Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
File: nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft (raw, json)
Hash identifier: dyWoYPp3Vv3PLZ67YDtc5G+oIvpeYXo/HjvbGAkylDU=
Subject key identifier: 0A:34:40:81:45:7A:D1:E4:8D:64:00:74:F1:27:C5:40:F3:25:2B:0F
Authority key identifier: 9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
Certificate issuer: /CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Certificate serial: 019E1DC7756FA59BA7510BFD3882338AD8DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
Manifest number: 1909
Signing time: Tue 12 May 2026 20:01:11 +0000
Manifest this update: Tue 12 May 2026 20:01:11 +0000
Manifest next update: Wed 13 May 2026 20:01:11 +0000
Files and hashes: 1: 1-eiJaBH2kYrPZhQkGjIEcyrY7IM.roa (hash: gzeqOddWkamgLifKoDiz8pUqA/+BC13d2Fw5TMWD4jQ=)
2: Zq98Iidw2cw0Zo72hXFz8p4vmU0.roa (hash: QzQp2VEgOsKH9qFSE3tdbQaitBr0SbkYp6vIsvTA6fc=)
3: m2iSJFXrSMffknc75dt6nX4q_Ew.roa (hash: PpUMfeh4JgwhVE55OoPUjweIHDdfcBKVjcHcumEVNd8=)
4: nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl (hash: 4Q5uLdxptiE8Os8VJ9UlUHZZg+XEOYEd6Z+rL+bmNlQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:c7:75:6f:a5:9b:a7:51:0b:fd:38:82:33:8a:d8:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ededf47822aee27da28d34dab1fe7a3c60a6aaa
Validity
Not Before: May 12 20:01:11 2026 GMT
Not After : May 13 20:01:11 2026 GMT
Subject: CN=0a344081457ad1e48d640074f127c540f3252b0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:82:ce:33:07:66:61:be:68:12:20:86:1f:2a:
39:95:f2:69:ec:af:26:a7:da:5f:6a:7e:1b:88:9b:
e8:1f:b5:18:85:a8:72:4b:5a:98:d7:26:0a:fb:92:
e2:e0:18:fd:cf:1d:1f:e3:9d:46:4c:d5:a2:1b:fe:
04:38:cb:8e:73:73:0d:15:f1:cc:87:97:3b:51:c7:
6c:9c:16:d9:4b:90:50:80:02:b9:10:b7:20:15:48:
28:b1:a6:17:4f:e0:6f:0f:16:69:e0:52:b3:00:08:
75:b1:fb:cd:9e:17:4f:a0:cd:e5:33:64:f1:67:72:
fb:a7:94:08:5b:78:42:a9:1f:ff:fe:47:2c:22:5e:
42:4f:56:8a:5a:94:38:41:be:64:7f:a5:5f:8a:e6:
c5:34:67:4f:9c:7c:12:a8:df:d1:38:97:44:78:a3:
b9:e0:d7:30:b0:39:f6:60:dd:23:49:8c:d5:3f:9f:
34:3e:e1:99:ab:63:56:62:bd:72:0b:69:c3:75:8d:
aa:c2:0c:27:a6:41:63:2e:bd:17:a8:71:79:62:9e:
cf:3c:d6:7e:c5:68:0a:30:bb:9a:b7:7a:d6:70:35:
2b:de:f4:86:19:c1:b8:52:4d:54:e5:9c:2f:03:7f:
f5:8f:13:95:32:d0:02:1a:d0:ee:4c:b9:96:ee:54:
2d:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:34:40:81:45:7A:D1:E4:8D:64:00:74:F1:27:C5:40:F3:25:2B:0F
X509v3 Authority Key Identifier:
keyid:9E:DE:DF:47:82:2A:EE:27:DA:28:D3:4D:AB:1F:E7:A3:C6:0A:6A:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nt7fR4Iq7ifaKNNNqx_no8YKaqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/18b6da-b02e-40b1-97ae-d7399292019a/1/nt7fR4Iq7ifaKNNNqx_no8YKaqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:31:7f:94:2f:9e:a9:0c:fc:0e:4a:2a:91:15:cb:04:11:7f:
90:50:8a:ba:b7:05:eb:00:82:ca:fd:d3:79:88:00:85:98:bf:
c8:d8:6e:84:3f:db:c5:02:ec:0d:90:75:9a:68:86:63:61:21:
21:bd:87:ef:0c:21:1b:50:67:58:51:21:20:c9:bc:d9:f4:bc:
27:75:73:c6:47:25:50:0f:da:68:15:c7:5f:3d:ae:69:48:6e:
ba:c5:b0:74:ef:b9:c1:7a:16:bf:cd:4f:a2:43:d8:4b:e1:65:
26:9c:f6:68:a2:ac:5b:09:4e:95:aa:1e:24:66:1b:c0:ed:90:
00:b8:16:09:ce:ef:af:55:ca:e8:0e:8c:8d:f4:68:92:9b:43:
ba:3c:b6:12:8e:5f:25:c6:d2:3d:b7:9d:40:04:1d:3f:1c:f3:
99:5e:4f:13:75:18:fe:f9:7c:33:24:1c:9a:7a:f7:bf:d7:88:
5e:cb:a6:79:6e:a6:c8:14:5b:9f:c9:69:e3:23:8b:d2:c9:e2:
c6:8f:f3:2d:33:e8:73:ba:de:5d:72:14:16:c7:1b:91:c6:a5:
7d:5c:87:da:6d:5b:88:80:fc:ca:65:be:d1:7a:0f:3e:de:ee:
51:92:ba:dc:bb:bd:1b:9f:84:ab:47:0c:b8:9e:6f:19:34:43:
56:1f:5e:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:53 2026 by rpki-client