Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier: TLlfzaJNEHr9mwtoy9IWUcX7GnPIzjwUasnA4FyKsYc=
Subject key identifier: 0F:BD:51:58:90:01:D2:F7:1B:63:EA:6A:CD:11:91:99:38:38:C9:A7
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 019D273AE80797F2DD0C38E0DB9224D658F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number: 172F
Signing time: Wed 25 Mar 2026 23:01:04 +0000
Manifest this update: Wed 25 Mar 2026 23:01:04 +0000
Manifest next update: Thu 26 Mar 2026 23:01:04 +0000
Files and hashes: 1: Dcw-9xDEt0LNQllufwK5cz5PrZk.roa (hash: GXNoM6IBXntm7+w+WV0lZ7wmbCHNUEG3uFWcTka2eaY=)
2: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: lMdJSkBODFreQAZ6AKm77jx7Hgwz29vVmD/jKhaEEDw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3a:e8:07:97:f2:dd:0c:38:e0:db:92:24:d6:58:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Mar 25 23:01:04 2026 GMT
Not After : Mar 26 23:01:04 2026 GMT
Subject: CN=0fbd51589001d2f71b63ea6acd1191993838c9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:c9:1d:15:6d:37:99:1c:f3:1c:fd:9c:2e:
39:18:15:c4:d6:5b:25:c8:46:8f:ef:76:4d:28:3f:
b5:b3:65:4d:13:2a:99:c0:c5:16:82:dc:0b:05:e5:
11:09:0b:8b:82:da:80:82:81:95:17:2f:d1:98:de:
7e:8b:f1:a2:d7:bd:69:e0:b8:3f:14:95:a5:8f:00:
2d:a0:be:9e:dd:14:4a:9a:96:58:f2:76:40:d2:85:
7f:3e:b7:af:26:ae:94:3a:ce:e1:2a:05:84:bc:fc:
f7:47:9d:e8:41:03:48:07:a7:fe:ef:cc:c2:b4:b0:
24:ff:39:6e:3b:60:6d:7a:b5:59:53:06:0b:35:06:
3a:b9:00:fe:6a:f9:cd:16:01:a6:f8:59:70:7b:39:
9c:6c:8d:c2:1b:20:3b:8e:e9:c5:26:ac:ff:d8:55:
95:69:8f:a4:7a:6c:16:fa:15:b0:7f:6a:a6:a1:44:
d6:fb:fa:9d:cb:ef:13:fc:05:47:42:ab:bd:c6:14:
30:b1:fd:7d:ee:70:c1:b0:57:94:5f:8c:5a:e9:4a:
1c:da:e9:a0:5d:cd:1e:ec:93:e2:e1:c1:bf:de:fc:
88:ee:92:7e:1b:e9:df:49:80:34:54:8c:65:ff:08:
7f:4f:23:d3:6f:df:04:06:b1:19:5d:e9:05:22:16:
9b:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:51:58:90:01:D2:F7:1B:63:EA:6A:CD:11:91:99:38:38:C9:A7
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:ea:15:92:fa:50:6a:d1:f7:8c:b8:8b:a3:44:81:a3:2a:1d:
e5:35:93:3d:ac:78:93:9a:22:7f:89:52:2d:92:a9:8d:84:a5:
c1:89:77:3d:f1:08:46:bd:7f:05:7c:46:d4:10:12:00:1c:96:
b8:ff:5b:a3:38:21:0f:d9:ba:20:a3:2b:b2:5f:da:aa:86:29:
34:c8:49:8d:10:b5:2a:2f:5d:01:45:f2:3a:53:d8:0a:4e:21:
7b:78:f9:f9:6c:1c:3c:77:81:f4:07:95:4c:b5:d2:70:62:6b:
ba:e8:44:21:9a:c1:89:31:f3:a0:75:b5:28:f9:12:49:bc:ae:
9a:8c:58:9f:66:6d:d8:29:1d:61:33:57:73:c8:85:8a:91:61:
c1:64:1c:d4:23:1a:ce:72:39:fe:4c:ba:b0:87:39:22:8b:47:
4f:60:cd:4b:c1:8c:5b:7e:ce:e8:ca:ae:70:bc:06:3e:45:35:
a6:a1:59:94:3c:fa:58:c0:7e:ed:ef:b8:fc:59:ea:5d:bb:17:
44:55:c1:3f:47:ae:fa:a2:77:84:cf:5a:71:3e:50:38:11:a1:
aa:b8:3f:d4:75:b4:af:74:72:74:35:86:36:ca:c0:a4:ec:3e:
7c:18:1b:4d:2c:26:fc:fc:95:0f:c8:ba:5a:e0:88:be:ce:d3:
87:8a:86:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:36:40 2026 by rpki-client