Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
File: ni19W4LIN4uiFTlDzpSCzkzUlRs.mft (raw, json)
Hash identifier: 6HaiRCajRa6/GSH1vw4azlGeiTQfAIJaLALkJEgaWik=
Subject key identifier: D0:D2:C9:D7:79:55:1E:1C:F5:1E:4B:39:40:E4:48:E5:F2:46:7A:8F
Authority key identifier: 9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
Certificate issuer: /CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Certificate serial: 019D37523F2C877716CB19FCE9E4B8764403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
Manifest number: 1532
Signing time: Sun 29 Mar 2026 02:00:29 +0000
Manifest this update: Sun 29 Mar 2026 02:00:29 +0000
Manifest next update: Mon 30 Mar 2026 02:00:29 +0000
Files and hashes: 1: 3x25UG1jeSrv28neTIumkmoUEBk.roa (hash: u3bicrGhu9OYtfmX/kmGA/DVZrKN7GUP1+zhS7+9WWU=)
2: ni19W4LIN4uiFTlDzpSCzkzUlRs.crl (hash: 9x/LXrT6MxuGk8wEVXPiOqLCBQPx7Zi3DcytSWdoK8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:3f:2c:87:77:16:cb:19:fc:e9:e4:b8:76:44:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2d7d5b82c8378ba2153943ce9482ce4cd4951b
Validity
Not Before: Mar 29 02:00:29 2026 GMT
Not After : Mar 30 02:00:29 2026 GMT
Subject: CN=d0d2c9d779551e1cf51e4b3940e448e5f2467a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:6a:26:a5:ce:11:fc:4b:af:61:df:8d:b0:06:
72:02:66:45:7a:fa:7e:bf:af:e4:d1:ab:64:b4:f9:
94:9a:2f:b3:08:7a:3a:93:ba:01:7f:77:6a:bf:a6:
22:be:b0:05:9c:e2:3f:6b:7c:62:64:76:fc:de:6e:
08:72:5f:1e:6d:76:e9:60:f2:d5:6e:3f:d3:11:98:
6b:cc:8a:4a:9b:f6:3c:bb:f4:36:80:c2:89:75:21:
88:37:2b:94:db:31:16:cf:0c:69:de:cf:6a:e7:b3:
69:31:ea:90:78:37:60:58:8b:a5:55:a2:eb:2c:ea:
db:47:f9:e0:38:0a:72:0e:2c:68:0c:89:e1:3a:f9:
44:75:fe:79:23:4a:0a:82:55:b2:eb:2a:e0:87:ed:
e4:d8:7c:d5:91:cc:d5:4f:ca:24:ee:65:c6:83:7b:
af:01:1d:a2:7d:3e:d2:8b:f3:30:81:6a:04:1b:f4:
d5:50:e2:89:28:44:bf:64:de:b3:8c:fe:4e:5b:f6:
2b:a8:eb:03:98:55:13:b1:51:f6:fb:57:ae:c6:26:
93:45:ac:58:1c:ef:8f:c3:0f:7a:cc:dd:3c:fa:18:
d8:3b:c0:50:3a:a8:d6:91:3d:d2:09:55:e1:f4:ea:
6f:b3:0e:dd:93:31:8f:27:76:dd:c9:47:f7:54:f2:
8f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:D2:C9:D7:79:55:1E:1C:F5:1E:4B:39:40:E4:48:E5:F2:46:7A:8F
X509v3 Authority Key Identifier:
keyid:9E:2D:7D:5B:82:C8:37:8B:A2:15:39:43:CE:94:82:CE:4C:D4:95:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni19W4LIN4uiFTlDzpSCzkzUlRs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/ca8d98-e7a4-4bdc-8c90-b29606d51f9d/1/ni19W4LIN4uiFTlDzpSCzkzUlRs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:cc:56:3f:b5:78:42:e1:e8:90:f6:b9:6c:a5:23:b0:06:96:
2d:35:ac:48:ee:bb:23:4c:d0:b3:97:eb:cc:08:ac:42:aa:07:
b0:6b:fd:b7:46:05:21:32:4a:b7:93:13:be:fe:5a:22:c0:05:
88:66:b9:7f:79:e8:4f:05:90:50:2c:13:69:6f:6d:dc:bc:d0:
7b:e7:b9:31:d3:66:9a:31:be:10:69:7a:85:12:09:dd:6a:bc:
3b:06:6c:aa:68:9c:84:81:69:fc:a6:4b:89:62:b6:cc:91:fc:
87:5a:a2:04:0c:86:4a:40:2b:44:2a:26:4d:52:94:9d:45:d9:
14:97:2f:7a:be:7e:d9:59:52:16:42:ca:21:8f:21:4b:b3:2b:
68:0e:04:bf:df:73:b4:c3:68:f1:73:87:a8:b5:f2:00:fd:db:
1a:90:56:f3:13:dc:72:bb:ba:88:df:ec:77:fc:c6:6f:39:20:
1d:79:95:92:80:c7:e7:04:39:ad:bb:91:eb:dc:4f:91:ac:05:
2f:a3:d8:72:ac:51:42:75:65:ff:ef:32:8b:be:17:ac:75:6b:
d5:b3:ad:58:ea:75:f3:cc:df:b5:9e:f9:84:a6:87:4d:fa:4e:
fb:b7:fc:1d:b8:66:c1:5c:74:5f:50:89:bb:0d:86:8e:e2:7e:
51:34:41:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:30 2026 by rpki-client