Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
File: n9aPGyQUI9qXZHuZIkUwOG0laYw.mft (raw, json)
Hash identifier: 71pZOAjpmADQJ7QkRnt12OpAbtZKnp3VRK8UcyBf3eY=
Subject key identifier: 93:2C:54:74:5C:31:0E:14:EE:78:E4:59:AE:23:A1:32:A6:BF:2F:07
Authority key identifier: 9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
Certificate issuer: /CN=9fd68f1b241423da97647b99224530386d25698c
Certificate serial: 019D371B7B60DE439DD676076CB3E936FFAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
Manifest number: 188F
Signing time: Sun 29 Mar 2026 01:00:41 +0000
Manifest this update: Sun 29 Mar 2026 01:00:41 +0000
Manifest next update: Mon 30 Mar 2026 01:00:41 +0000
Files and hashes: 1: n9aPGyQUI9qXZHuZIkUwOG0laYw.crl (hash: NyXOi7bqjhfv5FIO30NLeHrCEQW5YLP2wkgxQIacuuM=)
2: yfiieDo9iLegYVxPGWv16UQ43As.roa (hash: SYrqg0nXFiIlwOea5YRswLpoCOBeZ7BwjysKy4Ug6lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:7b:60:de:43:9d:d6:76:07:6c:b3:e9:36:ff:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd68f1b241423da97647b99224530386d25698c
Validity
Not Before: Mar 29 01:00:41 2026 GMT
Not After : Mar 30 01:00:41 2026 GMT
Subject: CN=932c54745c310e14ee78e459ae23a132a6bf2f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:2f:39:59:3c:d7:f6:af:be:77:9d:43:a0:02:
6c:de:74:e3:ed:e1:b5:5a:74:1c:50:14:d3:c4:42:
0c:a6:2a:39:32:6d:b3:fb:11:18:fc:9e:81:ea:76:
9a:19:e8:7f:fa:b7:06:6d:77:de:7f:02:41:de:eb:
2d:08:f4:6f:6a:6d:a8:de:46:8d:a9:ed:84:c2:5c:
39:b2:fd:9d:98:3d:9d:3f:8c:c7:af:c1:e6:18:df:
99:55:ea:6d:44:e9:48:ca:69:7f:05:87:b6:38:d2:
da:45:5b:f3:06:12:2d:5d:ba:f8:79:db:99:4c:60:
57:94:4c:6f:25:11:10:d5:6a:e8:d2:6f:7e:1c:7e:
90:22:51:6e:66:ef:04:fd:d8:21:0d:00:80:74:51:
5a:da:c6:f8:2c:ab:28:c1:49:7f:50:f2:88:73:ff:
1a:70:c2:a6:3a:4b:43:cf:40:a0:8e:c7:18:9b:e4:
71:8f:f6:2a:53:50:bf:05:1f:af:4e:1c:73:fd:e8:
7c:ec:59:62:e0:67:9f:6c:8f:4b:21:d2:f5:43:5a:
9c:01:96:08:81:40:67:73:6b:85:84:e3:76:a7:23:
c7:29:6e:5d:1b:1e:9a:c7:b7:ab:bf:e7:14:bc:61:
c4:f6:1d:76:42:a9:59:87:6f:9e:20:eb:98:e0:a5:
48:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:2C:54:74:5C:31:0E:14:EE:78:E4:59:AE:23:A1:32:A6:BF:2F:07
X509v3 Authority Key Identifier:
keyid:9F:D6:8F:1B:24:14:23:DA:97:64:7B:99:22:45:30:38:6D:25:69:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9aPGyQUI9qXZHuZIkUwOG0laYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/35dee5-d8db-48e3-b7bb-0810d16bcc87/1/n9aPGyQUI9qXZHuZIkUwOG0laYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:f2:22:e3:37:bf:7b:d1:7a:f8:03:1f:1b:36:d5:1d:70:5c:
03:85:ff:88:72:b2:3f:fd:20:9d:c7:d3:8c:3e:5c:a5:1e:eb:
12:5a:20:ee:a1:42:10:e8:37:a5:51:8e:4c:2a:3d:77:aa:1f:
eb:bd:ff:a2:f8:16:88:ef:08:92:13:bb:92:c0:44:57:6f:a8:
8b:a5:98:87:05:20:5d:95:e4:d5:42:9c:01:6f:84:9d:c0:a5:
4a:69:35:40:e8:d9:7a:10:bb:ff:de:97:a4:54:40:12:99:c5:
d3:d9:e3:ae:7c:b9:34:b8:d4:dd:0a:0f:a3:76:1f:71:54:78:
dd:b1:b7:3e:74:5c:ad:09:75:e2:68:94:d0:1a:2a:c8:b7:ed:
d8:72:0e:c6:b3:45:7e:f7:00:8c:7e:ab:45:08:52:7d:be:a8:
46:43:3b:99:c5:ce:0a:21:eb:dc:0b:6b:83:17:09:4b:6a:d8:
ca:1d:5c:a1:2f:f8:2a:e6:41:25:ee:95:5d:14:03:9d:8d:6d:
d9:1b:46:f1:4f:56:90:66:c4:94:cd:23:3d:3c:96:ed:f5:67:
69:4b:ed:ff:e3:c1:b8:4d:d5:fb:d8:76:ca:61:66:8f:6d:53:
2c:ad:c0:0f:c7:3f:25:29:24:2c:8a:7b:3e:0a:b5:d3:36:3b:
28:21:f4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:17 2026 by rpki-client