Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
File: niN_MrrhSoH9on6ylGDDoO2jQkA.mft (raw, json)
Hash identifier: zaUdArKreyfNKpMed1UfweuJMpV3/BIxKa+uULr/nbc=
Subject key identifier: 15:24:65:DB:75:0A:93:4A:A8:37:B0:9D:8E:B7:A5:F6:75:22:37:10
Authority key identifier: 9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
Certificate issuer: /CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Certificate serial: 019D2771DBEBD75A8B737793EBE077B56B9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
Manifest number: 108D
Signing time: Thu 26 Mar 2026 00:01:06 +0000
Manifest this update: Thu 26 Mar 2026 00:01:06 +0000
Manifest next update: Fri 27 Mar 2026 00:01:06 +0000
Files and hashes: 1: 5fwb7E4UZBP0d7YdH73baPX3Dl0.roa (hash: ZRIMldvuL7moztovB+EPNknFTOCQ3lCE+HQIvawv5xc=)
2: niN_MrrhSoH9on6ylGDDoO2jQkA.crl (hash: UfWIA0FayRjRaD7ln4hNZAmb3y3O631UIcU2fGfNRPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:71:db:eb:d7:5a:8b:73:77:93:eb:e0:77:b5:6b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e237f32bae14a81fda27eb29460c3a0eda34240
Validity
Not Before: Mar 26 00:01:06 2026 GMT
Not After : Mar 27 00:01:06 2026 GMT
Subject: CN=152465db750a934aa837b09d8eb7a5f675223710
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d6:6c:1e:5a:8b:39:c0:d4:45:61:2a:a9:33:
73:6a:f6:cc:e8:d3:2a:59:ba:2c:50:2b:71:ec:94:
e8:48:db:76:5c:ce:fb:0c:bd:bc:5b:77:3a:b8:e9:
26:b8:0a:fd:ce:a0:f3:4e:58:ed:fb:7a:e7:62:df:
b7:f4:8e:23:c2:46:65:15:68:2c:76:1c:be:19:fc:
05:70:f8:b4:0c:fa:62:ae:a2:fe:71:c9:71:9b:ee:
b0:68:5b:d9:50:c6:51:3e:fb:14:df:2c:80:73:77:
a6:d7:0a:41:cc:3d:13:b2:cc:be:0a:4e:11:ab:3d:
3f:6f:fb:c8:b1:ae:cd:e1:6b:2e:f0:cc:2b:d6:57:
ba:8c:e4:b0:35:5a:ac:e8:26:8f:6a:83:c3:65:ba:
e6:5b:08:f1:04:92:9a:02:e2:82:fc:c1:b5:24:32:
6e:a7:e5:d7:57:2e:22:e0:16:41:e5:89:2d:e7:58:
69:03:5a:7b:64:eb:55:ac:2c:7d:c2:02:da:fd:e6:
78:30:94:39:2e:bf:f0:79:ff:72:6e:d2:8c:89:09:
7a:e9:39:f0:8c:02:26:23:82:0c:fd:8e:0a:da:a7:
aa:d0:11:64:6e:16:58:f2:2e:31:8c:20:21:76:aa:
e5:7d:26:f4:b6:11:b6:b2:43:6f:e3:6c:ed:91:7c:
60:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:24:65:DB:75:0A:93:4A:A8:37:B0:9D:8E:B7:A5:F6:75:22:37:10
X509v3 Authority Key Identifier:
keyid:9E:23:7F:32:BA:E1:4A:81:FD:A2:7E:B2:94:60:C3:A0:ED:A3:42:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/niN_MrrhSoH9on6ylGDDoO2jQkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/5d6ebd-a8ee-474c-b71a-a642cc85bc71/1/niN_MrrhSoH9on6ylGDDoO2jQkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:79:0f:a6:4d:48:a6:5e:46:0e:55:6b:26:21:02:8e:66:f4:
d0:e6:4a:fc:3b:a6:3a:b5:5b:b6:44:2a:b6:56:a6:75:c3:c9:
12:c5:c6:c4:8b:fc:12:2b:f9:b6:ee:7a:ad:d7:ab:f2:be:dd:
01:b9:95:61:7f:84:a5:d3:52:9d:5e:18:cd:74:87:35:ae:09:
e5:96:7f:08:c8:42:e3:b7:3f:e1:7c:7f:4e:15:16:07:b1:4b:
e5:65:1b:ff:e3:1e:e3:c0:0a:3d:c2:e0:9d:fe:4e:e0:03:53:
08:a3:10:0d:be:7b:41:de:ef:36:86:45:7d:28:90:4b:fc:fc:
f7:88:d5:4e:11:13:61:7e:06:71:d1:b3:c6:c4:25:53:c3:fb:
4e:82:75:ab:4a:7d:9b:e5:1d:f7:94:0c:0b:38:50:eb:2e:55:
71:0d:3c:34:e6:d7:24:eb:d6:cf:44:e1:44:75:b0:c7:c6:67:
ba:2b:c1:7b:bd:34:78:c6:f8:71:4a:6f:b7:95:3a:a4:96:8d:
27:04:2b:48:5c:2f:0a:a7:7c:5c:ee:c7:a7:05:a2:8a:f0:90:
83:4c:48:b2:3c:06:86:12:04:ef:78:f6:04:8b:88:ae:2f:2b:
91:50:68:a7:ab:8e:90:6d:92:9c:a4:d6:5d:1d:98:d8:89:ca:
78:05:10:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:10:02 2026 by rpki-client