Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: JS+GTn0tN8vNpXZ3qCnZmWKPwyO8sJK2sZrFbATLIxA=
Subject key identifier: 70:B0:84:6E:59:BF:BC:AB:3F:91:E7:60:85:10:9C:FA:CF:CA:1C:2D
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 019D25F178FFC876B3A80EA4AD7FBD71EEA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 10DE
Signing time: Wed 25 Mar 2026 17:01:15 +0000
Manifest this update: Wed 25 Mar 2026 17:01:15 +0000
Manifest next update: Thu 26 Mar 2026 17:01:15 +0000
Files and hashes: 1: UO-N3sO-KaU53uAnF0r-Zaxk-s8.roa (hash: th5Xy1RQIpZsqAYlXmjApBlkGESDWNt7uQOcgpj0D/M=)
2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: FQcPf6E4AVVyXEUwDHIeWnf5g4Ae8Ppgyxqqp/FEKHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:78:ff:c8:76:b3:a8:0e:a4:ad:7f:bd:71:ee:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Mar 25 17:01:15 2026 GMT
Not After : Mar 26 17:01:15 2026 GMT
Subject: CN=70b0846e59bfbcab3f91e76085109cfacfca1c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:18:be:a7:c2:19:e5:be:4e:a7:bb:e2:71:1a:
ff:59:cf:a8:b0:ce:03:9e:53:48:16:a4:68:75:8e:
a6:12:b5:12:35:f9:23:e5:06:5b:50:6f:af:8c:d4:
60:54:0b:c8:aa:68:e5:f7:4c:3e:c5:f2:ab:9d:35:
61:52:08:35:d7:8e:e9:3a:f5:8c:73:65:b1:84:98:
1a:f1:29:06:e8:c0:b3:da:41:31:84:37:9e:c1:75:
30:8a:d8:1a:f4:e2:f5:03:ec:dc:24:93:c6:ea:d4:
9f:10:b4:7a:dc:c5:f4:42:31:71:cc:aa:83:85:d2:
21:ed:4c:b9:f6:a7:c3:22:e1:d0:00:b8:c4:d7:e5:
06:bf:d9:89:0d:b4:55:c5:8c:84:69:c8:e9:a6:3a:
39:50:a8:02:3a:f6:41:78:b3:7f:c0:ed:77:c1:34:
d7:1a:9a:a9:5f:93:0f:ec:3f:2d:d6:66:b2:4f:7a:
b2:98:d1:f8:70:df:26:19:e4:cd:c1:72:f0:69:9d:
a8:4a:1f:82:04:f4:df:69:c1:e2:ab:da:48:ec:b3:
4a:87:66:72:ea:86:2c:b3:36:dd:7e:00:53:c7:85:
00:64:fa:09:44:a8:a9:71:4f:e8:b2:86:23:6e:33:
3e:69:a1:ad:0b:30:82:af:69:25:f1:27:f7:0c:7c:
6d:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:84:6E:59:BF:BC:AB:3F:91:E7:60:85:10:9C:FA:CF:CA:1C:2D
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:4c:f2:41:64:c2:64:75:87:90:de:a6:d7:22:36:87:c4:c1:
74:52:96:4a:3a:93:1c:be:fb:bf:7e:ec:98:23:ff:c3:81:af:
b3:90:66:f1:fa:8d:f5:62:27:ce:50:15:79:f6:ba:53:08:a3:
04:1f:08:29:1d:f0:ec:97:a5:3b:df:1f:2f:36:4e:a4:0b:dc:
70:01:26:5e:99:d0:d7:c6:bf:9e:5d:b9:25:a3:1e:bb:d1:84:
8c:aa:b5:9b:bb:b3:25:be:2f:d1:85:da:99:a1:66:06:3e:26:
63:61:4d:30:6b:05:a8:47:36:b5:b7:a7:05:12:10:2c:6c:f1:
b6:63:6d:0f:97:87:f5:79:09:89:c3:ab:7e:7e:45:3d:f1:c4:
89:e3:b9:d6:b5:d2:cb:e4:5b:01:99:c1:c1:cc:57:91:f1:cb:
89:22:ef:f8:b6:3f:92:be:6c:9f:d2:0d:dc:ef:6e:31:80:03:
e9:2e:ef:7f:fd:90:33:2a:2d:62:d1:cb:b1:7b:f8:eb:48:f0:
15:28:10:52:35:96:1e:ee:2a:be:eb:70:23:44:07:fa:2b:31:
51:93:38:2a:66:16:b0:57:75:2c:fd:aa:b8:d0:b2:16:cb:15:
c1:c4:cf:47:3a:92:49:3f:ae:f2:8a:55:aa:a1:05:94:69:4f:
07:73:ba:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:22:20 2026 by rpki-client