Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
File: nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft (raw, json)
Hash identifier: qKfwd83KtL/qLcPbthZ7QgHABslgJFryQ/qYjf/bFl8=
Subject key identifier: 0C:2B:66:C0:F4:B2:0E:BE:F4:62:87:B8:4A:24:C8:20:3C:80:37:15
Authority key identifier: 9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
Certificate issuer: /CN=9c9fee03271b15c233a24589f2365a710d4352d7
Certificate serial: 019D389C29CD13CCA41ECB025C3338A8A3E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 08:00:51 +0000
Manifest this update: Sun 29 Mar 2026 08:00:51 +0000
Manifest next update: Mon 30 Mar 2026 08:00:51 +0000
Files and hashes: 1: N4O6L8wZNEXMElPASpRMOUmUr7w.roa (hash: QXAq/udQzlw3nbGli8BGmWpVXE2xd5fftRn8FB6H/Dc=)
2: nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl (hash: i/rGM+pCs0cDmQqxj/0rsGAGAfh7KejnnEpf3lq7t20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:29:cd:13:cc:a4:1e:cb:02:5c:33:38:a8:a3:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c9fee03271b15c233a24589f2365a710d4352d7
Validity
Not Before: Mar 29 08:00:51 2026 GMT
Not After : Mar 30 08:00:51 2026 GMT
Subject: CN=0c2b66c0f4b20ebef46287b84a24c8203c803715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:54:48:cb:3b:10:7e:c9:1c:8a:4d:bd:0e:da:
8c:4b:1d:5b:d5:80:b9:0d:13:3c:9a:0a:68:35:11:
4e:77:8f:a7:9f:8a:ba:8f:fc:9d:4d:fa:88:3d:cb:
c2:3b:87:65:0a:5c:0a:ee:52:67:3b:bf:64:35:fc:
bf:17:81:6e:3c:a3:ae:72:31:33:84:7f:d8:e0:96:
f1:22:d4:36:25:73:19:bc:7c:a8:18:44:d5:b8:86:
92:62:20:4a:87:d4:8e:05:08:7c:7f:e1:b6:ac:d9:
52:bc:b1:c9:6d:9b:1d:be:de:c4:ec:6c:74:2c:4c:
3e:f4:d6:cb:c8:8d:fe:14:65:7a:9a:84:8a:37:38:
da:8e:cf:49:b5:a3:7b:66:95:19:70:8c:fe:6c:0f:
83:bd:67:e4:3f:3a:29:63:14:aa:ae:1d:e0:8f:69:
a2:50:cc:45:5e:c6:25:33:4c:d0:84:1f:af:8f:db:
da:6e:4f:0c:78:e9:3e:59:08:5b:27:26:02:4a:a8:
c4:d1:69:16:49:6e:54:aa:cf:43:8a:3e:8d:01:ab:
b4:6b:74:0d:87:ce:10:a1:bd:28:75:25:51:cd:83:
04:15:ed:67:c1:1f:db:29:42:8e:2a:23:77:ca:f7:
cc:a3:1a:c4:b9:1c:10:e7:9e:8f:de:5f:47:ce:ce:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:2B:66:C0:F4:B2:0E:BE:F4:62:87:B8:4A:24:C8:20:3C:80:37:15
X509v3 Authority Key Identifier:
keyid:9C:9F:EE:03:27:1B:15:C2:33:A2:45:89:F2:36:5A:71:0D:43:52:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nJ_uAycbFcIzokWJ8jZacQ1DUtc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/dbc83e-4e42-4038-8157-8f99f9afd7a1/1/nJ_uAycbFcIzokWJ8jZacQ1DUtc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:e6:a8:f0:fd:11:f8:9e:34:8f:95:86:01:74:7d:da:3d:82:
a8:89:df:0a:8a:af:ab:41:e7:4a:70:26:b8:0b:c3:14:b8:82:
db:4d:02:f1:a4:3d:4b:36:4c:c5:b1:e9:86:a4:bb:38:03:c1:
6a:c7:9a:16:4b:1b:90:d5:04:fb:bc:ef:9f:f9:94:ed:0d:25:
d5:36:f3:8d:a0:67:e2:8f:d8:a9:cb:7b:05:52:f1:1d:53:8b:
c5:65:68:b8:e6:6d:34:db:d4:61:f4:b0:13:83:42:e5:d7:f0:
0a:0f:16:ae:b6:04:16:27:c6:ec:1a:7d:f2:1f:22:ec:31:6e:
6e:1f:51:81:d0:e9:4e:ee:20:ec:c5:7e:a0:65:77:20:1e:36:
c9:5b:5f:1a:dd:da:79:dd:3e:ce:69:1a:22:25:23:8b:88:70:
61:79:ec:b8:5f:0c:0b:00:64:bc:f4:af:7c:1a:ee:89:0d:f1:
13:15:53:85:ba:a7:81:c8:54:4a:ed:c3:dc:17:fc:b3:f4:a0:
98:70:8f:e2:b5:4e:38:e9:20:f7:72:48:cf:d6:19:2c:95:7a:
19:b6:24:07:cd:fa:f1:fb:be:da:84:dc:31:d4:17:02:a7:bc:
f6:0a:5f:bc:35:c2:05:19:b3:49:e1:4a:78:97:96:a9:32:51:
38:81:2a:cf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ04nCnNE8ykHssCXDM4qKPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljOWZlZTAzMjcxYjE1YzIzM2EyNDU4OWYyMzY1YTcxMGQ0
MzUyZDcwHhcNMjYwMzI5MDgwMDUxWhcNMjYwMzMwMDgwMDUxWjAzMTEwLwYDVQQD
EygwYzJiNjZjMGY0YjIwZWJlZjQ2Mjg3Yjg0YTI0YzgyMDNjODAzNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1RIyzsQfskcik29DtqMSx1b1YC5
DRM8mgpoNRFOd4+nn4q6j/ydTfqIPcvCO4dlClwK7lJnO79kNfy/F4FuPKOucjEz
hH/Y4JbxItQ2JXMZvHyoGETVuIaSYiBKh9SOBQh8f+G2rNlSvLHJbZsdvt7E7Gx0
LEw+9NbLyI3+FGV6moSKNzjajs9JtaN7ZpUZcIz+bA+DvWfkPzopYxSqrh3gj2mi
UMxFXsYlM0zQhB+vj9vabk8MeOk+WQhbJyYCSqjE0WkWSW5Uqs9Dij6NAau0a3QN
h84Qob0odSVRzYMEFe1nwR/bKUKOKiN3yvfMoxrEuRwQ556P3l9Hzs7KCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAwrZsD0sg6+9GKHuEokyCA8gDcVMB8GA1UdIwQY
MBaAFJyf7gMnGxXCM6JFifI2WnENQ1LXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTct
OGY5OWY5YWZkN2ExLzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy9kYmM4M2UtNGU0Mi00MDM4LTgxNTctOGY5OWY5YWZkN2Ex
LzEvbkpfdUF5Y2JGY0l6b2tXSjhqWmFjUTFEVXRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApeao8P0R
+J40j5WGAXR92j2CqInfCoqvq0HnSnAmuAvDFLiC200C8aQ9SzZMxbHphqS7OAPB
aseaFksbkNUE+7zvn/mU7Q0l1TbzjaBn4o/Yqct7BVLxHVOLxWVouOZtNNvUYfSw
E4NC5dfwCg8WrrYEFifG7Bp98h8i7DFubh9RgdDpTu4g7MV+oGV3IB42yVtfGt3a
ed0+zmkaIiUji4hwYXnsuF8MCwBkvPSvfBruiQ3xExVThbqngchUSu3D3Bf8s/Sg
mHCP4rVOOOkg93JIz9YZLJV6GbYkB8368fu+2oTcMdQXAqe89gpfvDXCBRmzSeFK
eJeWqTJROIEqzw==
-----END CERTIFICATE-----
Generated at Sun Mar 29 13:44:17 2026 by rpki-client