Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
File: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft (raw, json)
Hash identifier: GOP4lBwMC/nF36qafc89i2kciQ58kv0GOEALkirNQGo=
Subject key identifier: B1:78:4D:35:0A:9F:2D:E5:D4:A8:18:00:11:FA:CA:DF:55:38:8F:92
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019E1CEB75CED371E158BE911B37D3B009F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
Manifest number: 1942
Signing time: Tue 12 May 2026 16:00:53 +0000
Manifest this update: Tue 12 May 2026 16:00:53 +0000
Manifest next update: Wed 13 May 2026 16:00:53 +0000
Files and hashes: 1: 41lbXeJXKl4CiDGWnnMHpB24gPU.roa (hash: kG6Cncs4+D3tofS5cOrSl2kOR5wHI2wRUBR4uUbXqUs=)
2: 9eWyQcwhhtcWSOgLAyvjVSN69_0.roa (hash: WQam9mNIAyIv9GJMj3n6lEuVNq1iCgTWLcCsWIhP4W4=)
3: B5xzluZY3MO07Y-DnPhReukzoAM.roa (hash: yLbG1QhNKSifZB6S6ehHViwPbt5RRExGQbO6VZAzEXk=)
4: EL9_D6jbpPm0f93FbIMJFjXA39Q.roa (hash: u2EHA4Ca3HUJR0DK3eXdJPDlTwL0hlSO69OLTZssz5Y=)
5: Mx6U3rxhWqix0ypXk8FP2VQkzu4.roa (hash: SXovFZCanvTkxojFFLSIhxdKBc7pAkz+ovEDvaWHEfE=)
6: Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl (hash: eDEaTJaqzO2CUm4tgNC/FBEvYceGb4PbYQ7OoINQCQo=)
7: cxpnqAln6hhdNSSyG6qFvgqIbyw.roa (hash: iyYEFth/WwaalutGJ5J/GHoRvV6KCxdd9XrPvperx+Y=)
8: hPf6EiWabnoMJ6tCE3TYbnHR9QQ.roa (hash: Wa5Ke4FZahcAqtbVLwkcn3uM1gDF8FKkh2X50wELyTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:75:ce:d3:71:e1:58:be:91:1b:37:d3:b0:09:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: May 12 16:00:53 2026 GMT
Not After : May 13 16:00:53 2026 GMT
Subject: CN=b1784d350a9f2de5d4a8180011facadf55388f92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:21:1a:b1:be:43:ce:bf:49:60:37:6d:f6:f8:
5e:c7:fa:06:a0:4d:a7:75:8e:6e:0e:9f:54:a3:2d:
d3:f8:84:14:71:57:7e:b8:82:10:db:39:5a:fa:2e:
c0:f1:2d:fc:d7:f0:d1:ab:c3:07:29:db:15:24:62:
ce:8b:b7:79:1c:8f:12:9a:ed:59:20:70:cf:02:65:
32:70:d2:de:fb:47:0a:f9:ce:8c:27:48:89:3a:f3:
2b:ec:8d:50:d2:31:85:87:f7:2a:c2:80:1e:ae:6f:
cd:0e:bd:32:78:0f:9f:92:87:e2:78:90:36:90:d9:
f3:fa:65:b8:93:ad:79:c1:81:1b:66:b7:12:55:46:
97:91:86:6c:54:e3:2f:2e:0a:79:23:36:70:b9:ce:
22:c5:dd:2b:62:3a:87:2a:45:04:80:92:1a:6f:33:
6a:75:7c:d2:c1:4c:0a:b9:bd:78:0f:e3:ec:9f:dd:
d1:4e:4e:d2:d7:b3:ec:e1:e8:f0:ac:b4:a1:ee:96:
e6:61:bf:e5:4d:43:bf:66:88:19:5d:f2:1f:13:23:
84:d6:a4:59:b5:59:52:36:18:e4:c5:44:b8:25:36:
63:f6:6d:1f:7e:8f:f2:96:4a:23:63:41:7a:69:6a:
fb:c3:c9:88:55:68:0f:e5:7f:b3:5c:12:f3:c4:f1:
67:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:78:4D:35:0A:9F:2D:E5:D4:A8:18:00:11:FA:CA:DF:55:38:8F:92
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:69:26:a2:a9:e3:dd:99:be:df:95:d7:52:3a:45:cb:ea:0e:
b8:85:97:8e:a9:65:24:e1:a4:7a:a1:1b:5f:61:b8:89:8f:62:
76:2e:d7:30:ae:eb:98:10:17:34:80:e5:8a:fc:da:95:6e:8b:
12:00:21:ba:20:5c:50:6d:c8:d8:88:b9:2a:48:ff:94:43:03:
27:37:1c:60:8b:e6:26:aa:2b:da:53:56:83:18:58:fc:1c:84:
6e:39:c5:43:1b:4c:05:5a:a7:72:7e:73:af:6b:45:fd:44:50:
6d:40:13:73:b8:c1:29:40:1e:bd:a7:d6:fb:22:18:38:1d:28:
9c:24:d1:d3:c6:47:ca:b7:d3:48:50:5f:48:b0:71:8c:da:cf:
03:3e:23:f2:55:e8:5d:03:cf:1a:ed:ea:94:70:d8:bc:bd:be:
44:68:a4:2b:18:32:de:ba:25:c3:a8:b2:6c:e9:d1:5b:16:23:
29:27:a3:5e:72:19:40:07:63:b8:58:ff:e5:83:0c:70:1b:5b:
ed:d7:40:fd:45:ac:3f:83:d8:52:00:fe:39:f4:14:79:d0:86:
8b:01:5b:05:85:8b:0e:a3:f2:9b:b8:d5:0a:69:69:f9:7c:ca:
c9:75:8b:9f:36:80:3d:be:e0:33:a3:26:a0:d9:14:7d:0b:ce:
35:43:f8:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:18:47 2026 by rpki-client