Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: moCSjhNaRWliivgPLXNQF+HCau49uTPVbBQK8SYp4oc=
Subject key identifier: 96:9F:F9:30:F5:2A:7D:22:B0:D5:78:95:53:9D:A4:2B:69:76:CC:1E
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 019D265FC100FEDE47A0D947433C6AAE36B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 19:01:42 +0000
Manifest this update: Wed 25 Mar 2026 19:01:42 +0000
Manifest next update: Thu 26 Mar 2026 19:01:42 +0000
Files and hashes: 1: l0La-cqh0YtCqpb_P_ploY3jtxY.roa (hash: 96uWLiEvgAqq8mEo7+VReaVgrIrRgh/p9r34i4OMLOw=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: 8eziZDlkrx7EVTAs1kZyqQjr48iTh3St0miTuARTjq8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:c1:00:fe:de:47:a0:d9:47:43:3c:6a:ae:36:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Mar 25 19:01:42 2026 GMT
Not After : Mar 26 19:01:42 2026 GMT
Subject: CN=969ff930f52a7d22b0d57895539da42b6976cc1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:57:56:b0:bc:61:02:d0:54:77:14:8f:83:37:
bb:1d:4b:03:ac:56:e5:4d:52:c7:33:3c:67:63:0c:
5f:28:0b:3f:24:5d:6b:6b:62:47:85:2c:f8:18:88:
2a:8d:b6:36:de:6c:c0:13:22:5d:4f:19:9b:26:e1:
d4:11:7f:2b:3b:21:50:b5:ec:38:4e:6b:91:47:4f:
6a:86:05:3e:8a:98:0c:5a:81:ad:59:12:23:82:21:
0e:5c:47:3d:78:00:78:ae:f0:18:f2:50:62:07:6c:
ab:f6:b0:cc:be:75:4f:9c:b5:53:e6:0c:c1:b0:56:
30:5b:70:38:af:67:95:ab:a1:06:08:4f:f3:f7:10:
2d:29:43:f8:af:7d:cb:89:b6:73:50:f2:48:69:f2:
e2:9b:f2:99:35:c1:02:b4:5e:92:cd:fd:98:a3:48:
f6:5b:a2:d5:50:a4:c3:c3:62:cc:e1:23:8d:d7:a3:
63:7a:b8:c8:30:dc:81:2e:45:07:18:30:26:da:5c:
9e:53:2b:51:3b:45:35:82:2d:17:84:d5:95:98:e3:
89:ad:ad:cd:eb:3a:a0:b6:56:70:7d:99:00:e0:63:
72:61:12:d9:da:2e:88:cc:24:1f:dd:a0:80:a1:60:
26:39:59:a6:62:c8:e3:ef:fb:9e:c2:da:02:ed:7d:
24:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:F9:30:F5:2A:7D:22:B0:D5:78:95:53:9D:A4:2B:69:76:CC:1E
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:1b:b9:6b:66:16:c1:09:d3:a9:cc:d4:44:7c:4b:ac:6d:28:
f5:89:f5:bc:19:ea:d3:cd:a7:72:1d:b2:f9:ee:15:af:95:d8:
d6:a7:d1:b6:5d:77:c5:87:5d:d1:44:59:d5:98:ce:0c:c1:19:
e6:39:85:2e:00:d8:fb:55:16:92:99:c0:11:61:c0:38:82:c8:
8a:cc:50:14:80:c8:ab:c8:cc:b3:4b:55:aa:03:df:88:2c:e6:
32:a7:07:6d:41:86:61:51:31:a3:f8:16:96:c1:d2:38:b1:96:
0f:5e:fe:92:57:a7:33:6d:38:2c:af:88:53:98:68:2f:2d:00:
71:1b:82:25:c0:33:b3:b5:be:00:b8:5c:6e:0d:f2:f6:49:d5:
a6:76:f2:95:64:94:04:18:f8:18:fb:26:d5:16:2b:04:30:b4:
3d:5c:65:20:d4:6b:a0:cf:a1:80:f7:f9:b1:39:4c:2c:d3:6a:
fe:e6:52:fa:4e:12:34:89:cf:eb:65:9f:3d:86:23:a1:dc:da:
2d:a3:b5:b7:ec:16:f1:c3:4f:7f:90:4f:fb:61:e6:95:a6:5a:
ab:1d:99:44:9c:ef:5c:b2:e8:47:58:7d:ed:90:b8:af:25:a7:
e4:e9:53:54:d3:71:b4:9d:61:b5:01:4d:53:f2:06:58:18:91:
f0:6b:86:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:38:17 2026 by rpki-client