Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
File: nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft (raw, json)
Hash identifier: HUnLcj7kh+VFzuk9RynXQfUc2BFBeLu91CHPDyefHEA=
Subject key identifier: B4:9C:BF:E6:A1:C2:BE:55:47:71:40:31:28:1D:05:18:33:9A:47:D1
Authority key identifier: 9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
Certificate issuer: /CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Certificate serial: 019D265F7BD0F1CB0CBDC6B0763CECB8A7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
Manifest number: 186C
Signing time: Wed 25 Mar 2026 19:01:24 +0000
Manifest this update: Wed 25 Mar 2026 19:01:24 +0000
Manifest next update: Thu 26 Mar 2026 19:01:24 +0000
Files and hashes: 1: nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl (hash: 4/TQtbdyjQWgDpMi15Ehx99BA0SFe7RZ8tEo17LMerM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 19:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:5f:7b:d0:f1:cb:0c:bd:c6:b0:76:3c:ec:b8:a7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ce894f1d7731e9961719be1ed998468fcbabea9
Validity
Not Before: Mar 25 19:01:24 2026 GMT
Not After : Mar 26 19:01:24 2026 GMT
Subject: CN=b49cbfe6a1c2be5547714031281d0518339a47d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:9a:84:d3:75:dd:ce:5b:df:66:0e:03:d9:37:
7d:5d:e9:8c:a9:3e:6f:60:eb:f0:53:b8:43:2d:2a:
2c:ac:dd:96:15:86:52:9f:c3:10:8b:21:63:e4:6b:
16:f1:96:15:af:d5:77:42:f7:8c:47:9e:4b:80:37:
57:09:52:47:aa:fa:f0:08:65:0d:22:d4:b3:8d:e7:
0f:a7:43:cd:8f:35:81:93:93:66:e0:b0:12:87:fb:
5b:c6:e8:99:d3:41:92:0e:21:1f:71:e5:93:5f:b1:
7b:e4:3f:b9:f1:17:d1:39:f7:f6:58:78:85:7b:65:
f8:d3:a3:71:27:09:76:2e:79:42:68:e4:96:44:35:
93:58:af:3c:16:fe:9a:34:af:d1:d2:53:d0:86:de:
0c:7a:72:fe:b7:03:e2:a3:60:ca:ce:fd:81:4a:b1:
b2:a7:37:78:18:30:7c:13:38:88:a9:5e:26:3e:c4:
a0:d3:f8:00:4b:29:8e:31:1b:3e:83:10:56:38:db:
1c:f7:b4:33:7e:f2:56:c1:46:f5:f5:52:5c:63:c8:
63:4c:ea:67:e3:e9:98:53:00:37:6c:f5:23:af:56:
bd:e2:0b:08:11:65:2e:51:a9:61:13:92:77:40:66:
97:a7:d0:9b:2a:33:7c:ed:03:03:80:82:c0:fc:ed:
af:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:9C:BF:E6:A1:C2:BE:55:47:71:40:31:28:1D:05:18:33:9A:47:D1
X509v3 Authority Key Identifier:
keyid:9C:E8:94:F1:D7:73:1E:99:61:71:9B:E1:ED:99:84:68:FC:BA:BE:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nOiU8ddzHplhcZvh7ZmEaPy6vqk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/1f969c-e387-46fd-8624-dc7f0c094b39/1/nOiU8ddzHplhcZvh7ZmEaPy6vqk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:04:12:6c:7f:c8:28:d4:20:17:64:9b:ab:33:5d:a2:59:c6:
59:4e:ae:b3:57:cd:a0:3a:50:8c:c8:ac:e7:56:35:15:81:8d:
39:bb:f0:e2:ad:0e:21:9b:b9:00:65:b6:79:c4:8e:86:f7:4f:
0b:bc:46:5a:bf:b1:73:80:0b:13:05:ba:b0:a8:bb:d2:d1:4b:
9e:36:13:b3:34:58:b2:fe:8d:00:8d:8e:a3:7f:ee:53:d0:c0:
35:39:15:cd:e2:0e:30:f1:89:55:6a:1e:21:cf:86:16:f9:65:
e0:77:ad:47:2f:1d:7a:31:c6:9e:e1:64:7e:0c:0d:44:6f:99:
5a:26:65:30:60:48:6f:a9:d7:aa:d9:ab:74:1b:87:43:5c:01:
8b:5c:3b:80:a1:60:67:77:2b:21:20:32:70:71:c1:45:d7:d9:
0d:30:eb:f7:31:b9:9d:1d:ff:ed:7a:0a:0a:fe:fc:51:b7:f1:
bb:c1:f8:6b:cf:a4:48:da:76:a5:cd:95:df:38:f9:44:f1:04:
6e:62:cf:2b:bb:ee:d0:ec:11:6f:69:fb:49:cd:e0:04:e8:e8:
8f:fe:17:20:ab:d0:9c:f3:53:1f:66:87:bd:52:76:bd:52:9c:
27:7f:8d:25:56:8f:03:04:02:5d:43:3c:19:ad:3e:5f:5d:57:
86:55:38:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:51:03 2026 by rpki-client