Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
File: n15P8s7k23qVvPKjrRHJR1dbsaY.mft (raw, json)
Hash identifier: HlDy/KNFzEbcwsgAitfGncQCzG+4AcoXjKOO/+BzKfQ=
Subject key identifier: C0:4E:80:D5:9A:26:41:D7:A5:05:C5:3C:E5:87:CD:2F:2C:06:0F:49
Authority key identifier: 9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
Certificate issuer: /CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Certificate serial: 01A020C3212AC2C0D9B692B0E09153BFF018
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
Manifest number: 0F95
Signing time: Thu 20 Aug 2026 20:00:53 +0000
Manifest this update: Thu 20 Aug 2026 20:00:53 +0000
Manifest next update: Fri 21 Aug 2026 20:00:53 +0000
Files and hashes: 1: jkMi5Y3UFgCK0cn1sZkX8r-KP9c.roa (hash: EXEli+Wg6YA+EC4JraUO/Ed+rqcKD/n9lm13wWOUAkY=)
2: n15P8s7k23qVvPKjrRHJR1dbsaY.crl (hash: He2D82iT7Sgme1Je8JgnP37N1NwyWry3dg+p7RWWKpU=)
3: ssMCTs8bK6eFQagUc6XQvNNJt9M.roa (hash: Ez0nES5Job0wKRYCfXv+7ubsmfBER3A3sxP8nRIZ91Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:c3:21:2a:c2:c0:d9:b6:92:b0:e0:91:53:bf:f0:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5e4ff2cee4db7a95bcf2a3ad11c947575bb1a6
Validity
Not Before: Aug 20 20:00:53 2026 GMT
Not After : Aug 21 20:00:53 2026 GMT
Subject: CN=c04e80d59a2641d7a505c53ce587cd2f2c060f49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:7b:a1:36:29:54:88:4c:17:d8:4a:22:d7:4e:
c4:d8:30:9b:42:14:30:92:10:ba:77:30:a5:e8:85:
ea:09:9a:c4:6e:c9:d5:08:29:67:6c:c8:7e:bb:40:
70:26:91:1c:94:f0:90:a2:49:75:19:52:c5:15:7f:
79:1c:55:b8:27:f9:3f:1a:dc:82:dc:3a:cd:8c:d3:
22:bb:20:1f:ea:4b:ab:eb:04:79:c0:89:67:aa:41:
1e:14:87:cf:b2:7f:7a:a8:c2:ed:68:37:62:29:11:
f8:de:d5:99:b7:22:df:54:ce:f1:18:58:dc:a1:b6:
3c:bc:64:ec:b4:c4:60:97:9b:ee:91:ee:d9:d4:ab:
21:d3:4f:4e:10:58:50:51:14:28:e5:64:ea:66:73:
e3:40:f3:be:5e:6d:21:75:9e:6d:76:75:d5:3b:fa:
d9:67:81:5f:77:6f:38:d1:2d:05:fb:3c:32:a0:b2:
a2:a6:a1:a7:b1:e8:90:cc:af:cc:56:02:e8:16:bb:
30:c5:bd:f8:d0:19:7a:42:70:90:f5:0e:e2:75:e5:
bd:0b:06:36:b6:7a:23:44:67:71:c2:54:7e:44:8b:
c0:6a:87:2a:c2:c4:4b:0a:38:43:c2:5c:50:f2:55:
ad:aa:e5:5d:9c:a3:c5:7b:2b:14:2d:9f:9c:0c:2d:
2b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:4E:80:D5:9A:26:41:D7:A5:05:C5:3C:E5:87:CD:2F:2C:06:0F:49
X509v3 Authority Key Identifier:
keyid:9F:5E:4F:F2:CE:E4:DB:7A:95:BC:F2:A3:AD:11:C9:47:57:5B:B1:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n15P8s7k23qVvPKjrRHJR1dbsaY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/18bb5f-9076-42fa-9f8f-33b8c1f7d127/1/n15P8s7k23qVvPKjrRHJR1dbsaY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:68:53:7c:ee:39:f6:60:c7:64:40:5e:6e:ea:d4:5d:5e:
93:74:11:4d:f8:4c:d3:2e:ff:31:a3:89:61:9f:ab:d3:52:cd:
4c:a3:da:28:fd:81:04:a6:3c:e7:55:6b:8c:79:07:43:ca:91:
5a:72:3d:32:3a:af:d6:f7:2d:be:66:4a:97:e5:1f:46:2c:02:
7e:eb:d7:fd:04:8e:05:9c:07:6b:66:4e:64:28:2f:56:5a:60:
18:9c:39:29:d3:2b:d9:b4:b4:30:df:81:1a:3d:81:e4:e3:98:
91:63:37:09:61:b9:5f:d3:10:50:33:b2:5e:d1:ac:3d:4a:6c:
d3:b9:7b:f4:31:55:8c:49:cb:69:a5:1e:e6:44:94:27:55:61:
e1:7c:dd:b6:ff:b4:8f:80:49:89:e4:71:74:70:be:a9:80:18:
b0:ab:7f:ee:ef:93:20:d3:0d:8a:da:45:92:ea:ea:67:96:11:
bd:cf:48:de:09:39:af:dc:15:dc:36:0c:65:5d:3a:06:ad:ec:
49:21:8f:73:06:61:a6:30:25:43:09:14:71:d9:cb:3b:f8:3b:
f0:f4:be:66:b4:82:f5:3b:99:01:07:47:aa:d8:c3:58:89:d0:
3a:b8:14:8e:90:3e:77:aa:aa:b1:4d:18:fa:25:1e:1b:bc:98:
77:da:ed:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaAgwyEqwsDZtpKw4JFTv/AYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWU0ZmYyY2VlNGRiN2E5NWJjZjJhM2FkMTFjOTQ3NTc1
YmIxYTYwHhcNMjYwODIwMjAwMDUzWhcNMjYwODIxMjAwMDUzWjAzMTEwLwYDVQQD
EyhjMDRlODBkNTlhMjY0MWQ3YTUwNWM1M2NlNTg3Y2QyZjJjMDYwZjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXuhNilUiEwX2Eoi107E2DCbQhQw
khC6dzCl6IXqCZrEbsnVCClnbMh+u0BwJpEclPCQokl1GVLFFX95HFW4J/k/GtyC
3DrNjNMiuyAf6kur6wR5wIlnqkEeFIfPsn96qMLtaDdiKRH43tWZtyLfVM7xGFjc
obY8vGTstMRgl5vuke7Z1Ksh009OEFhQURQo5WTqZnPjQPO+Xm0hdZ5tdnXVO/rZ
Z4Ffd2840S0F+zwyoLKipqGnseiQzK/MVgLoFrswxb340Bl6QnCQ9Q7ideW9CwY2
tnojRGdxwlR+RIvAaocqwsRLCjhDwlxQ8lWtquVdnKPFeysULZ+cDC0r3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMBOgNWaJkHXpQXFPOWHzS8sBg9JMB8GA1UdIwQY
MBaAFJ9eT/LO5Nt6lbzyo60RyUdXW7GmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjE1UDhzN2syM3FWdlBLanJSSEpSMWRic2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8xOGJiNWYtOTA3Ni00MmZhLTlmOGYt
MzNiOGMxZjdkMTI3LzEvbjE1UDhzN2syM3FWdlBLanJSSEpSMWRic2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8xOGJiNWYtOTA3Ni00MmZhLTlmOGYtMzNiOGMxZjdkMTI3
LzEvbjE1UDhzN2syM3FWdlBLanJSSEpSMWRic2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMFloU3zu
OfZgx2RAXm7q1F1ek3QRTfhM0y7/MaOJYZ+r01LNTKPaKP2BBKY851VrjHkHQ8qR
WnI9Mjqv1vctvmZKl+UfRiwCfuvX/QSOBZwHa2ZOZCgvVlpgGJw5KdMr2bS0MN+B
Gj2B5OOYkWM3CWG5X9MQUDOyXtGsPUps07l79DFVjEnLaaUe5kSUJ1Vh4Xzdtv+0
j4BJieRxdHC+qYAYsKt/7u+TINMNitpFkurqZ5YRvc9I3gk5r9wV3DYMZV06Bq3s
SSGPcwZhpjAlQwkUcdnLO/g78PS+ZrSC9TuZAQdHqtjDWInQOrgUjpA+d6qqsU0Y
+iUeG7yYd9rtwA==
-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:11 2026 by rpki-client