Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
File: n8wvPua1w_9txTRqdTVQb6gkEj4.mft (raw, json)
Hash identifier: alwDOf8ILRqBbFfWZ8jnBRNKVmNj/NoQCF47D6lbCdg=
Subject key identifier: FF:9B:3D:76:8B:A4:22:55:C5:9E:FA:49:1F:9D:7D:55:53:DC:2B:29
Authority key identifier: 9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
Certificate issuer: /CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Certificate serial: 019D3941721A2D3995513F936813D4E4E435
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
Manifest number: 0D91
Signing time: Sun 29 Mar 2026 11:01:23 +0000
Manifest this update: Sun 29 Mar 2026 11:01:23 +0000
Manifest next update: Mon 30 Mar 2026 11:01:23 +0000
Files and hashes: 1: e90N0aUxGaG0P6Y-qgc78O_5cZo.roa (hash: OVICK+i3D3qLf0VgswLpLCKXQM3k/vXeVHGe62dEn3w=)
2: n8wvPua1w_9txTRqdTVQb6gkEj4.crl (hash: ef4KbE713BeBSb/FGc3b1h3B3uvACL+Fiaql08MnWo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:72:1a:2d:39:95:51:3f:93:68:13:d4:e4:e4:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fcc2f3ee6b5c3ff6dc5346a7535506fa824123e
Validity
Not Before: Mar 29 11:01:23 2026 GMT
Not After : Mar 30 11:01:23 2026 GMT
Subject: CN=ff9b3d768ba42255c59efa491f9d7d5553dc2b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:50:42:d4:fe:d5:6e:f2:56:d6:f8:5c:7b:71:
d7:d9:3e:30:b9:a1:87:9c:2d:eb:c4:ec:5f:70:b4:
fa:64:f5:a5:dd:99:05:09:fc:61:76:51:bf:75:88:
8c:bf:4b:6c:9e:6a:b0:28:66:63:55:c8:5a:be:35:
4b:5c:4f:3a:eb:05:ea:35:10:a2:4e:26:f4:66:8d:
ea:cc:d9:28:44:ec:c8:dc:c1:0d:c3:ab:e8:a6:e6:
e6:e3:86:13:1f:03:14:55:31:86:81:4f:0c:02:f5:
bf:3f:da:b0:92:37:c0:a0:28:41:6d:05:e1:6c:8f:
75:4e:ac:6e:ab:cf:d7:16:2d:1b:26:df:75:f1:1e:
7d:8e:78:a7:96:e8:57:5d:05:76:c2:72:9a:a6:d0:
f7:0f:fc:f9:5f:05:3e:86:cd:f2:8d:2e:8f:5a:e9:
ca:ae:64:94:bf:72:5d:c2:33:c0:7f:e0:1a:98:7e:
ca:a1:4d:7e:8d:0b:b1:ae:12:ee:a6:d1:0b:dd:da:
4f:48:53:5e:ee:6b:3a:10:42:1b:8c:90:f1:8c:e2:
09:0c:a1:d7:5d:40:2c:61:39:c8:9e:22:2c:4a:85:
78:81:03:96:31:61:5a:23:b6:e0:0a:0c:7e:02:13:
23:2f:a7:eb:3d:8a:64:1f:c1:d0:39:15:1a:c5:cd:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:9B:3D:76:8B:A4:22:55:C5:9E:FA:49:1F:9D:7D:55:53:DC:2B:29
X509v3 Authority Key Identifier:
keyid:9F:CC:2F:3E:E6:B5:C3:FF:6D:C5:34:6A:75:35:50:6F:A8:24:12:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8wvPua1w_9txTRqdTVQb6gkEj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/7f840d-3bd4-4fad-9a15-8bf04af4b2b4/1/n8wvPua1w_9txTRqdTVQb6gkEj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:2f:b2:89:08:0d:f8:c2:74:6d:aa:53:c8:e1:d3:a7:a2:d0:
c8:b9:9e:f9:98:2a:36:fa:57:25:67:0f:95:96:d1:be:c2:63:
65:45:fb:d7:e4:0a:85:fa:86:a2:c7:77:18:9d:43:56:72:4d:
23:f1:ce:78:0d:2b:90:12:d6:14:32:c3:b3:13:0b:0a:54:d9:
99:92:b5:bf:cd:bf:37:a9:42:59:e6:0c:c2:0e:44:3a:d2:09:
a6:f5:82:9b:27:c0:06:7b:6e:f8:56:aa:7e:1b:6b:c6:82:b4:
f1:52:09:20:dc:e8:d4:06:c9:20:2a:ce:b0:2e:e5:0c:3e:36:
32:5b:76:0c:6a:be:6e:c8:0b:e4:26:e0:74:e0:a4:2e:22:36:
4d:84:c6:7a:ac:6f:93:45:a1:1c:68:71:1a:7f:f3:d5:69:28:
d3:c5:a4:54:80:78:b9:04:fa:42:f9:9d:fd:ac:c3:08:5d:e6:
7c:df:c6:e2:7d:dd:05:76:56:82:cb:2e:c7:4f:9c:6a:31:90:
d8:e2:12:99:1a:ac:05:e0:50:07:0d:77:f5:0c:6a:67:34:1e:
e3:bb:6f:11:74:e8:b5:1f:41:4f:4e:31:fb:4b:98:80:f4:c8:
69:da:dc:e5:36:55:34:19:5f:fd:ca:e9:99:59:19:2b:df:c9:
19:00:95:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:28:04 2026 by rpki-client