Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: C/KlZfK/tseQKuKibC8G1chDJfEVJE1Vfa+LPfLkf0c=
Subject key identifier: 24:C5:58:CD:AC:84:51:E9:74:4E:CF:DD:31:A1:3D:0A:1F:65:2A:50
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 019D27E078F26C28DC386EF7D991651917DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0E0B
Signing time: Thu 26 Mar 2026 02:01:55 +0000
Manifest this update: Thu 26 Mar 2026 02:01:55 +0000
Manifest next update: Fri 27 Mar 2026 02:01:55 +0000
Files and hashes: 1: jkMi5Y3UFgCK0cn1sZkX8r-KP9c.roa (hash: EXEli+Wg6YA+EC4JraUO/Ed+rqcKD/n9lm13wWOUAkY=)
2: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: g4kUcFp6GtMS8Teu04QsHW4NM/fZQAlyIWiVEEfCJSk=)
3: ssMCTs8bK6eFQagUc6XQvNNJt9M.roa (hash: Ez0nES5Job0wKRYCfXv+7ubsmfBER3A3sxP8nRIZ91Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:78:f2:6c:28:dc:38:6e:f7:d9:91:65:19:17:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Mar 26 02:01:55 2026 GMT
Not After : Mar 27 02:01:55 2026 GMT
Subject: CN=24c558cdac8451e9744ecfdd31a13d0a1f652a50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:bf:4f:db:58:11:4a:4d:29:e7:0d:2b:85:98:
f9:d1:80:21:7c:65:64:6c:9c:4e:26:11:76:64:8d:
36:fc:40:f9:71:5f:f1:e9:b2:e9:5b:a5:ca:2f:2e:
d2:ed:0b:62:b0:df:bf:da:81:2b:1d:a4:0b:6b:97:
9d:a4:13:b4:9c:3a:82:f8:76:15:f5:d9:e2:61:b6:
e2:81:44:d4:b6:17:51:69:b1:72:73:b3:e4:cd:b7:
97:7b:ed:00:46:7c:98:2a:ab:81:5d:ff:f0:64:f5:
13:d5:df:15:73:ed:01:bd:b6:0e:52:78:11:ae:55:
4e:d1:64:d3:54:0f:1c:f7:c6:69:7a:2e:a1:5c:b3:
ad:6d:78:a1:99:81:3f:cf:27:b8:d0:9c:39:fd:c7:
f1:8d:96:69:14:8f:5a:d8:c3:74:e0:bc:2f:7d:85:
21:06:99:19:fb:71:ce:dd:16:1c:1a:67:58:29:6b:
28:aa:ec:fa:c2:c1:a0:d9:f0:66:21:86:92:47:29:
e1:85:6c:82:3c:f5:ac:ed:11:e6:db:10:56:59:cf:
19:a9:94:f9:e4:ce:15:77:9e:88:a4:de:cc:12:8a:
5b:96:ab:6a:84:cb:5c:f6:2b:8f:ba:a0:bb:ab:bc:
ef:b1:c3:70:a5:25:71:1e:97:7d:f2:81:8f:fb:92:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:C5:58:CD:AC:84:51:E9:74:4E:CF:DD:31:A1:3D:0A:1F:65:2A:50
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:cd:a4:29:df:9b:a6:2e:c2:cb:1e:97:00:b8:b0:a9:19:3e:
5d:be:8a:12:be:55:f1:3c:a7:9f:c0:26:6e:d6:02:c2:25:08:
96:dd:7d:f1:77:c1:0b:b6:41:aa:38:2b:f0:64:41:75:b8:07:
42:0d:c2:bb:da:20:2d:cc:1c:f8:ec:61:06:1a:7c:b8:02:23:
e6:07:c5:f4:db:41:98:0a:5a:58:12:3f:ae:1d:cb:56:53:18:
6c:8d:df:ce:5e:30:f1:c8:e0:16:03:40:f5:6e:39:12:1e:d1:
49:d8:25:4b:66:0a:0d:23:1b:77:28:ef:ff:f7:e6:17:ef:06:
76:7b:2e:f1:a9:7c:d7:cf:24:83:5d:83:b4:f5:2f:a5:bc:aa:
db:6c:37:8d:bd:a9:a7:86:b9:95:c1:d1:13:af:d5:2b:85:9b:
52:a3:b7:e0:0b:d3:fb:e2:ec:da:9c:dc:a7:85:73:d0:97:98:
bc:4a:c9:64:be:80:26:76:84:ca:69:e4:37:e2:53:cb:74:bb:
4e:63:7e:4e:cf:32:55:ed:61:79:9c:08:c0:e2:18:4d:3b:90:
3c:c0:f4:29:f9:00:73:ab:07:85:3d:30:d2:16:5c:03:c0:08:
8d:61:2f:f1:cd:31:34:6e:f0:2e:9b:4a:0e:08:f2:37:7d:f3:
5e:e5:f2:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:22:09 2026 by rpki-client