Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
File: nG_8tbXi3kVRrPm0WvJC25RYTlo.mft (raw, json)
Hash identifier: rb0OIAPanfLGjxi5HFS4A8wfUHJBcpWPP8yqbrTTR0M=
Subject key identifier: 63:1B:6B:36:A3:13:79:48:0D:60:27:F2:3E:0C:ED:83:A9:B7:D6:4D
Authority key identifier: 9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
Certificate issuer: /CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Certificate serial: 019D284D7E20A1655772D2A40C6BBF18F8FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
Manifest number: 033E
Signing time: Thu 26 Mar 2026 04:01:00 +0000
Manifest this update: Thu 26 Mar 2026 04:01:00 +0000
Manifest next update: Fri 27 Mar 2026 04:01:00 +0000
Files and hashes: 1: JYDvuTNMtjjK-8IaqLhwz2Cec7s.roa (hash: FWsJUhKGYuN0Rp7xhxDkf816K5xocMXin1sw7OXvieA=)
2: OJEw4xygRnoY9I40M3lWZLH3FOc.roa (hash: Thdz97AqBbMGUqAUgckdCUPrt8BiP6jjTT4Frfdq4dA=)
3: nG_8tbXi3kVRrPm0WvJC25RYTlo.crl (hash: xrZoo42ls4ICaDnnNWIug5Eqr4Sn1U83kjVE/B/bxN8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:7e:20:a1:65:57:72:d2:a4:0c:6b:bf:18:f8:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c6ffcb5b5e2de4551acf9b45af242db94584e5a
Validity
Not Before: Mar 26 04:01:00 2026 GMT
Not After : Mar 27 04:01:00 2026 GMT
Subject: CN=631b6b36a31379480d6027f23e0ced83a9b7d64d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:a4:80:c0:a9:19:6a:f8:f0:16:4b:09:a7:62:
66:08:54:ab:0d:5c:e7:bb:cf:93:7e:e7:41:76:00:
c3:86:7c:be:14:86:53:65:2d:a1:ea:d2:56:c6:a1:
97:20:ab:b5:76:c0:82:ea:4e:71:ca:31:7b:f0:d3:
26:5c:9a:b7:0f:59:97:85:b8:b4:9b:7c:b6:e0:a4:
92:d6:2a:60:b0:37:5b:66:41:b0:9b:52:13:2e:22:
2b:8b:cd:88:81:af:cc:55:30:ac:9b:b2:76:9e:8b:
52:fc:6c:61:52:fb:d8:ac:4a:83:f3:05:ed:b8:24:
9c:2e:86:c4:3b:f3:de:3b:d3:38:9e:f9:05:c0:94:
05:77:d7:0f:49:4c:4c:df:5f:4e:e8:f5:18:af:b4:
38:82:a2:c4:3a:f1:71:43:ba:5d:a7:14:6e:e7:29:
52:11:9c:89:73:6c:b6:ae:83:61:ef:aa:8b:e7:b4:
de:fe:19:16:dd:20:d6:92:24:44:2b:d1:f0:2e:f2:
39:8e:52:eb:ec:99:01:c1:5b:55:fb:f0:23:87:37:
8d:6b:c1:d5:13:7a:59:bc:3e:6c:90:c8:98:86:74:
46:ea:d5:e7:f8:12:0d:0e:f1:43:05:7a:b8:2f:05:
86:15:71:68:5e:cc:75:c6:79:11:39:1a:56:6b:bf:
25:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:1B:6B:36:A3:13:79:48:0D:60:27:F2:3E:0C:ED:83:A9:B7:D6:4D
X509v3 Authority Key Identifier:
keyid:9C:6F:FC:B5:B5:E2:DE:45:51:AC:F9:B4:5A:F2:42:DB:94:58:4E:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nG_8tbXi3kVRrPm0WvJC25RYTlo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/9841ff-c886-4da0-957a-f2f0955da1ad/1/nG_8tbXi3kVRrPm0WvJC25RYTlo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:62:cc:e1:c4:6c:42:4b:e1:3c:4e:c3:76:2c:42:d8:69:ff:
34:58:47:10:27:e7:9b:21:b6:a1:d9:82:9a:91:88:7d:92:b0:
de:60:46:97:ed:18:bd:bc:c5:f5:a1:30:f6:a2:24:37:b8:bf:
7d:2e:8b:d5:96:e1:37:4f:d1:b2:d9:c0:eb:05:1b:43:49:5c:
2f:49:d5:ee:03:c5:40:8c:0a:a0:bf:0f:b1:ae:7c:c5:16:25:
af:9e:2c:6e:91:5e:a5:5f:ca:e7:a5:0f:3c:68:b9:31:fe:54:
a6:c8:e4:53:97:68:53:f5:5b:5e:95:7a:8d:a8:3c:34:64:bd:
94:c1:f3:be:96:43:b6:33:ca:67:bc:0a:af:82:a7:3a:ac:ac:
06:5f:e7:47:97:99:de:03:fc:4b:11:b2:04:07:ac:f9:13:92:
90:14:f6:b2:2f:b4:3e:8f:eb:00:07:dd:9e:74:e3:63:e7:f9:
71:65:01:5d:e3:64:10:37:3c:85:e1:aa:58:68:2f:2e:c1:9d:
39:7d:69:9a:71:82:e2:bd:a4:3e:18:3b:27:bb:cf:fb:1a:a9:
ce:0e:c9:49:de:29:16:82:c0:fe:2b:eb:fe:de:5d:a9:dd:75:
1b:c0:08:d5:9a:b0:99:b4:10:af:52:53:19:b2:bd:f3:2a:ab:
75:60:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:02 2026 by rpki-client