Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
File: ni6I9QfNLq27IyyGT3Htum7LXaA.mft (raw, json)
Hash identifier: SnQa0REObT2/hvV1PUoZowaiTe/5PbFIyxudrgw23K8=
Subject key identifier: 2F:25:11:02:E5:01:E4:00:06:4F:A4:3C:23:AB:7B:8F:5E:87:44:11
Authority key identifier: 9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
Certificate issuer: /CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Certificate serial: 019D3940A05F9847D1DCEA5094D25E3E5AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
Manifest number: 10E8
Signing time: Sun 29 Mar 2026 11:00:29 +0000
Manifest this update: Sun 29 Mar 2026 11:00:29 +0000
Manifest next update: Mon 30 Mar 2026 11:00:29 +0000
Files and hashes: 1: UO-N3sO-KaU53uAnF0r-Zaxk-s8.roa (hash: th5Xy1RQIpZsqAYlXmjApBlkGESDWNt7uQOcgpj0D/M=)
2: ni6I9QfNLq27IyyGT3Htum7LXaA.crl (hash: gXnjKZ+Ji45ipPX83j9pdp8YKB/eLtNopv1SU07KXcE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:a0:5f:98:47:d1:dc:ea:50:94:d2:5e:3e:5a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e2e88f507cd2eadbb232c864f71edba6ecb5da0
Validity
Not Before: Mar 29 11:00:29 2026 GMT
Not After : Mar 30 11:00:29 2026 GMT
Subject: CN=2f251102e501e400064fa43c23ab7b8f5e874411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:90:1b:5f:4a:22:80:19:65:11:12:fb:f8:35:
53:f8:f9:38:27:7d:df:0c:7e:f1:27:ec:28:85:9f:
89:16:a6:52:d9:6a:28:1e:f6:52:5e:4c:10:a0:2f:
80:f5:3e:b7:c9:06:b6:5c:92:e0:64:b9:ca:dc:7d:
7f:13:a9:04:cc:21:d1:6e:a6:26:cc:6d:e9:51:f8:
99:1b:37:ec:86:f7:d6:42:fc:15:c6:be:f6:bb:d5:
e5:61:93:a7:ba:06:15:02:db:e0:29:da:b0:42:eb:
92:c7:b9:87:60:b6:03:af:ab:8c:2a:36:16:af:8c:
46:92:35:28:e9:94:3e:b2:0f:7b:eb:6e:e6:4d:1f:
43:9a:80:a8:f2:41:a2:57:65:b7:87:07:4f:dc:3f:
87:09:a6:d5:d7:d8:82:3c:d7:23:0a:cc:0d:41:79:
0f:37:f2:6c:0b:4b:83:76:6f:d0:ed:3d:55:df:13:
af:9a:60:a9:d1:08:92:b6:f2:e7:ea:bd:86:9a:5d:
ef:6d:2d:22:ad:52:a3:3e:b2:69:7c:10:22:83:52:
14:81:8e:dc:5b:9d:7e:7e:b2:a7:3f:ba:96:e5:47:
6a:58:f9:62:37:02:a3:35:b4:07:a6:a8:6c:9e:3d:
64:fe:1d:16:0b:e5:86:57:80:a8:84:52:ed:46:a4:
5c:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:25:11:02:E5:01:E4:00:06:4F:A4:3C:23:AB:7B:8F:5E:87:44:11
X509v3 Authority Key Identifier:
keyid:9E:2E:88:F5:07:CD:2E:AD:BB:23:2C:86:4F:71:ED:BA:6E:CB:5D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ni6I9QfNLq27IyyGT3Htum7LXaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/30764e-799f-4736-9686-92d5d3970a59/1/ni6I9QfNLq27IyyGT3Htum7LXaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:f7:83:04:7d:3c:fe:9d:61:d6:50:14:7c:6e:c0:8b:73:19:
4b:cd:55:cc:50:f0:72:5c:67:27:0c:4f:78:de:b1:b2:d4:18:
57:c1:c4:56:8b:29:8b:fd:73:11:6e:62:50:ac:6a:6c:64:67:
a2:71:cb:7e:ca:6a:5a:30:5e:70:a3:88:74:bf:2e:7e:c7:95:
74:5a:de:8a:96:17:88:1a:23:a9:5f:e3:cf:3f:f1:bc:05:a4:
1a:c7:c5:e3:ad:3a:69:ae:b8:d6:36:d7:4f:b5:98:63:73:65:
7d:c2:f9:39:74:9c:89:de:c8:15:de:20:b0:bd:d6:34:a6:5c:
39:33:22:21:10:3a:68:92:fd:2a:ab:6e:39:8e:e9:02:24:ee:
6b:e6:b5:dd:bc:cd:88:09:32:23:39:c4:05:56:5f:0c:55:fe:
b4:53:1e:11:dd:bd:09:19:ac:90:89:57:f1:90:ab:33:95:99:
6b:9b:b9:5b:2c:6f:65:46:02:2d:cc:3b:e6:eb:e1:fb:30:ad:
7d:50:ac:6f:cc:63:2f:ad:7e:14:6d:25:f2:1e:a5:3a:b0:1b:
ee:db:ff:9e:01:24:fb:69:4f:c9:2e:49:d9:53:3c:5e:3a:8a:
47:32:14:40:7d:36:6c:f8:52:6b:2c:8b:90:b7:fc:4d:1f:f4:
c7:99:b3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:51:41 2026 by rpki-client