Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
File: n5D0diDPsoZkkPXRGL0lpQBTEeY.mft (raw, json)
Hash identifier: wJcljHx+hF5ueVBUoblMBFxxH47ZU1tHX2VzJ5OCol4=
Subject key identifier: 1A:67:5B:B0:DB:5E:6F:9B:70:F2:3C:29:CD:6D:B8:72:03:2B:29:8D
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 01A08C7B961FE09061E14B83C24E57C5886D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
Manifest number: C2
Signing time: Thu 10 Sep 2026 18:01:44 +0000
Manifest this update: Thu 10 Sep 2026 18:01:44 +0000
Manifest next update: Fri 11 Sep 2026 18:01:44 +0000
Files and hashes: 1: Qk8SUDtv35PQudBghJLMDCkV05Y.roa (hash: CGtXCN1Ppc2jLH4a4E4mJ8Yb24I37XQwBgJ85+uhimE=)
2: VLazWnEoP4FNqXwAq5qItoa84gg.roa (hash: GIpN7+SpErb0kVRnHT1vQxVl+Mf313Qjqs5dCJFjsZA=)
3: n5D0diDPsoZkkPXRGL0lpQBTEeY.crl (hash: cgg+cVbAP4dZWAqmp3myV3JcrekGEes/Gakpin2ccc4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:7b:96:1f:e0:90:61:e1:4b:83:c2:4e:57:c5:88:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Sep 10 18:01:44 2026 GMT
Not After : Sep 11 18:01:44 2026 GMT
Subject: CN=1a675bb0db5e6f9b70f23c29cd6db872032b298d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:ea:18:cd:43:f9:bc:c4:c0:84:96:6a:9f:
a3:f8:97:99:55:34:4f:78:b2:c4:4e:01:76:a0:68:
15:4b:b5:45:d0:67:c6:86:8d:87:8f:c1:a6:13:ad:
09:9b:37:5f:e9:87:39:51:18:a4:81:de:6c:82:29:
b2:1b:89:08:b4:14:f8:d2:c8:37:1b:ab:56:7f:f7:
86:f5:58:a5:55:81:67:db:bf:6a:a8:96:1f:ba:81:
69:85:fb:40:d2:09:a7:45:83:c1:4a:e0:0b:ea:90:
e3:50:10:0d:67:b9:a8:c2:a1:98:0c:98:37:44:0c:
57:96:c0:79:4c:bb:13:bb:2d:1b:c0:d3:ff:88:cb:
c8:f4:d5:67:73:d0:a2:2c:30:a4:0c:19:ec:b2:c7:
28:d3:b5:12:27:2b:58:3b:83:7f:1d:f1:1a:a5:91:
ee:6c:1a:1e:84:58:c1:81:f3:61:38:d0:fc:78:17:
c1:bf:57:c0:25:7c:5e:28:73:80:9d:36:e2:e3:9a:
f4:1a:b6:14:2a:88:fa:7c:7a:f0:7e:a1:be:79:da:
19:9c:56:a8:1e:bf:f1:45:13:16:2c:00:f3:f9:40:
ff:95:20:4f:9e:ff:ac:d4:ac:68:d4:d5:69:47:07:
4b:2c:39:de:ac:43:71:c2:0b:3a:81:52:3e:71:df:
eb:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:67:5B:B0:DB:5E:6F:9B:70:F2:3C:29:CD:6D:B8:72:03:2B:29:8D
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:50:77:b3:23:7f:c2:e7:ed:e7:f4:34:b7:e9:0b:85:96:7b:
4a:d1:fe:04:ac:f7:13:0a:bc:1c:2a:8e:a4:6e:07:a0:f8:a4:
6d:9e:26:7a:76:c8:24:f1:6c:bf:8c:8d:9f:0d:be:87:6e:85:
96:f1:49:bd:60:b9:94:22:84:6d:34:2e:d3:23:1d:8c:05:e1:
63:05:33:6a:f4:d4:c6:46:57:58:04:c2:b0:8c:c3:25:ce:c1:
a5:d5:1c:eb:a4:a1:c0:37:ad:b6:4b:72:a2:75:cd:ba:b4:7b:
80:ad:86:80:0d:78:2f:e8:de:21:7c:b9:0c:bd:25:c7:fc:fb:
dd:f7:78:85:d8:76:46:93:70:16:5d:b9:f5:c1:08:17:99:f7:
ae:98:fd:f6:63:76:c6:9a:d2:47:e7:e9:e3:9b:0b:00:d8:e8:
44:f7:37:86:9d:90:c8:df:86:65:e0:f6:ba:56:78:3b:85:04:
45:d4:4d:d6:d7:e4:d1:bc:b4:84:96:4d:09:8c:74:75:38:24:
a2:9c:d6:b3:e1:bc:01:78:98:93:b4:19:c0:7f:3d:3c:2f:c5:
b7:cf:81:18:11:f9:fb:8c:3e:a8:c9:67:80:a5:ba:34:80:c0:
a2:4c:68:62:62:43:c0:1d:e0:99:e6:96:71:89:a7:ee:14:0a:
af:15:23:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 21:12:40 2026 by rpki-client