Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: 25BKt9wCYNA675BMxlBqrXmPb0RMsn3En0lUMm0SyFI=
Subject key identifier: E8:45:9A:4A:74:1E:AB:1F:D4:B9:5E:1C:3F:78:D2:79:18:82:D2:3A
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 019E4F584EB11DFB6747E2735CEB9D5CC9FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0EA4
Signing time: Fri 22 May 2026 11:00:47 +0000
Manifest this update: Fri 22 May 2026 11:00:47 +0000
Manifest next update: Sat 23 May 2026 11:00:47 +0000
Files and hashes: 1: jkMi5Y3UFgCK0cn1sZkX8r-KP9c.roa (hash: EXEli+Wg6YA+EC4JraUO/Ed+rqcKD/n9lm13wWOUAkY=)
2: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: wsVovFjSFW9mZsGQpSx/Xkk/m4YlSdJ+Y9LKk5LC/xo=)
3: ssMCTs8bK6eFQagUc6XQvNNJt9M.roa (hash: Ez0nES5Job0wKRYCfXv+7ubsmfBER3A3sxP8nRIZ91Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:58:4e:b1:1d:fb:67:47:e2:73:5c:eb:9d:5c:c9:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: May 22 11:00:47 2026 GMT
Not After : May 23 11:00:47 2026 GMT
Subject: CN=e8459a4a741eab1fd4b95e1c3f78d2791882d23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:34:ac:6a:a6:dc:85:a6:b6:48:64:89:4c:aa:
b0:b2:cb:58:20:cb:66:ed:43:08:ec:a0:ea:b8:f8:
92:10:3d:44:ed:0e:3c:7f:68:99:f5:4f:59:50:29:
6a:fb:c8:e2:67:04:08:f8:2a:69:f3:57:6e:85:59:
ca:84:38:1e:32:8b:8a:9e:ca:2d:16:43:98:fe:e7:
40:54:68:d3:b8:63:09:a9:44:ed:7c:c7:cd:55:ea:
db:37:df:1a:6a:29:af:7f:f3:d4:5a:ef:c2:7c:62:
bb:ce:50:e9:3a:e9:35:8e:ab:37:ae:71:86:25:09:
b1:9a:ca:5b:20:8d:f6:fe:06:0f:e7:0c:69:f6:06:
2a:05:ce:ee:6e:78:f5:1e:4a:20:e5:af:c7:ff:78:
cb:25:1f:df:78:be:20:c9:65:71:83:4c:fd:be:92:
10:6b:af:f6:4f:cb:15:3e:b1:fa:0a:6e:2a:da:e3:
6d:f8:4c:65:4c:09:d4:55:83:db:bc:a6:1f:45:28:
12:e6:82:4c:60:6e:6b:5a:a7:51:53:43:a8:78:8b:
59:e6:45:7c:df:67:98:0c:a1:1d:6e:9f:3b:17:3c:
5b:e2:48:fd:fd:d6:eb:f4:76:e0:9d:50:47:ad:f2:
ef:f9:14:4f:ef:67:d4:9c:39:f2:53:6c:22:46:09:
9c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:45:9A:4A:74:1E:AB:1F:D4:B9:5E:1C:3F:78:D2:79:18:82:D2:3A
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:ea:78:d7:8c:de:2a:78:5f:0e:48:97:66:0f:74:22:bc:31:
ae:6b:b2:fd:fc:36:3b:63:b9:59:d6:96:32:24:8a:cf:aa:4c:
92:9c:c0:d6:16:a2:66:61:2b:08:cd:5d:8d:d8:4e:bb:65:0b:
ae:2e:fc:3c:bc:9e:da:f1:06:de:fd:4d:1b:a7:ef:2e:18:3f:
24:a0:6d:12:0a:a0:93:7d:62:d2:37:9e:70:27:d5:08:ed:b8:
e6:56:d3:7e:af:16:27:24:53:81:be:27:0c:63:81:d3:dc:ad:
c7:73:64:09:fe:e6:73:66:2e:f8:d3:e2:c4:a3:2c:c7:55:0b:
b4:eb:1f:79:87:83:8b:87:c2:1c:94:6f:05:98:dd:05:2d:79:
4b:f0:89:4f:88:e3:49:c6:20:6b:1b:c1:1d:f3:34:42:2e:da:
0c:5a:98:f9:05:81:66:7b:1c:2c:54:aa:c5:bc:bd:99:02:44:
d2:ce:85:ec:59:79:65:6b:61:01:de:95:d4:1e:ce:b9:d2:e2:
23:0a:67:8c:be:cd:ef:56:88:8b:b7:9d:01:f6:1a:f6:31:b3:
77:0c:8c:fc:b3:1f:26:09:a2:7f:fe:b0:c3:4e:1d:0b:a5:38:
b6:2e:92:e0:c0:a3:58:01:bd:97:9c:80:46:cd:0a:1d:20:79:
33:3f:b8:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:11:51 2026 by rpki-client