Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
File: Nv46kSY-LoMZwqZ45imFHQnnfw0.mft (raw, json)
Hash identifier: Ocq3zLR4c24ZddudqMCG0RMpxsTSgjlnYSjVNMchSm4=
Subject key identifier: 30:E1:1D:BD:E2:B5:E1:A7:30:5C:38:65:F4:B4:35:C6:F2:0D:32:CE
Authority key identifier: 36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
Certificate issuer: /CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Certificate serial: 019DD08820B3175DE6E2E584D2836C776867
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
Manifest number: 0F11
Signing time: Mon 27 Apr 2026 20:01:15 +0000
Manifest this update: Mon 27 Apr 2026 20:01:15 +0000
Manifest next update: Tue 28 Apr 2026 20:01:15 +0000
Files and hashes: 1: 3Ego7qA5ogxcgXSX7Iy2Jk2QvKA.roa (hash: AcX2UY2fKx9ShP8jKiTUZk0gum0BmvVpyfodQGjOdcQ=)
2: Nv46kSY-LoMZwqZ45imFHQnnfw0.crl (hash: 9uvspw4O3PJzilf5oaq5H4wlObN2dW65fHnH/HcRihc=)
3: YayJGV1AhdhT_2jmvro3f1vZJio.roa (hash: ZSfRyhmj0GGAqXcOqtLbroZWUuhIqN/tBzww51XfKiY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d0:88:20:b3:17:5d:e6:e2:e5:84:d2:83:6c:77:68:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36fe3a91263e2e8319c2a678e629851d09e77f0d
Validity
Not Before: Apr 27 20:01:15 2026 GMT
Not After : Apr 28 20:01:15 2026 GMT
Subject: CN=30e11dbde2b5e1a7305c3865f4b435c6f20d32ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:25:02:35:a2:80:a2:d8:c7:43:c7:62:2f:52:
d1:42:f8:96:56:fd:ba:9d:35:c5:34:91:5d:ae:1d:
5c:51:a0:3d:63:84:45:b5:fe:d4:dd:4f:d0:67:52:
fd:59:01:f6:77:a0:1a:6c:48:41:6c:32:e9:28:77:
5c:49:34:32:ea:95:06:2f:86:db:91:0c:1c:b6:20:
8f:88:af:6d:73:95:94:1e:11:a4:a3:2b:c4:e5:9f:
f4:3f:f8:5b:f6:b6:2a:0c:2c:3b:80:75:3b:ec:09:
ee:89:df:8a:69:dd:58:99:55:1a:94:90:5f:a1:22:
5d:33:76:1d:af:bc:0d:1c:b0:28:88:9e:57:2f:3b:
df:fe:c9:83:b1:92:5d:80:d4:f9:ef:b6:8a:00:45:
44:93:95:c2:3d:a3:bf:ac:60:6d:a4:a9:12:96:d2:
6e:63:fb:68:1e:9e:01:bd:c0:a6:4c:94:1a:7f:a3:
f5:68:9a:a2:1c:85:89:de:e3:12:01:77:a6:c5:94:
80:5d:e5:b9:37:0b:41:1b:11:d2:0b:2e:2d:01:cd:
39:35:21:83:a4:a4:7c:0d:c6:ec:d6:0b:43:f4:14:
f3:06:36:aa:1b:01:07:5b:74:35:1d:e8:8b:6c:bc:
8f:c5:e5:4d:c4:81:b8:21:63:65:bd:e1:07:f9:0d:
de:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:E1:1D:BD:E2:B5:E1:A7:30:5C:38:65:F4:B4:35:C6:F2:0D:32:CE
X509v3 Authority Key Identifier:
keyid:36:FE:3A:91:26:3E:2E:83:19:C2:A6:78:E6:29:85:1D:09:E7:7F:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nv46kSY-LoMZwqZ45imFHQnnfw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/e96ef4-4f45-47c0-bebf-fa3e0901f240/1/Nv46kSY-LoMZwqZ45imFHQnnfw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:bc:b2:4e:67:e3:5b:ab:6f:04:e1:83:bb:cb:5a:da:89:62:
95:a8:0f:d6:8f:8b:a6:af:f8:e3:ed:6d:1e:a0:5b:30:35:d5:
d4:25:4a:a5:e9:a7:e6:0f:8a:8d:fc:c2:d8:98:48:de:03:04:
e7:bd:24:c7:87:56:5c:4c:7d:50:2d:41:01:5a:68:f1:76:b6:
0d:79:9a:a5:0a:63:cc:11:86:11:09:a3:a8:7d:c8:4f:65:8c:
d4:e8:1c:17:ac:35:5b:74:86:04:42:d6:3d:6a:4c:57:c2:82:
10:94:ec:30:ed:5a:36:47:b8:a6:31:29:78:95:7e:0f:5b:fd:
bd:cb:c2:fe:99:29:04:4e:e3:7d:8c:3f:55:56:03:7f:f4:a5:
80:8f:43:f6:50:6c:73:4f:ea:1f:26:e9:df:8a:d5:5d:49:7e:
20:7c:1b:a3:7e:b8:71:24:53:62:fc:70:a6:b6:e2:e0:41:24:
4c:44:28:ae:79:86:fc:b0:40:94:cb:5b:62:a9:c4:16:50:c7:
21:e4:7c:04:53:2e:11:79:89:5b:22:9f:f0:72:d0:f7:48:b9:
93:78:c1:62:6a:43:b6:f2:0a:11:5f:f1:84:fe:f7:4a:a7:a7:
7c:63:2f:89:ab:a4:63:f2:9d:ec:4f:ad:fc:a6:2e:b8:45:c4:
90:ae:02:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 01:14:13 2026 by rpki-client