Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
File: bN7Hsun4ZurDa8McpMT_YtU90WY.mft (raw, json)
Hash identifier: 1jalBR8QEFML1BDYyq+wM+Y2Vmm8VoJG49aEfIZAgOg=
Subject key identifier: 54:E0:B2:D6:D8:FC:A1:76:C5:AF:33:70:1F:3A:B2:AC:C3:30:CF:6F
Authority key identifier: 6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
Certificate issuer: /CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Certificate serial: 019D28BB817332B90BD0BBAFD94AC746FA55
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 06:01:10 +0000
Manifest this update: Thu 26 Mar 2026 06:01:10 +0000
Manifest next update: Fri 27 Mar 2026 06:01:10 +0000
Files and hashes: 1: LEEO04PoylroqFY8moJTc81n18Y.roa (hash: VL5m4Xl6YVLRVrUOG2POhFSxcgEK6w8mouyfVI3KzkQ=)
2: bN7Hsun4ZurDa8McpMT_YtU90WY.crl (hash: /QtINwEzHUDXhcX7kwg7dPhiOwcJcCI0MOvU3N0v5hQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:bb:81:73:32:b9:0b:d0:bb:af:d9:4a:c7:46:fa:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6cdec7b2e9f866eac36bc31ca4c4ff62d53dd166
Validity
Not Before: Mar 26 06:01:10 2026 GMT
Not After : Mar 27 06:01:10 2026 GMT
Subject: CN=54e0b2d6d8fca176c5af33701f3ab2acc330cf6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:55:12:e5:fa:47:d1:6a:4d:40:5d:3b:2c:34:
ba:c5:fd:23:6c:69:72:cd:8a:42:1a:c6:f3:3b:71:
e4:d2:d7:6b:b9:52:f4:0a:ee:14:b7:38:11:76:07:
ac:ca:5e:88:5a:88:e0:96:d3:16:f0:45:aa:00:83:
b7:88:db:e3:fb:27:ef:b8:a2:09:ea:74:18:9f:75:
cb:70:3c:0d:fa:d9:a3:82:08:0a:a0:13:4c:37:24:
c0:c2:cf:74:26:14:a8:d5:27:0b:cb:44:e2:78:3f:
19:c4:c0:c1:8e:23:70:35:84:af:86:ed:80:83:28:
40:6a:99:94:df:38:ed:aa:00:b2:81:60:79:cb:03:
08:5f:80:7d:de:3f:fc:82:4d:7c:0e:9f:8c:85:78:
63:cb:2a:89:c8:38:f3:7d:8c:84:0f:df:47:e0:77:
8a:21:83:99:4e:98:b4:95:34:09:f9:8a:d0:a1:12:
e7:f6:61:fb:55:92:32:45:34:2f:2c:bc:3d:d9:5e:
2f:fc:63:53:14:13:3c:8d:83:a8:1a:c2:49:cd:a7:
01:b3:5d:d8:3c:e0:e7:a0:1c:41:06:53:6f:40:fa:
67:cc:69:09:a7:a2:a8:0c:87:25:93:ca:d9:e1:63:
41:b5:f3:95:a6:1e:d4:24:f9:1c:98:0f:cf:ba:ae:
2a:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:E0:B2:D6:D8:FC:A1:76:C5:AF:33:70:1F:3A:B2:AC:C3:30:CF:6F
X509v3 Authority Key Identifier:
keyid:6C:DE:C7:B2:E9:F8:66:EA:C3:6B:C3:1C:A4:C4:FF:62:D5:3D:D1:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bN7Hsun4ZurDa8McpMT_YtU90WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/01504c-c1c6-4564-a402-4e67be4e432e/1/bN7Hsun4ZurDa8McpMT_YtU90WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:7f:9b:68:72:3c:70:b1:1c:e4:98:1e:6e:be:ee:05:0e:a7:
2f:89:7e:df:b7:e4:e5:11:b5:1a:cc:a7:47:e8:dd:8b:79:da:
be:30:5d:ec:1d:e9:8b:21:63:1a:a2:0b:86:38:26:e4:81:ad:
94:88:64:63:a4:9d:4e:df:36:cd:96:44:de:d9:4e:a5:63:50:
13:ae:56:d1:89:6d:a7:c3:69:ff:83:9a:a2:1e:de:e4:43:a5:
fc:a3:f8:38:f2:bc:c2:6d:2c:9a:e9:e5:d9:58:67:30:d3:c2:
d7:b3:00:85:f2:ca:70:03:1f:a4:9a:56:91:cb:cc:6d:4d:24:
89:6e:82:17:3d:1f:13:d7:7b:5f:ee:e9:cc:ab:03:2b:b2:ad:
bc:ab:d7:ad:e9:23:47:d3:b7:1d:6b:a5:10:94:f3:12:b1:8b:
7e:fd:19:97:6a:c1:b8:6f:76:cf:d6:de:b4:b5:34:a8:1c:18:
d7:f7:78:9b:79:ba:0e:e7:4f:68:fc:56:fc:35:3f:35:b8:53:
68:6d:d8:a9:92:4c:2a:f5:af:24:e1:1a:5b:84:ef:0c:c3:f1:
99:af:7f:81:88:24:10:67:d1:71:25:ad:55:d0:27:da:67:72:
13:89:79:a6:1a:f0:09:fc:29:12:9c:1d:3b:74:a0:ba:fc:b8:
38:b2:b0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:00:27 2026 by rpki-client