Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: 1hbdwuku03seZ7vlkPjowqVkS0Ati54OLZeNLaoo7Y4=
Subject key identifier: A5:BC:B8:43:2A:74:2C:D0:49:79:ED:68:BB:1B:75:94:FF:30:21:BF
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019D2960B07BA171EF446E5A586E5B226278
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 09:01:35 +0000
Manifest this update: Thu 26 Mar 2026 09:01:35 +0000
Manifest next update: Fri 27 Mar 2026 09:01:35 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: ZO5YuVw4yJ1GYwNCthX0IDjb2tvBLDKuANPmjGgvNTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:60:b0:7b:a1:71:ef:44:6e:5a:58:6e:5b:22:62:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Mar 26 09:01:35 2026 GMT
Not After : Mar 27 09:01:35 2026 GMT
Subject: CN=a5bcb8432a742cd04979ed68bb1b7594ff3021bf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:36:71:a7:d6:bc:80:04:88:c2:81:b5:8b:e4:
51:50:fc:5c:38:6e:62:32:d5:52:19:49:2f:1d:ae:
02:00:6a:00:46:55:23:56:6d:e4:da:3c:4c:d9:a6:
cc:af:44:ac:2c:40:19:66:ff:32:4e:24:ff:98:58:
97:84:5c:ff:4e:df:2d:31:0e:ca:09:a6:ca:98:0b:
52:31:5d:7d:d7:00:27:b5:63:22:5e:9e:df:92:97:
d3:d2:08:c8:bd:bc:41:9b:b6:30:80:97:fb:73:ba:
1f:89:9b:d4:0b:6b:16:d6:5d:59:33:a7:e4:fd:83:
09:d1:35:a9:59:5e:ef:2a:9d:a4:4c:d2:a3:b5:d3:
ec:42:f2:29:11:b1:24:45:05:48:67:21:f7:96:69:
84:94:09:cf:43:92:29:17:bc:48:f5:97:33:99:1c:
2d:ab:7b:6a:27:ab:16:0c:ab:1e:68:87:a7:ac:bb:
f2:af:3a:8e:45:e7:ed:16:fb:9e:fb:42:b8:80:d6:
f0:6d:54:b7:d0:ba:92:db:e2:61:c5:0e:0c:fe:37:
be:19:39:cc:78:f0:5e:ee:63:1d:88:62:d3:a4:30:
eb:c0:c4:93:45:bc:3b:e0:78:4c:2c:43:e0:0f:2c:
ee:cb:bb:90:b5:81:62:b5:3a:9e:2d:20:c1:46:c1:
96:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:BC:B8:43:2A:74:2C:D0:49:79:ED:68:BB:1B:75:94:FF:30:21:BF
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:d2:cf:00:a3:78:b4:a3:c5:8d:e3:77:19:6f:ba:86:36:54:
58:eb:f9:32:1c:18:9c:c9:f8:97:df:1c:5d:8c:e1:0e:07:ec:
7b:58:e9:d3:c2:65:5d:c3:ac:55:f0:0a:e4:b2:b9:01:13:91:
86:6a:4a:96:ab:07:c9:6a:b2:8c:f0:fb:e9:00:74:07:38:f3:
9b:46:ff:69:5e:ab:bd:c9:70:da:04:16:27:5f:3d:42:7e:74:
1b:41:50:05:56:5c:f9:ad:bb:61:4d:51:a7:bd:87:77:f8:d9:
2f:de:92:f4:eb:0c:ac:d6:d9:13:94:4d:2e:ca:5f:71:fb:c7:
e4:03:72:a7:2b:28:51:13:47:31:b4:44:d5:a9:3f:b4:11:b3:
cb:2a:8d:e5:a2:a9:b6:f3:86:41:78:18:01:d9:71:a0:fc:47:
46:eb:5b:a4:09:8d:c4:47:df:39:d5:2e:65:24:f1:53:47:60:
1c:7a:6f:f9:99:63:e1:73:ae:db:e0:20:a6:9c:d4:24:7b:9f:
c0:de:3b:8b:52:77:66:38:59:ab:5a:bd:54:cd:c6:73:99:1e:
02:af:c7:16:37:e7:fd:a6:5f:bd:34:fa:9d:dd:46:4e:b6:7b:
ae:28:f0:bf:3a:0b:3e:29:b3:31:e1:5b:ef:e1:41:6b:1a:b9:
4e:e8:80:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:06:47 2026 by rpki-client