Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json)
Hash identifier: z2QHJNr8RBpDpb5e//qEEs8KinkJ7ZudsZr4RRFNzbU=
Subject key identifier: 8E:4B:E2:2C:1D:A9:C6:C1:A1:B3:41:CD:4A:5C:9C:F4:0A:11:54:E4
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019D2997AA03FCBD8270D5170D8D5F2000F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
Manifest number: 18C4
Signing time: Thu 26 Mar 2026 10:01:38 +0000
Manifest this update: Thu 26 Mar 2026 10:01:38 +0000
Manifest next update: Fri 27 Mar 2026 10:01:38 +0000
Files and hashes: 1: 41lbXeJXKl4CiDGWnnMHpB24gPU.roa (hash: kG6Cncs4+D3tofS5cOrSl2kOR5wHI2wRUBR4uUbXqUs=)
2: 9eWyQcwhhtcWSOgLAyvjVSN69_0.roa (hash: WQam9mNIAyIv9GJMj3n6lEuVNq1iCgTWLcCsWIhP4W4=)
3: B5xzluZY3MO07Y-DnPhReukzoAM.roa (hash: yLbG1QhNKSifZB6S6ehHViwPbt5RRExGQbO6VZAzEXk=)
4: EL9_D6jbpPm0f93FbIMJFjXA39Q.roa (hash: u2EHA4Ca3HUJR0DK3eXdJPDlTwL0hlSO69OLTZssz5Y=)
5: Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa (hash: SXovFZCanvTkxojFFLSIhxdKBc7pAkz+ovEDvaWHEfE=)
6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: s44oRDlB+zTHbCwi8S3YtO5yknNHtQ3qFFGE2r49Pp4=)
7: cxpnqAln6hhdNSSyG6qFvgqIbyw.roa (hash: iyYEFth/WwaalutGJ5J/GHoRvV6KCxdd9XrPvperx+Y=)
8: hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa (hash: Wa5Ke4FZahcAqtbVLwkcn3uM1gDF8FKkh2X50wELyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:aa:03:fc:bd:82:70:d5:17:0d:8d:5f:20:00:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Mar 26 10:01:38 2026 GMT
Not After : Mar 27 10:01:38 2026 GMT
Subject: CN=8e4be22c1da9c6c1a1b341cd4a5c9cf40a1154e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:ca:5d:20:04:7f:83:c1:2b:60:f5:cd:07:
c4:0b:38:32:8b:03:90:1f:6e:fa:6e:fc:6c:3a:ab:
0d:5f:87:b3:17:fb:92:ae:16:c3:3b:99:c7:2a:4a:
5c:33:ff:11:8c:e9:c2:44:f0:84:ed:0e:f8:62:97:
1d:8d:fc:15:60:ef:b4:06:28:8e:88:e4:43:dc:46:
a4:4a:1d:1f:51:b7:c1:f7:ce:3c:b5:90:07:cb:0b:
6c:2c:d5:94:0b:ab:3d:bd:4d:fd:1e:20:46:03:dd:
29:87:5f:fc:3f:f6:d2:d3:8e:8e:7b:b3:ad:80:29:
1e:93:df:71:35:d3:8e:79:6e:da:b0:95:93:2a:39:
d3:72:f9:bc:7e:a7:d7:e5:1a:4f:f1:1b:0b:11:bd:
db:65:16:f1:fa:fe:ba:ea:c0:ca:c8:fd:f8:aa:68:
f2:7d:e1:1f:e0:a8:46:df:a9:ec:10:d9:9f:0a:2a:
70:45:34:b4:dc:be:d5:26:44:e3:c6:7e:ef:bd:57:
a6:94:4b:15:5d:d0:3a:fa:22:15:9b:93:a8:fe:2c:
2f:b7:29:f4:87:0e:12:70:3c:70:9f:6d:1d:91:83:
e6:8a:bc:60:99:53:96:6f:da:4d:59:b4:7b:00:01:
07:08:fe:46:76:ec:b0:9f:4d:3e:fa:c6:2e:f2:11:
c3:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:4B:E2:2C:1D:A9:C6:C1:A1:B3:41:CD:4A:5C:9C:F4:0A:11:54:E4
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:21:e6:1a:7b:90:4c:74:6c:fb:23:81:b8:ad:62:ed:67:f6:
8a:be:45:25:17:8e:c1:36:ff:1e:2a:20:b1:21:eb:a8:bf:08:
9b:13:9c:6c:f9:bd:3a:24:05:ab:3d:2d:c0:ea:af:f1:39:0b:
50:ea:f4:14:66:b8:36:4f:3d:36:c7:34:7e:15:ce:42:21:cc:
ed:05:c2:c8:10:64:7e:1e:f5:66:5b:3d:44:a2:3c:d3:84:87:
5e:32:73:77:03:3f:15:18:ff:fb:1e:5f:cd:6e:20:2b:e6:75:
52:67:47:06:68:18:f8:6f:d8:01:3d:8a:b6:09:81:1d:17:42:
e8:b0:db:f1:a8:9d:c4:b7:cf:cc:10:fc:5b:99:be:7c:e6:ff:
96:4a:a9:e7:b2:8f:21:91:49:15:0a:81:5b:7a:00:f2:a7:b5:
a8:26:f0:f1:dc:e8:14:8c:80:42:e5:45:d9:0c:44:10:cb:d5:
89:47:25:2b:ca:99:44:c9:aa:de:99:b8:cd:4a:d0:10:81:39:
f3:a6:b2:35:9f:91:9e:8c:65:31:52:08:26:89:58:0b:69:e9:
d8:81:a8:77:0e:31:f2:d6:a6:08:65:f5:d6:ca:5b:60:49:e0:
38:ae:62:ee:46:1b:8a:47:95:be:55:21:33:70:ec:d8:9b:b3:
08:8e:c7:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:34:45 2026 by rpki-client