Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
File: n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft (raw, json)
Hash identifier: TyYAK9vAlEjm45YeBLCi1WIqSTfsPNe4gPTaHbLFDsE=
Subject key identifier: 18:7C:7E:F0:95:13:C6:65:38:6E:61:B4:2E:83:51:8E:E1:65:05:12
Authority key identifier: 9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
Certificate issuer: /CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Certificate serial: 019D3789A3305AD378BD7E719E326623F4E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
Manifest number: 0817
Signing time: Sun 29 Mar 2026 03:01:00 +0000
Manifest this update: Sun 29 Mar 2026 03:01:00 +0000
Manifest next update: Mon 30 Mar 2026 03:01:00 +0000
Files and hashes: 1: IVyr9TDbDX_pP70HeSId022KL1g.roa (hash: fpC1adTUWc8ZZMx++n/r65zHb13GStL3YQc2TtjYHOc=)
2: n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl (hash: O5aVmfRP8LYelzHmqPnzGStTu/DPwbY4KgUZE7AZMgg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:89:a3:30:5a:d3:78:bd:7e:71:9e:32:66:23:f4:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc17f87ceafa878fce3bde68a715dde17c3e3d
Validity
Not Before: Mar 29 03:01:00 2026 GMT
Not After : Mar 30 03:01:00 2026 GMT
Subject: CN=187c7ef09513c665386e61b42e83518ee1650512
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:c8:2d:4f:db:ab:dd:ac:bb:d9:87:5a:5e:af:
2c:7b:67:0c:8a:58:34:52:de:1b:74:f7:fe:93:42:
7b:ae:a8:ec:da:4e:b5:c0:19:a3:c0:ab:0b:84:b3:
4c:28:d0:c0:b2:a3:3e:d8:ae:89:5c:cb:11:1b:02:
14:e5:c6:43:64:b1:99:75:ad:f3:f1:aa:cc:ce:d6:
8c:26:2f:68:5a:69:1d:89:89:92:5f:e6:d6:4c:4f:
99:61:6e:8a:7e:96:ca:19:f7:06:dc:e0:7c:78:a7:
dd:ee:2b:8e:cf:9a:0f:af:c7:e2:35:9a:a3:b6:b5:
bf:e3:58:96:b8:2e:d6:2b:f2:cd:27:c7:8b:3b:8c:
ce:53:25:6f:6b:b9:23:88:cd:11:90:ae:17:f0:3b:
99:3e:46:7b:43:cd:6a:65:25:83:d4:53:c6:14:84:
43:71:65:fb:3d:90:ca:63:30:96:7a:9d:8e:c7:17:
dd:55:5f:f8:b1:62:4d:8a:01:5c:6c:a1:05:54:62:
35:56:94:82:e8:08:a6:d2:a3:2f:1b:73:0f:2f:4f:
73:cf:80:fc:2e:7a:e4:e4:e0:60:fa:be:05:71:9f:
ba:2f:bc:bc:6a:a7:aa:8f:dd:2c:63:7e:6b:94:08:
bb:59:06:d3:29:58:65:1a:ec:6c:05:74:ff:12:4a:
a7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:7C:7E:F0:95:13:C6:65:38:6E:61:B4:2E:83:51:8E:E1:65:05:12
X509v3 Authority Key Identifier:
keyid:9F:FC:17:F8:7C:EA:FA:87:8F:CE:3B:DE:68:A7:15:DD:E1:7C:3E:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_wX-Hzq-oePzjveaKcV3eF8Pj0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/ec56f9-7ff0-429b-b069-1f245002d640/1/n_wX-Hzq-oePzjveaKcV3eF8Pj0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:59:aa:a4:80:0f:24:73:72:43:6c:88:00:2d:27:f8:a9:b5:
17:ec:05:db:8b:8b:2d:5f:98:1e:cf:fa:b5:4f:f3:61:9f:91:
9c:f4:b3:0c:76:01:e7:64:f7:ce:e2:cb:56:54:92:d2:bc:91:
c7:bb:ab:ca:2e:58:88:06:d4:69:e0:70:17:95:5a:25:91:06:
f4:c1:be:67:5d:68:2b:f5:a1:77:a1:2f:35:86:11:7a:0b:ef:
c2:84:fd:6b:27:64:54:cd:6b:d4:6e:de:e0:90:b3:73:76:53:
1f:22:f1:9a:ee:1e:6f:99:de:0f:16:4e:15:19:dd:ac:67:43:
57:ba:80:6a:6f:18:53:03:5d:c8:07:b8:13:f3:ad:c7:f1:dc:
7f:24:38:2e:0a:02:ea:6a:cb:a7:5b:2b:ab:2d:8d:17:c5:9d:
d3:71:d1:4d:7f:a6:c1:10:aa:30:22:2a:4f:ba:4b:6c:db:82:
59:c3:84:76:d8:e5:2a:d6:0e:3a:1a:6f:a3:91:a0:be:e6:06:
df:a6:25:9c:2f:44:91:38:6e:64:23:1c:38:6b:e3:45:e2:87:
7b:18:65:93:20:1a:40:ad:7d:c9:95:55:90:89:cd:be:f1:67:
ea:1a:49:b7:b6:b0:ca:90:ce:d3:6e:7a:21:59:ac:42:a0:fc:
48:0e:e4:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:27:37 2026 by rpki-client