Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File: ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier: NTJPOaRoD5eBpRQPRCY2z+A+l4IqK+MbKMDkwzRioYo=
Subject key identifier: 25:F3:2D:7C:98:A4:54:68:97:E0:B0:CD:22:97:9E:93:B7:CB:CA:83
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 019D27DF82A1F096F8D230A6ED8266EA20F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number: 152A
Signing time: Thu 26 Mar 2026 02:00:52 +0000
Manifest this update: Thu 26 Mar 2026 02:00:52 +0000
Manifest next update: Fri 27 Mar 2026 02:00:52 +0000
Files and hashes: 1: 3x25UG1jeSrv28neTIumkmoUEBk.roa (hash: u3bicrGhu9OYtfmX/kmGA/DVZrKN7GUP1+zhS7+9WWU=)
2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: CaHVzbnPr/Ej2xqbPimWpN+BN/Zce2eR5vrGj28S41I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:82:a1:f0:96:f8:d2:30:a6:ed:82:66:ea:20:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Mar 26 02:00:52 2026 GMT
Not After : Mar 27 02:00:52 2026 GMT
Subject: CN=25f32d7c98a4546897e0b0cd22979e93b7cbca83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:7b:32:8a:82:02:e4:5a:d7:b4:33:99:86:
c4:80:67:e7:25:b9:84:3c:fa:ba:79:cf:3d:dc:33:
fc:a0:8b:4d:4e:55:82:9e:b7:5d:03:55:2b:eb:13:
ee:c0:f8:6f:2e:16:9c:57:b6:e3:ee:c9:36:ff:d4:
59:90:c6:4a:79:f6:e4:0e:55:41:a7:7b:1d:99:3d:
08:d4:14:dc:59:23:88:02:cc:fd:93:be:fd:33:62:
a0:8e:13:f5:9d:8f:e5:f7:54:b1:ca:7c:c4:40:ff:
65:8c:92:45:3f:5e:b8:70:6e:76:f1:67:ec:1f:d9:
ab:31:13:cd:a9:e0:b6:d6:a3:a2:65:12:1e:7b:84:
ab:e3:68:f4:2f:0b:64:78:c4:2e:e7:48:1b:37:31:
19:73:8d:69:cb:a8:86:cf:71:a8:ca:8d:86:b8:3a:
45:c1:01:87:79:eb:53:bb:e7:9a:23:7c:7c:14:e7:
64:02:f7:32:99:9b:f1:53:d9:0c:ba:e9:22:97:da:
3f:3d:92:b0:e9:1e:71:10:57:bb:25:a9:a1:85:a3:
f3:5f:7a:d8:54:41:85:fc:1d:47:ba:fa:5a:e9:b4:
2a:e0:f4:d8:80:93:4e:06:4c:4a:05:a8:73:64:5b:
2d:b6:a9:57:8d:25:e2:a6:c7:61:36:06:a8:ab:9b:
81:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:F3:2D:7C:98:A4:54:68:97:E0:B0:CD:22:97:9E:93:B7:CB:CA:83
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:20:e1:10:7c:5e:86:e4:e6:28:34:c3:0c:62:6c:66:fd:e6:
ef:c3:b1:1f:5a:20:af:b6:57:ff:0b:45:6a:3e:fe:c6:ca:99:
35:e4:8d:6d:57:3c:d5:4f:fd:26:ae:d6:cd:be:42:59:21:b5:
da:27:22:e8:11:34:25:fe:0a:44:06:22:fd:3e:81:65:8b:b0:
77:d3:fc:a0:67:26:85:5e:57:1d:a4:d9:94:39:43:aa:91:94:
f8:b9:38:da:7e:1c:d6:8d:3b:7b:a1:64:47:fc:44:eb:c5:b3:
91:87:88:75:cf:fd:02:36:51:ac:50:b8:ad:49:e7:df:b8:64:
bc:b5:ae:74:e8:8f:86:89:7b:51:75:72:99:4f:e0:2d:e6:0d:
d3:87:48:a2:1f:df:e0:ad:c6:4a:46:b7:86:3b:45:e5:48:08:
fe:03:c8:d9:30:c9:a7:5d:45:8d:7f:c3:40:2b:f0:2f:74:07:
97:5e:a3:50:af:75:12:b6:77:3c:ba:bd:a8:65:93:48:0b:56:
ea:5d:ed:6f:90:15:68:1c:cd:7f:75:0e:ed:a2:f9:8c:e9:2d:
67:c5:62:db:50:3e:be:71:b6:2d:a2:84:f7:d0:cf:6c:1f:e1:
ab:3b:3e:b8:40:2b:bc:b2:11:19:57:96:79:b4:a1:3c:0c:e1:
7b:a0:ea:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:25:26 2026 by rpki-client