Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: oqRDFcYq8tFI61QPqTMkgQDuiKfQVkBgKdP/u8aAnuk=
Subject key identifier: E3:E7:67:12:93:62:E5:3E:38:F1:63:7E:82:BC:3C:42:54:D9:22:71
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 019D65AB8650B0F5C68133D5C0F2C6DFCDB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0E2B
Signing time: Tue 07 Apr 2026 02:00:32 +0000
Manifest this update: Tue 07 Apr 2026 02:00:32 +0000
Manifest next update: Wed 08 Apr 2026 02:00:32 +0000
Files and hashes: 1: jkMi5Y3UFgCK0cn1sZkX8r-KP9c.roa (hash: EXEli+Wg6YA+EC4JraUO/Ed+rqcKD/n9lm13wWOUAkY=)
2: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: VuhOAaxUuTJkVKeancVQ6YPyux0QB5ndyZtuGMqgVyY=)
3: ssMCTs8bK6eFQagUc6XQvNNJt9M.roa (hash: Ez0nES5Job0wKRYCfXv+7ubsmfBER3A3sxP8nRIZ91Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Apr 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:65:ab:86:50:b0:f5:c6:81:33:d5:c0:f2:c6:df:cd:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Apr 7 02:00:32 2026 GMT
Not After : Apr 8 02:00:32 2026 GMT
Subject: CN=e3e767129362e53e38f1637e82bc3c4254d92271
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:4b:87:37:84:b2:3d:7f:8f:44:b0:be:61:ab:
ff:d3:c3:db:50:66:ae:52:ea:01:56:51:c6:ae:9b:
14:ca:0b:bd:25:13:7d:b9:47:35:6a:48:cf:e7:ba:
ed:f8:b4:64:8f:b7:d5:aa:68:0c:f6:a7:64:84:40:
bc:5c:86:07:cc:06:52:d5:44:6e:36:e4:4e:41:30:
e5:a7:fa:69:6d:65:34:e6:01:57:86:ea:90:4e:4b:
ec:5b:48:85:2e:86:3d:e2:75:ed:3c:52:d7:6b:d7:
73:24:33:95:ba:1b:bc:4b:22:69:f8:45:dc:68:12:
c4:c7:bb:a0:11:0c:7d:40:ed:d4:1e:ef:39:20:36:
30:23:cd:05:18:12:90:f3:14:70:c6:d4:4e:39:be:
d6:7f:a4:7d:bb:b2:49:a2:c9:cd:7d:be:49:eb:18:
82:80:d1:21:98:c7:43:d8:69:99:4e:5d:cb:53:e1:
42:f1:b4:4e:6d:86:c6:6d:c3:34:f9:15:fa:74:c1:
fc:eb:8d:b0:30:c5:d7:9e:b8:54:4f:fe:c0:c6:e3:
ea:d8:b4:23:e0:95:7c:09:cd:9e:d5:3e:c1:3c:13:
8b:99:2a:9c:f9:27:ef:ef:21:67:fd:0f:c7:fb:fc:
35:8d:66:b0:85:86:e7:48:c6:fa:d6:35:46:fa:4b:
47:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:E7:67:12:93:62:E5:3E:38:F1:63:7E:82:BC:3C:42:54:D9:22:71
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:1a:bc:43:24:f9:85:51:37:05:81:5e:9c:d5:16:f4:5a:27:
01:68:ab:fd:59:69:b0:46:a0:bb:c1:18:ba:fc:f2:30:4e:a5:
9a:79:c9:e0:f5:c0:0a:95:fd:09:bf:b7:d4:6c:5a:db:9e:c3:
74:cc:82:54:68:94:11:7f:9b:d4:c7:f4:40:b8:16:77:25:2c:
54:26:cb:91:0c:99:49:69:43:dc:04:47:26:ac:35:7b:5e:9b:
4b:c7:e3:ea:e7:99:a5:ff:26:cd:c4:1e:f6:a7:b3:6b:c4:1a:
12:24:25:d3:91:60:61:bd:04:13:83:96:cb:9c:60:6c:da:85:
94:c4:20:8c:ae:c8:58:e8:e2:fe:0f:49:e6:72:bc:85:ea:f9:
10:da:d6:1a:54:be:ad:c5:c1:71:f1:b4:bc:81:9e:c3:96:b2:
9b:8d:91:66:59:00:26:e9:5b:b4:06:9f:83:f9:77:13:86:fd:
29:ce:b1:9d:be:11:7a:fe:64:3f:35:bd:98:75:a5:55:1c:83:
81:0e:6b:db:2f:47:90:e8:7d:1c:a1:57:4d:89:9f:be:13:a2:
8a:7c:d5:35:42:4c:1d:6b:ac:66:6f:9e:ad:80:e2:76:f2:91:
7c:7f:f8:26:de:44:4b:9e:6e:98:aa:dc:a7:ae:51:28:60:fa:
46:40:c6:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 7 12:09:08 2026 by rpki-client