Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
File: F8ID4_NlkjqEPTIgMXocaM903g8.mft (raw, json)
Hash identifier: 3zn1yuyf7WY9ovZlW7UuUf0UzkJ+rEVTRYbqLp/WzZ4=
Subject key identifier: CD:BB:84:EC:48:84:0B:45:68:9B:F9:82:79:06:AE:8E:9E:08:E4:CA
Authority key identifier: 17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
Certificate issuer: /CN=17c203e3f365923a843d3220317a1c68cf74de0f
Certificate serial: 019D25F15A829F7ED1A2094F6D2B0BCCFA33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
Manifest number: 1890
Signing time: Wed 25 Mar 2026 17:01:07 +0000
Manifest this update: Wed 25 Mar 2026 17:01:07 +0000
Manifest next update: Thu 26 Mar 2026 17:01:07 +0000
Files and hashes: 1: 2Z2Mezr_sYt_rFmNrbgtD7JcvRg.roa (hash: uRg8q37DVfZI6yBc5sgrO+ko0WZotW48TPAF7XoPsVE=)
2: F8ID4_NlkjqEPTIgMXocaM903g8.crl (hash: KP3fkKty+y8mtMuU+1/B5HzOurBlJONUfvmrdeUJ/vY=)
3: czMfRJgpYWwnULQtqqWPtGxZ034.roa (hash: mbX4pXEOaK5ALTGtde+NqdJWfjILlG0ygUfqaQQo8UI=)
4: dzYbEo-cteZ2L-l9SGVqJRtNPn4.roa (hash: nGkk5VkpkEQp3zSwJU2wzLe3I3V3Q1pcrGZeVvvlJsM=)
5: m-2dYhQrAu-81Ydza21n-eRWlcw.roa (hash: yLjz+lgfJ+jDnIJSu5od2TETiCmbT6+DCzdwHtsWayA=)
6: s61yv5KU-MzMgLkWKPoUNVLjQhg.roa (hash: sBkMiUtHAV3ToABJLtfHzQGVeTvCXT0UMs6UHTlwlRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:5a:82:9f:7e:d1:a2:09:4f:6d:2b:0b:cc:fa:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17c203e3f365923a843d3220317a1c68cf74de0f
Validity
Not Before: Mar 25 17:01:07 2026 GMT
Not After : Mar 26 17:01:07 2026 GMT
Subject: CN=cdbb84ec48840b45689bf9827906ae8e9e08e4ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:98:23:ff:f0:7a:87:b5:a4:a4:88:ac:84:a4:
40:82:17:6b:70:fe:d2:d0:fe:62:13:72:0f:62:97:
08:93:cf:a0:20:38:18:ce:1a:66:12:c7:22:9e:2d:
a6:c0:b8:e8:ca:9a:93:38:f2:b1:8c:75:8d:49:f9:
66:ba:0d:a4:a7:c7:a5:9d:34:73:e4:c2:b3:19:00:
e5:c8:25:3f:3b:70:f5:51:ac:cc:7f:c8:6f:a4:3b:
98:ce:2d:41:ca:0c:d9:f8:5e:c8:7b:58:33:7e:fd:
cc:df:e1:7e:94:83:7e:04:d1:8d:09:03:76:61:ed:
2c:1e:68:86:c5:85:0f:2e:7a:c8:0c:5a:85:d2:90:
ab:28:4e:53:60:4e:73:e7:ff:c4:d0:f6:61:3f:39:
e9:55:1a:7b:df:9e:01:81:46:37:cf:e9:41:78:ed:
65:cb:95:f8:f6:50:9d:df:49:5b:07:f0:05:15:95:
ed:9b:c5:e6:27:b4:e9:74:37:38:21:1c:67:39:c1:
aa:94:95:03:77:65:e1:e5:30:aa:34:3d:ed:8d:21:
94:2d:f3:6d:c0:5e:ba:e4:aa:3f:23:50:ad:7b:7e:
68:fc:5d:32:dd:6d:10:42:e1:23:25:10:93:29:9b:
52:fb:4a:3a:4f:09:d5:3b:0c:3d:fb:5c:8a:16:ee:
d5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BB:84:EC:48:84:0B:45:68:9B:F9:82:79:06:AE:8E:9E:08:E4:CA
X509v3 Authority Key Identifier:
keyid:17:C2:03:E3:F3:65:92:3A:84:3D:32:20:31:7A:1C:68:CF:74:DE:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F8ID4_NlkjqEPTIgMXocaM903g8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/89ae8e-4674-455d-9f23-ac67a36e4aab/1/F8ID4_NlkjqEPTIgMXocaM903g8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:d5:f5:18:9c:b4:36:7b:97:88:e1:d1:83:2e:69:1b:b3:07:
bf:09:f8:d1:75:71:50:de:e2:d4:14:a8:7c:f5:d1:fa:44:33:
11:dc:79:52:cb:22:1d:bc:cf:8f:5b:ea:a2:85:fb:b6:a6:ab:
0f:ea:55:06:bf:28:15:1d:f6:a9:4c:e2:16:ed:a0:6a:5a:26:
2a:2a:a6:9b:70:38:b6:35:e2:b3:3d:83:56:f5:29:c0:58:76:
75:a0:d7:16:34:60:16:ae:06:7f:35:15:88:c3:61:ba:bd:9b:
a1:c3:89:04:4f:e2:51:3d:89:26:9c:74:cd:7b:8a:76:b7:75:
97:12:ef:0e:d8:98:34:da:7d:ea:9c:ab:a3:58:f4:bf:92:77:
50:b3:c2:a2:4f:f7:43:1c:3d:12:ee:ef:a3:f0:09:b7:1a:7c:
16:9b:00:3f:5c:f2:4d:0d:ed:d2:d2:47:14:24:84:e2:b9:ea:
02:12:0b:3d:77:3a:02:9d:b0:a1:b3:12:2d:a4:1b:ea:df:5f:
00:79:31:e4:de:c0:4d:86:6d:91:37:53:33:e7:5a:cd:bc:15:
52:29:a2:69:32:7f:3d:78:22:ae:3d:47:16:cd:68:41:64:9a:
67:b9:69:2d:d0:91:9a:b2:33:53:b0:30:2d:b9:c3:51:0b:0d:
d2:5b:9a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:14:13 2026 by rpki-client