Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: WkGDe0FztHq0+l3sscaiMzH4K10jgvJ4c5Pr0pbZa4g=
Subject key identifier: DB:04:F3:30:F0:9D:BC:47:94:A8:10:EF:6C:99:29:67:E5:83:64:32
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 019D25BA1483CBB1C0097DE4BB1989319757
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 1886
Signing time: Wed 25 Mar 2026 16:00:45 +0000
Manifest this update: Wed 25 Mar 2026 16:00:45 +0000
Manifest next update: Thu 26 Mar 2026 16:00:45 +0000
Files and hashes: 1: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: f78CD4qRL3xwxfRupualDbc/sjygzc3xuJfFMf6HZNg=)
2: yfiieDo9iLegYVxPGWv16UQ43As.roa (hash: SYrqg0nXFiIlwOea5YRswLpoCOBeZ7BwjysKy4Ug6lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:14:83:cb:b1:c0:09:7d:e4:bb:19:89:31:97:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Mar 25 16:00:45 2026 GMT
Not After : Mar 26 16:00:45 2026 GMT
Subject: CN=db04f330f09dbc4794a810ef6c992967e5836432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:3e:eb:07:02:8b:d4:0c:ee:56:91:c4:b8:2d:
19:96:96:51:fe:b8:f6:ee:da:b3:bc:05:25:e1:fb:
6a:e7:56:ce:7f:76:4f:18:94:06:d1:bd:cd:ba:6e:
d0:d2:62:dc:c9:b6:91:61:e6:a2:31:8b:b2:7b:4b:
54:44:b8:e7:28:65:58:c6:5e:cd:e2:f0:f1:1a:f5:
a3:aa:29:63:25:08:4f:49:4e:00:62:ee:a8:b4:d6:
10:51:23:8a:24:fc:33:fb:ec:89:d1:af:e1:7c:7e:
62:98:c4:da:86:28:60:cc:b5:a8:59:8b:14:9d:47:
7a:5d:51:09:17:7f:b5:8e:24:02:e1:b0:09:3d:10:
00:d4:c8:44:69:18:7f:cf:84:78:1b:f8:b3:3e:0a:
af:30:95:37:c8:df:f4:ad:7c:bb:ee:76:63:35:6b:
74:cf:0d:3a:6a:f4:4f:9c:8a:1d:10:3c:42:54:85:
1d:8b:3d:58:41:4d:39:00:09:29:9b:d8:ed:f7:a4:
ce:b4:95:76:29:64:8a:d3:4a:20:f0:76:89:f0:9e:
d3:03:aa:6c:3d:f7:93:c8:58:d2:0e:23:47:28:45:
b7:d3:6f:6a:71:4a:94:ba:8f:e9:ed:0a:c3:9f:8f:
5b:91:64:d5:1a:7a:47:01:36:7c:ab:88:ee:f4:56:
b0:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:04:F3:30:F0:9D:BC:47:94:A8:10:EF:6C:99:29:67:E5:83:64:32
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:8c:5c:bf:89:95:c8:43:33:91:b7:17:2d:cd:c1:c9:80:8c:
92:30:83:88:2c:3e:54:44:d0:50:eb:c1:97:05:52:97:9a:38:
b9:d6:cc:30:87:e9:df:b2:85:86:d4:23:59:97:0f:91:15:3a:
23:64:0d:2a:07:ab:19:47:57:97:89:86:4e:57:49:95:a0:96:
12:26:6a:5c:cf:92:6e:1d:72:71:ac:6c:23:79:52:3d:90:c4:
6f:f7:db:ce:50:c7:ef:ba:fa:e4:77:05:38:43:a7:8d:51:2e:
e1:e3:42:48:bc:6b:0f:6f:a9:3e:fa:d1:eb:ab:81:2f:5e:59:
97:94:c0:89:bf:4b:64:4f:8e:4e:93:1a:5b:8e:e4:0d:06:4f:
c8:c7:3d:29:15:c7:07:67:b9:9d:22:cc:1c:11:d2:cd:4d:8e:
b1:ef:b5:ea:b9:8b:40:d3:01:5e:04:db:c0:f2:6f:ae:fb:be:
16:e4:29:15:ad:02:19:29:da:0c:16:0a:f2:9a:d5:2c:6c:54:
ab:eb:d8:66:0c:49:ad:d3:64:eb:4b:9c:12:5a:a1:3a:b1:b8:
49:47:39:06:56:d9:a8:89:f1:ac:56:54:cd:98:80:dc:61:9f:
7d:8c:d8:78:20:60:fe:e1:ef:db:f7:a4:8c:53:cb:b6:a1:cb:
67:32:70:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:37:26 2026 by rpki-client