Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
File: n8IY9nJDtH2gIf2j_rRBR0s865Q.mft (raw, json)
Hash identifier: ImxAuYBEGvT61l1kv3EG16GINDoXQq/9yz9lPiwLkhM=
Subject key identifier: C0:18:B1:B6:41:B4:2A:7C:E1:05:E7:44:8E:C5:F1:C0:00:E5:37:CD
Authority key identifier: 9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
Certificate issuer: /CN=9fc218f67243b47da021fda3feb441474b3ceb94
Certificate serial: 019D390A147DBBE15F65D4F96D3C21BD5417
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 10:00:54 +0000
Manifest this update: Sun 29 Mar 2026 10:00:54 +0000
Manifest next update: Mon 30 Mar 2026 10:00:54 +0000
Files and hashes: 1: 4Cj0ydwfUPWxDIhUikHdLylv8JE.roa (hash: IVa5qWxh3J0W1FFzGjktQttQcJXOtRqBcHHVa+F05a4=)
2: n8IY9nJDtH2gIf2j_rRBR0s865Q.crl (hash: T0ofp0bA3daRdJhjSPE7ziZmsHw9cKbDoFEPMpkZTpA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:14:7d:bb:e1:5f:65:d4:f9:6d:3c:21:bd:54:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc218f67243b47da021fda3feb441474b3ceb94
Validity
Not Before: Mar 29 10:00:54 2026 GMT
Not After : Mar 30 10:00:54 2026 GMT
Subject: CN=c018b1b641b42a7ce105e7448ec5f1c000e537cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:f1:38:8a:f5:af:4b:88:7c:81:ba:27:dc:ad:
f7:07:64:4e:e5:9d:81:69:33:fe:56:2d:7b:c1:3c:
80:50:a4:bc:91:2b:c1:2e:d9:54:73:0b:4e:48:5b:
a6:f5:c5:04:cf:c7:6c:dc:d4:b4:b9:ae:a3:f3:18:
95:07:95:b8:51:9c:86:70:6a:e0:fc:b3:69:86:cc:
f4:6f:55:31:b2:1d:48:3b:0e:f8:c5:e9:d6:aa:d8:
81:93:ab:cc:5a:c2:6f:28:b5:06:9f:04:69:f7:67:
23:cf:52:a7:3d:d1:d9:f7:25:c5:2b:e8:cf:19:20:
a7:36:df:c9:38:07:49:79:3b:a2:f5:5f:0a:08:fb:
ef:7a:49:21:e6:ca:89:da:e2:25:b9:58:eb:58:7c:
dd:32:11:02:25:96:e5:2c:2d:2e:de:84:fd:a9:3e:
6d:9b:af:16:58:22:95:4d:d5:6d:c3:6a:89:2c:ce:
24:1a:a6:f1:b6:1d:b0:e1:f8:8c:45:4b:2f:fe:86:
2f:0b:5f:29:94:c0:c0:c3:44:35:0e:e8:73:55:53:
63:1e:75:9a:8b:9f:75:8f:c9:80:b5:a0:5b:55:a3:
b2:37:af:33:6d:7c:44:79:c0:a7:27:d4:9c:f4:fc:
10:6e:b7:0f:58:eb:d4:37:56:21:d4:4c:42:23:0a:
2f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:18:B1:B6:41:B4:2A:7C:E1:05:E7:44:8E:C5:F1:C0:00:E5:37:CD
X509v3 Authority Key Identifier:
keyid:9F:C2:18:F6:72:43:B4:7D:A0:21:FD:A3:FE:B4:41:47:4B:3C:EB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8IY9nJDtH2gIf2j_rRBR0s865Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/67aae2-c8fc-4ad0-bc60-def9b2e2dfd3/1/n8IY9nJDtH2gIf2j_rRBR0s865Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:39:2e:ac:57:fa:cc:e7:9a:cd:31:96:3f:fd:8f:36:13:0e:
fb:e5:37:74:08:92:7d:50:87:5f:33:55:3c:bc:1c:71:bb:83:
17:0b:5b:e8:dd:31:c8:f3:bd:11:a7:21:bd:4c:f3:2b:9f:69:
ad:3f:4a:90:65:d4:19:36:fd:02:9d:dc:4b:2a:65:4c:e2:58:
f6:78:4c:2a:9a:c1:ae:4b:8b:a5:4c:de:01:ca:ff:04:0d:c5:
d1:db:a3:d6:be:e5:9a:d7:30:a0:e7:6c:ae:ef:9d:43:d9:5f:
e2:84:bd:ee:74:ed:d5:42:76:11:53:29:99:32:48:ed:9c:25:
71:ca:df:9c:62:0a:5b:26:0f:cc:0f:cd:ac:4f:0f:5c:fe:9b:
2f:2e:6e:17:82:93:ef:dc:78:43:ee:13:9c:c3:88:c0:62:3f:
2d:e4:43:82:eb:b5:a0:68:72:22:77:97:d2:e5:9d:0d:82:88:
58:03:ff:01:ed:99:f4:ef:cd:b1:18:7b:d9:49:42:64:2b:c3:
05:f2:ad:f5:2e:12:d2:01:97:f5:5a:bf:70:f8:d3:28:89:ca:
ee:e0:10:ba:f5:d5:44:72:13:f8:41:b2:d9:7b:6b:a9:ef:5c:
49:94:4b:5d:54:a7:e6:4f:13:d2:53:b2:a4:ee:64:28:c3:f2:
77:cc:b9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:54 2026 by rpki-client