVrQybXm2CvY.roa (hash: uVVbYrkENvX/85rsAwj7JFO62uhL0Fv5S9tclaCyMho=)
2: nCGl5M9uni5wM4ruv6DRWI1ztu8.crl (hash: nCyrvm32PjnZ2DM1yFuycVSfqrVyH0NkKw5BuM/ZkJc=)
3: tl1f86llPD22KqYkoRY9Jm1PXyE.roa (hash: ul9AiFBUfTck4Svk3QXKlfp7mOg49JnGIM3eiu8rsOA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 23:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:db:7a:05:98:2f:9f:9b:0f:16:ff:22:27:13:72:06:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c21a5e4cf6e9e2e70338aeebfa0d1588d73b6ef
Validity
Not Before: Apr 29 23:01:40 2026 GMT
Not After : Apr 30 23:01:40 2026 GMT
Subject: CN=a3a73b7fa4a1062f1cbe724e1caa2e4959ea039c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:c3:f1:3e:67:90:5a:f2:39:a9:10:54:01:95:
8d:52:12:92:72:b8:80:0c:33:8d:fb:27:cf:c4:d4:
d9:f9:65:35:f9:10:61:5b:e2:7b:ca:b0:58:76:4a:
45:17:fd:9b:17:f9:02:dc:f1:3f:56:19:fa:a4:b0:
ed:0b:55:5d:56:de:8e:58:71:a8:88:94:52:01:1f:
ba:7d:5b:31:80:77:4d:fa:96:bd:85:da:53:58:a9:
1a:5b:7b:d8:95:b3:d7:88:08:86:96:90:9e:58:d6:
25:c1:86:51:de:5b:ad:22:bf:65:77:7b:4a:76:c5:
af:95:21:18:ae:6f:74:2e:40:f2:e8:9f:20:2d:3e:
5b:42:05:6c:ef:01:2b:7e:bf:8e:49:db:bb:03:72:
32:5d:cf:d4:fc:73:b8:01:22:04:a5:f5:41:a8:93:
a8:f1:bf:62:69:48:30:61:3a:e0:55:66:6c:4b:40:
57:98:3c:57:41:d4:fd:de:99:e4:e1:38:48:99:d2:
97:e2:c8:ab:75:b6:11:5f:48:98:17:2f:7c:ea:a4:
8f:1e:81:da:d4:ba:95:81:1c:d1:24:a7:7d:f2:a7:
1f:95:d5:8c:88:27:b8:4a:d4:3c:63:02:9d:dd:f2:
50:49:a3:bb:5d:97:08:d1:4a:c2:b0:ed:73:e6:15:
e1:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:A7:3B:7F:A4:A1:06:2F:1C:BE:72:4E:1C:AA:2E:49:59:EA:03:9C
X509v3 Authority Key Identifier:
keyid:9C:21:A5:E4:CF:6E:9E:2E:70:33:8A:EE:BF:A0:D1:58:8D:73:B6:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nCGl5M9uni5wM4ruv6DRWI1ztu8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/8cce86-b0ae-4166-9042-528eff52febd/1/nCGl5M9uni5wM4ruv6DRWI1ztu8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:53:ec:09:b4:4d:05:04:e0:05:4d:0d:a4:f6:df:ae:3d:cf:
4b:da:6d:18:15:ab:65:67:cc:6f:94:0d:ea:71:48:5e:9b:e4:
c3:b7:76:23:3c:46:e2:6b:b2:d0:64:f3:b2:da:d7:d2:e2:e0:
e1:d0:41:3b:ab:0c:3f:f1:cf:8d:b5:da:93:02:05:1a:d3:db:
d7:76:a2:2d:29:f7:7c:be:d8:7d:d4:90:86:08:78:ba:a0:55:
52:ee:66:53:8b:46:b2:0b:46:a4:4f:29:9b:ed:99:ed:91:63:
7a:ed:a4:6a:56:8c:03:a3:e4:78:e7:6a:bd:2e:47:67:6f:2b:
a5:6d:88:18:0f:af:2b:db:df:6c:62:d6:3f:d8:7b:ef:49:1e:
14:75:43:72:14:a9:2d:9e:65:31:37:b2:0e:85:67:27:44:97:
31:02:02:47:8c:27:b2:43:f7:f4:d1:56:27:f6:2e:4e:85:80:
65:dd:70:c0:c5:e4:b8:8c:c7:a0:b6:f9:0b:0e:4e:92:d3:d1:
2a:c1:c5:a6:ce:f8:fa:49:f6:88:c5:3d:1e:16:6e:e2:c9:af:
c7:33:7d:fe:b2:ba:da:8f:5e:ad:c0:a4:63:17:1b:70:bf:d4:
c4:9d:26:5e:c2:19:3c:8f:7a:86:79:a7:c7:49:6f:fb:e1:c3:
2f:ad:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 08:26:31 2026 by rpki-client