Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: dCLVcZ3FIdZeH1a4/NrIwKXbITvU2qZrWB+NMzIovyo=
Subject key identifier: 68:6B:E7:34:F4:19:11:61:19:8F:0E:56:44:5C:01:B5:C9:0E:48:C5
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019D2928EEAC8E21D68B399CE77C20885EA7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 0974
Signing time: Thu 26 Mar 2026 08:00:41 +0000
Manifest this update: Thu 26 Mar 2026 08:00:41 +0000
Manifest next update: Fri 27 Mar 2026 08:00:41 +0000
Files and hashes: 1: 0y3BSLlk43QtrfUoNgk-X73r4Lw.roa (hash: tEO4G8BHLgq+raaH5EwqIJrUEIOFZC3cQgG+JNY95JI=)
2: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: oQ4JaxklgQymD+k8NCcmhxGn0rafDugCEtygrFPjN98=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:28:ee:ac:8e:21:d6:8b:39:9c:e7:7c:20:88:5e:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Mar 26 08:00:41 2026 GMT
Not After : Mar 27 08:00:41 2026 GMT
Subject: CN=686be734f4191161198f0e56445c01b5c90e48c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4a:e4:e1:4c:73:fb:3b:79:4c:30:1b:a0:ec:
11:ec:47:68:34:67:12:1c:78:15:33:83:6a:d5:29:
0b:9d:d7:f6:42:f6:d8:ab:0d:ab:b6:f2:73:ab:60:
b9:1a:54:bc:25:7d:2a:1c:c7:d1:73:37:89:69:6a:
94:bf:5e:d4:ab:60:05:b0:5a:17:37:90:56:4d:e8:
e1:00:93:94:78:62:9f:42:b6:4f:8b:df:60:49:87:
0d:3e:69:53:68:c2:89:c9:99:f3:ab:9e:dc:25:4e:
40:cf:0f:3b:9a:bc:41:4a:af:b0:03:40:b1:be:81:
ef:d1:95:41:69:8c:73:a2:56:1e:2c:34:32:6a:03:
49:14:b7:e9:c4:71:dc:32:a4:b0:a5:9f:06:1c:f4:
e8:ea:be:d8:0d:d4:32:ab:16:22:82:2a:c1:d7:4e:
1e:f3:0d:09:9d:08:7f:d7:fa:19:e8:12:55:d9:2c:
9c:49:61:bc:4b:01:4e:09:4d:81:99:d4:8e:50:46:
fc:06:25:a9:fb:39:bc:96:b8:3f:84:46:0a:e8:4c:
95:6d:47:1b:5f:eb:89:5a:3b:f1:f7:02:7b:ec:23:
f0:42:5c:b4:10:9c:26:01:6c:d7:1b:4c:cf:9e:d1:
8c:d3:f6:91:08:ce:00:9c:25:63:8a:5e:13:77:09:
f0:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:6B:E7:34:F4:19:11:61:19:8F:0E:56:44:5C:01:B5:C9:0E:48:C5
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:0c:9e:ff:60:43:db:75:c8:6a:a5:9b:e1:b5:6f:12:10:78:
f5:20:89:4c:a2:2c:d7:24:02:03:69:4f:1f:e0:d2:47:b0:e4:
f0:16:be:a2:66:3d:42:14:24:e7:f5:5a:5b:1d:14:03:8f:fe:
da:e8:68:63:28:33:c8:41:0c:37:3c:77:13:34:17:40:4a:0f:
bf:14:0c:e2:ea:24:7a:47:68:73:aa:0c:d0:97:77:0b:ca:a4:
80:68:27:c1:66:46:b2:4d:e7:7b:fc:7d:46:68:6d:c9:4a:3f:
13:8d:e2:36:12:e5:2a:9f:b8:0d:03:79:78:4e:62:6d:37:50:
68:4f:f3:50:4c:37:57:bc:52:7f:92:1f:54:b8:d8:e0:d2:d4:
9f:69:4f:e9:65:94:4d:b1:ef:5c:67:64:ee:31:00:c2:68:d1:
a8:93:a1:a1:7b:20:60:6a:c2:1a:06:b2:66:b5:df:ad:a0:33:
ef:22:27:10:32:be:81:49:ec:84:34:64:89:4b:4c:3e:df:54:
ef:0c:58:dc:50:16:8c:e6:50:e2:c3:6d:50:bc:18:4a:65:72:
d4:53:f1:f9:eb:f6:b6:92:a5:44:3b:c4:e4:f8:ff:6f:61:e7:
89:d6:6b:d1:8b:e2:fd:de:eb:2f:18:61:d1:f6:ee:4c:f2:57:
87:f1:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:25 2026 by rpki-client