Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: KCfh1z4CGDBHI0AvAv653NMLFlgzCnpVsmghwpv1lw0=
Subject key identifier: 90:3B:F9:47:C2:52:0B:06:BB:F4:66:C4:51:C0:FC:5E:A6:90:A2:C2
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019D2A04768B50FADD14F8058ECF95391065
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 1889
Signing time: Thu 26 Mar 2026 12:00:28 +0000
Manifest this update: Thu 26 Mar 2026 12:00:28 +0000
Manifest next update: Fri 27 Mar 2026 12:00:28 +0000
Files and hashes: 1: ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa (hash: ZZQdUJPsVGvVmbO6BIZT7SnJBcEBT1ZftSP8BYy67GI=)
2: c57e1whtl5eogTBCeFXU_KrAjnI.roa (hash: rui/Yx3IAn8AclnySbYIVuFoxnyBxQ2AYt9fq4YiyHI=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: RdYpx7C38EHLMkR2JsHEaFiOmF0xIR8CGzN2smyHpSI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:04:76:8b:50:fa:dd:14:f8:05:8e:cf:95:39:10:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Mar 26 12:00:28 2026 GMT
Not After : Mar 27 12:00:28 2026 GMT
Subject: CN=903bf947c2520b06bbf466c451c0fc5ea690a2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0f:2c:46:05:d8:f8:a4:6c:38:85:61:54:66:
b5:e9:69:07:a8:90:ed:61:74:1e:57:f2:d1:86:eb:
d4:8d:fc:db:6c:5c:27:ff:68:31:4e:d7:e9:b0:90:
9d:d5:97:cb:1a:04:e0:52:d5:a7:b2:88:a7:75:b5:
80:39:d4:d3:32:a3:1e:dc:c0:80:bf:9b:98:9f:c6:
b0:b5:5e:5f:2d:31:ca:09:ab:0b:69:85:18:23:c5:
eb:d7:6a:e1:93:e8:ea:2d:f0:ea:11:73:f8:a1:bf:
a9:c2:e2:37:e3:1b:ad:98:94:c5:98:45:e4:2f:71:
ca:2b:38:66:e2:1c:ad:a5:3f:f7:30:7b:bf:c0:0e:
7a:a1:fb:15:09:46:e8:fa:7b:dc:42:8b:90:c3:61:
f3:a0:04:cf:c5:c9:c8:31:2b:2e:5e:01:62:47:84:
d9:fc:af:14:7f:1c:bb:08:4a:ec:d9:2a:94:f0:e1:
b1:07:a7:8d:66:29:df:d4:46:69:97:20:3a:9b:5f:
89:27:ff:19:a5:6e:68:7a:a8:c9:2b:03:1e:e6:cf:
6f:01:0a:04:d1:39:18:60:b9:26:bf:10:50:04:eb:
76:67:90:e8:f9:0b:10:3d:06:2b:ae:84:ba:08:16:
54:38:f9:25:30:4c:af:2c:12:ea:59:70:0d:2e:db:
aa:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:3B:F9:47:C2:52:0B:06:BB:F4:66:C4:51:C0:FC:5E:A6:90:A2:C2
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:d3:a8:42:bc:a4:00:3b:64:b4:b4:9e:21:c9:a1:41:7b:48:
3a:40:a3:c3:52:ee:b1:61:eb:44:71:9c:b6:e0:ce:a2:9c:32:
8a:87:ac:e2:85:05:7f:d0:02:d2:a5:42:68:d0:b4:8c:88:77:
6e:62:c2:3e:2c:ea:be:4c:d7:57:af:be:d1:7b:d7:2f:ed:c1:
f2:33:ed:65:5d:f7:4f:90:fb:fa:7e:69:3e:2c:10:a6:eb:ec:
31:d6:a2:10:70:7e:32:c0:f8:6e:e1:c8:1f:4f:60:ac:c1:7f:
db:47:2c:09:38:a8:c5:6d:70:3a:d7:0c:c8:df:58:8f:85:e4:
0a:91:68:f1:fe:6a:6b:75:a9:6b:c4:c3:3f:e2:c5:10:2e:69:
6a:88:69:32:4c:f9:ae:af:01:cf:7d:5c:7c:80:e6:73:ef:b5:
e9:d4:1d:6c:06:14:5c:89:b8:88:88:04:9f:08:db:18:3a:74:
2d:d0:5c:4e:f1:57:8f:ed:f3:31:38:ec:3b:60:7a:1a:10:a1:
d7:05:77:38:5e:8f:0f:66:4c:9f:c6:28:08:b1:d2:26:d3:96:
e5:12:34:ab:f6:1b:bc:1e:fd:b2:5b:4d:3a:93:1b:80:25:db:
ce:a0:3a:89:f1:cb:c9:2b:3b:db:d4:14:a0:d0:8a:f6:0c:2c:
d6:74:f8:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:15:30 2026 by rpki-client