Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
File: 8NnLvv3mEuYeDND_C4cZYcv3l-M.mft (raw, json)
Hash identifier: kOZ+1JZcOmcNNAD0RKzjSvmib43noXGv14s2bfXadK0=
Subject key identifier: 11:54:D3:BF:EC:10:AE:9B:09:9A:BC:C6:2A:66:E8:24:C8:DA:C5:86
Authority key identifier: F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
Certificate issuer: /CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Certificate serial: 019D389BAEF29B1B1DA96CA6CE9103B92C2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
Manifest number: 097C
Signing time: Sun 29 Mar 2026 08:00:19 +0000
Manifest this update: Sun 29 Mar 2026 08:00:19 +0000
Manifest next update: Mon 30 Mar 2026 08:00:19 +0000
Files and hashes: 1: 0y3BSLlk43QtrfUoNgk-X73r4Lw.roa (hash: tEO4G8BHLgq+raaH5EwqIJrUEIOFZC3cQgG+JNY95JI=)
2: 8NnLvv3mEuYeDND_C4cZYcv3l-M.crl (hash: l0zM73mv6GxVUwjNdMbTeQoC09Dh2FcdlFRoXg2I3mY=)
3: _p7le5gIIWbAoXoedbYiYmj5NdE.roa (hash: CNMW3XBWI+i2aIdqqxnzyTpertxlov4CAJZZ/pSHhYM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:ae:f2:9b:1b:1d:a9:6c:a6:ce:91:03:b9:2c:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f0d9cbbefde612e61e0cd0ff0b871961cbf797e3
Validity
Not Before: Mar 29 08:00:19 2026 GMT
Not After : Mar 30 08:00:19 2026 GMT
Subject: CN=1154d3bfec10ae9b099abcc62a66e824c8dac586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:7e:20:3e:1e:4d:96:19:c3:9a:6c:f2:3f:a7:
8f:36:ac:0a:41:4e:0d:a5:d4:d5:71:77:08:ad:54:
e1:ae:f5:3f:56:85:95:80:fe:db:90:3d:ed:b7:ea:
13:57:1a:e9:2d:38:a5:be:d7:5f:ee:1b:08:a0:b9:
70:3c:82:10:e8:3b:a3:7a:01:5d:04:d3:7f:29:29:
32:e9:15:cf:74:60:aa:b8:d2:d6:59:4a:27:65:9b:
95:9a:8a:e8:bd:b6:40:82:c3:21:50:9d:80:4a:61:
8c:18:5d:06:29:6c:dc:91:33:ab:87:f7:a8:67:b8:
ef:c4:b5:17:89:7a:8e:a2:64:4c:3f:c4:4a:9b:26:
bf:d7:9f:54:53:52:9a:56:25:27:c2:e7:a6:6f:bb:
34:93:68:0e:8c:10:a7:5c:7b:5d:ed:07:5b:31:d0:
22:d5:dc:5e:2b:63:20:d1:0c:65:a5:cc:a7:35:cf:
bb:13:64:73:9a:a5:38:02:27:37:5c:24:a3:c9:c3:
67:cf:90:b6:a3:c0:2c:76:b7:07:7c:e7:ec:58:25:
6e:96:14:9c:e4:c7:c2:5f:ad:bf:c3:80:c5:a9:be:
d9:ae:1a:76:59:fc:16:93:4c:7c:df:7d:80:4c:85:
ea:d6:46:7e:df:e7:2f:00:03:f8:c4:75:37:ea:30:
54:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:54:D3:BF:EC:10:AE:9B:09:9A:BC:C6:2A:66:E8:24:C8:DA:C5:86
X509v3 Authority Key Identifier:
keyid:F0:D9:CB:BE:FD:E6:12:E6:1E:0C:D0:FF:0B:87:19:61:CB:F7:97:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8NnLvv3mEuYeDND_C4cZYcv3l-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/49969e-546c-43e5-8dbd-f92915a968bc/1/8NnLvv3mEuYeDND_C4cZYcv3l-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:49:7e:56:d6:1c:25:44:f9:15:d8:eb:f5:ad:78:f1:3b:39:
97:99:d3:29:af:0b:c0:b3:ab:78:e2:c9:49:8b:3d:0b:05:80:
82:7a:7c:c4:94:8e:69:7d:e9:7e:a9:9a:2c:05:4e:70:d0:71:
96:64:a4:31:45:c6:13:16:cb:f4:cf:50:7c:cd:90:93:87:35:
e4:cb:c8:42:4e:89:27:13:66:85:74:c7:fb:7e:82:2d:cf:15:
4c:d6:e4:37:07:8e:d7:f8:34:70:b9:a4:2d:bf:57:a7:56:4c:
85:9a:3d:56:52:e4:bd:9a:83:e8:55:ed:f1:e1:32:86:2f:6c:
e7:5c:20:4d:b9:ef:4a:b5:ae:cd:4e:55:28:71:6c:eb:79:62:
77:07:9c:59:97:d4:c2:2a:6c:6e:d2:78:28:48:a7:54:2f:ac:
68:ed:97:f9:96:a9:ba:42:5c:9b:a5:34:ac:9e:a6:79:a2:2e:
27:ec:16:fe:38:a2:70:64:39:fd:ab:1b:9f:5c:76:e7:7a:f2:
d3:fe:c9:b1:51:12:cd:42:b3:ae:7f:01:4d:5b:e7:e7:8e:f0:
97:18:2c:94:42:a0:5f:4f:c6:b2:48:d3:9f:46:c1:14:9e:b1:
7f:1c:8b:5e:87:c8:85:86:90:5e:24:dc:4d:9a:35:42:77:c7:
5f:af:5b:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:04 2026 by rpki-client