Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
File: 1-NPp2u22ukJraBbRyQ83kiO-dXY.mft (raw, json)
Hash identifier: pe1XHmUKv/OHtqvh1n3Mxv8PDGXtqKBDJfofDAmwAow=
Subject key identifier: 8B:ED:10:FC:19:BE:61:A3:58:BC:86:19:2E:1F:3D:D8:56:47:AB:73
Authority key identifier: F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
Certificate issuer: /CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Certificate serial: 019D38D3957BFA91D54F003D7E20A0EA007A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
Manifest number: 188E
Signing time: Sun 29 Mar 2026 09:01:23 +0000
Manifest this update: Sun 29 Mar 2026 09:01:23 +0000
Manifest next update: Mon 30 Mar 2026 09:01:23 +0000
Files and hashes: 1: 1-NPp2u22ukJraBbRyQ83kiO-dXY.crl (hash: ZecPrq+vezPWnJQT6y4CHTWwkgM4q9A7gco2v8RqXY8=)
2: 9zKp-C_pAMEIaqr0sp4A8ZATXhM.roa (hash: 2S2O2Ruy0UoJaMl/WLPTBZ5v0Sh/FIVzqayXsx6eq4M=)
3: tv1MIiLBWtTep28xgfUncRsRxQo.roa (hash: SVQkW7iwcVnllH25dvnpgtPlezpSLw31gKgc/3GpQME=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:95:7b:fa:91:d5:4f:00:3d:7e:20:a0:ea:00:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f8d3e9daedb6ba426b6816d1c90f379223be7576
Validity
Not Before: Mar 29 09:01:23 2026 GMT
Not After : Mar 30 09:01:23 2026 GMT
Subject: CN=8bed10fc19be61a358bc86192e1f3dd85647ab73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:b6:df:fe:a2:7e:15:12:79:89:5e:db:6a:9b:
04:bf:09:2a:07:d6:b4:5c:2b:6b:26:c4:0c:be:4f:
6e:59:f6:b5:a1:b5:f7:26:c2:c1:cd:cc:46:2c:a1:
35:e2:78:2a:f5:35:44:9f:70:67:8c:71:00:1e:5b:
04:0a:39:d0:b3:94:90:b6:e6:e0:66:d0:e1:c5:59:
b2:da:21:54:89:c9:1c:d2:58:54:51:4c:46:f0:f7:
2c:b7:97:b8:9c:92:71:09:1c:c2:8b:41:8e:d0:47:
66:ce:32:a2:89:3e:e5:b6:bf:16:a5:fe:ca:dc:10:
98:ff:b7:fd:fd:12:da:86:7e:c1:b2:14:fd:d4:95:
02:a7:66:1b:f1:68:8e:e9:51:88:d0:bc:64:6c:dc:
5b:ad:c3:69:7a:45:c6:88:6a:56:7c:39:e0:26:c6:
06:14:a6:cb:c9:0b:74:c4:80:cf:c0:fd:fa:73:0c:
b9:15:0c:cc:27:0b:cd:56:8a:59:81:be:ad:c8:de:
dc:af:03:cf:e1:12:3c:ae:d6:24:c5:75:84:67:99:
8a:12:6b:da:ce:db:8f:21:a5:e3:d4:fa:c4:10:36:
75:18:5a:f1:33:71:32:30:20:4d:67:f5:e6:64:5b:
f4:57:04:49:0a:6b:83:7d:df:29:2f:fd:7e:b3:fd:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:ED:10:FC:19:BE:61:A3:58:BC:86:19:2E:1F:3D:D8:56:47:AB:73
X509v3 Authority Key Identifier:
keyid:F8:D3:E9:DA:ED:B6:BA:42:6B:68:16:D1:C9:0F:37:92:23:BE:75:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-NPp2u22ukJraBbRyQ83kiO-dXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/228f34-3563-44d4-8ffb-6b3273f344f3/1/1-NPp2u22ukJraBbRyQ83kiO-dXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:14:bd:64:78:a9:00:7f:d7:11:0e:1a:4d:af:bf:05:f4:aa:
f3:8e:ac:d7:8a:a5:12:35:5f:60:aa:31:ab:7b:a0:5f:bf:96:
37:65:77:70:65:1d:cb:24:bb:5d:9e:e7:0f:5a:54:aa:fd:a7:
95:68:93:ae:5d:0d:5d:ca:89:cd:56:91:68:fb:aa:de:5a:5f:
8b:82:6b:07:d0:03:5e:27:a2:0d:35:35:98:a8:86:d3:72:8e:
2d:44:5f:b7:d5:a5:ce:2b:8a:d3:c8:5c:56:6a:50:19:25:02:
b6:2d:10:6b:b4:e1:36:e3:08:7a:86:b5:06:2d:d1:63:df:f8:
2d:7a:fc:c1:14:0f:36:38:16:24:0f:26:cc:11:3b:d5:7f:10:
f6:6e:14:92:0d:fb:70:10:35:60:c9:40:e9:ca:63:cb:d7:85:
cb:74:7e:61:4c:84:cf:7c:aa:fd:4f:e6:21:16:28:8c:da:a3:
d1:cb:79:3c:39:26:45:b4:94:b0:36:5b:1e:b0:3f:ff:b5:dd:
23:d2:4c:be:1c:c4:d0:a0:58:60:64:44:80:70:0a:d6:80:eb:
11:61:dc:52:ed:d7:cd:dc:88:d9:5b:bb:c4:c7:ef:58:27:52:
4a:03:9f:99:21:c7:75:ca:ee:85:b8:22:4d:27:5e:19:b7:95:
97:32:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:10 2026 by rpki-client