
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
File: i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft (raw, json)
Hash identifier: qtEmyMxyJPgAwrYghf1GBsSFZPSE90cWDcwWiPzPRKU=
Subject key identifier: 08:77:DB:06:53:A8:43:27:17:05:C8:5E:61:A9:F4:9B:8C:0E:E1:E1
Authority key identifier: 8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
Certificate issuer: /CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Certificate serial: 019D25F1AB5A8AD2CC0E3FE74393D8A4065B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
Manifest number: 189C
Signing time: Wed 25 Mar 2026 17:01:28 +0000
Manifest this update: Wed 25 Mar 2026 17:01:28 +0000
Manifest next update: Thu 26 Mar 2026 17:01:28 +0000
Files and hashes: 1: 4jNVPAJmLO9c6pL_yxre_7Qg83Q.asa (hash: 8bMdcGTnGljv1AHWzdlj2piSPGzoCzVunMnP41YGxLk=)
2: A_sUqXNJn9Rojoy-SannfwQKt2w.roa (hash: 7MgWH2+po5ITevBMtb9RWW486i9XpZGlyB9u24ejDDA=)
3: CwYtcY0RzoREVsUncN6feXvLhC8.roa (hash: ySt5zeOhGaWSVgsdZWXLp4TRyQYCT9hlwJu376Il+vE=)
4: Ju5bZFbzxZDEu6_EWVUu55SHf94.roa (hash: 3V3wg3sXHNBt7AEjJ/DpnJhsu+XXYKgeytuHR/IQBII=)
5: aontSbFahoS7z7yeQkm0W4LHsPo.roa (hash: nj6whxPf9P8SD5zY0uyTbTulc/A+27qSNJjJoDzd5t0=)
6: i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl (hash: OsMO2JzOgfrg+52XLdscwmtwDNX5qZLw2E4JSuXj0Ow=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:ab:5a:8a:d2:cc:0e:3f:e7:43:93:d8:a4:06:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b69fc6128be591401acf82bc2461af636ebe8e6
Validity
Not Before: Mar 25 17:01:28 2026 GMT
Not After : Mar 26 17:01:28 2026 GMT
Subject: CN=0877db0653a843271705c85e61a9f49b8c0ee1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:d7:a4:1b:6f:1e:ef:d7:c5:a1:1c:b5:a6:
9a:91:ee:66:7f:89:fd:68:e1:56:71:a9:b1:80:84:
d3:77:0b:0e:28:b6:01:74:f3:43:0d:f7:b1:d5:a1:
19:94:d0:d1:25:95:8c:20:28:62:e1:9a:71:4b:72:
0f:3e:01:a7:be:38:75:57:bd:df:c9:23:e7:55:ab:
d8:1c:ba:23:c9:7a:ab:3b:91:92:34:7d:a7:11:78:
c3:14:54:fa:f7:90:38:3b:a3:88:28:3c:54:77:06:
bb:7a:35:34:13:87:2d:38:19:f3:97:5e:db:55:ca:
73:bd:7f:02:d6:9a:9f:3f:45:be:e8:c0:26:ff:05:
bb:8f:0d:6c:d1:13:f0:e0:a5:19:a2:0c:16:55:e2:
d2:f5:b8:16:db:40:49:48:c9:6a:cb:1e:c6:51:c6:
10:58:0b:4c:15:ba:09:c1:df:ce:bf:81:82:97:a9:
78:9e:f4:5b:ec:ab:7d:06:bd:f5:7e:48:f1:be:2c:
a2:4d:e2:d1:e5:27:79:15:e1:ff:6f:ee:a4:36:09:
b8:82:eb:50:e3:50:98:d2:66:7d:bb:4d:26:30:68:
22:d0:51:2a:40:fb:9d:0e:d0:6d:a9:26:c6:28:e7:
c6:16:b9:a3:4c:7e:eb:53:af:ab:b0:31:48:31:27:
b6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:77:DB:06:53:A8:43:27:17:05:C8:5E:61:A9:F4:9B:8C:0E:E1:E1
X509v3 Authority Key Identifier:
keyid:8B:69:FC:61:28:BE:59:14:01:AC:F8:2B:C2:46:1A:F6:36:EB:E8:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2n8YSi-WRQBrPgrwkYa9jbr6OY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/0aa6e6-3054-4888-865e-265f2bd0f8f3/1/i2n8YSi-WRQBrPgrwkYa9jbr6OY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:80:9f:46:58:a5:9e:2f:18:75:6e:21:7e:a7:a9:6f:57:21:
6f:61:27:f0:c9:18:dc:ce:51:a2:04:ac:c1:0d:0d:9b:b2:7e:
75:6f:cb:49:37:61:b8:57:0b:be:6f:ec:16:05:06:26:dc:64:
21:b8:b6:85:46:95:03:13:97:55:2e:75:7e:e0:d5:d2:34:d4:
44:06:23:09:c8:87:6b:77:08:f3:6c:71:37:f7:f5:b9:56:12:
ad:01:ef:4a:65:04:f3:64:0d:9b:77:af:de:07:aa:b1:22:04:
21:af:f3:bf:40:41:65:9e:fc:4d:19:26:5d:da:35:37:47:6a:
69:9a:d5:ee:a2:d5:d7:fb:03:bc:37:98:6e:09:95:04:77:d9:
6b:d1:e4:f1:dc:c8:79:ab:9f:d6:f8:93:44:51:4e:d7:1b:5c:
22:0d:f2:4e:81:9c:b0:dd:ad:9b:7f:eb:74:0d:e4:17:88:26:
ab:37:40:f1:72:27:38:00:54:b1:4d:3f:d3:ea:eb:5b:55:d5:
5d:9a:ce:07:c3:f2:49:93:d5:a1:b8:52:a6:a7:41:2d:3e:d9:
ad:0c:cf:9a:67:e3:01:f9:7d:84:26:2d:dc:8f:46:f7:27:26:
3f:c6:dd:a2:3c:68:02:32:3a:29:32:1a:3b:b9:d6:24:8f:d5:
00:e3:2a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:47:01 2026 by rpki-client