Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
File: 8nisvMRvEz79OT9RFg_bt2B-HhY.mft (raw, json)
Hash identifier: 7SPQvmBlZknrpzJK4WBMw46ZE+olWk66KHFX2Hm+qnk=
Subject key identifier: E6:A7:CB:A3:13:F2:72:7A:94:39:DA:F9:F7:31:6C:FA:AF:52:7F:FB
Authority key identifier: F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
Certificate issuer: /CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Certificate serial: 019D39AF573A52881A5BC7F6C941442337F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
Manifest number: 1255
Signing time: Sun 29 Mar 2026 13:01:25 +0000
Manifest this update: Sun 29 Mar 2026 13:01:25 +0000
Manifest next update: Mon 30 Mar 2026 13:01:25 +0000
Files and hashes: 1: 2hKU1NYjNBDhpco5HEAK3um-kbE.roa (hash: YhjeByYxX6wVLssUtZI4v3Qulxa9a1zwl57K6O3z8yo=)
2: 8nisvMRvEz79OT9RFg_bt2B-HhY.crl (hash: dpPXU66NqDvBHw0JPjdpe471O+AF3GDt0TE2cxDScAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:57:3a:52:88:1a:5b:c7:f6:c9:41:44:23:37:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f278acbcc46f133efd393f51160fdbb7607e1e16
Validity
Not Before: Mar 29 13:01:25 2026 GMT
Not After : Mar 30 13:01:25 2026 GMT
Subject: CN=e6a7cba313f2727a9439daf9f7316cfaaf527ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:16:1c:18:dc:d1:85:98:c0:ee:75:fc:16:80:
b8:9b:33:25:a5:13:51:a8:eb:14:7f:35:73:c2:0f:
c8:d6:37:04:84:97:69:09:f7:a9:50:62:85:93:60:
58:25:61:ab:98:d1:7a:49:34:cc:22:85:f1:79:bd:
c9:df:cf:31:77:c5:d8:0e:72:8e:db:b1:32:f0:d3:
6b:b3:9f:1e:ec:60:ab:57:fb:3a:ee:03:d9:c7:1e:
aa:e0:f5:f0:23:1e:16:4a:48:21:6b:04:d0:e0:6a:
ac:62:4a:14:05:d2:65:72:59:56:83:84:c8:dc:34:
6c:b0:6f:77:9f:c6:fe:8d:4f:db:a1:6f:b1:e2:d7:
b4:9f:08:ad:4c:37:55:79:dd:c4:0f:8f:d8:78:74:
f8:39:19:6a:be:d2:c2:b7:72:47:bc:ac:f4:96:ce:
de:60:c2:2c:56:1d:8a:3c:a0:79:7b:27:02:79:77:
58:25:32:69:64:d6:9f:75:1c:64:07:1b:1c:dc:69:
3f:00:9c:b9:75:50:bf:18:45:c3:44:95:f0:4f:63:
6d:09:20:a2:c5:73:60:55:8a:81:85:34:5a:0d:f0:
f4:75:96:23:f2:35:88:d5:51:63:d2:2e:e8:d9:30:
56:7a:57:1d:37:e3:ec:6d:69:39:08:20:fc:35:dd:
4c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:A7:CB:A3:13:F2:72:7A:94:39:DA:F9:F7:31:6C:FA:AF:52:7F:FB
X509v3 Authority Key Identifier:
keyid:F2:78:AC:BC:C4:6F:13:3E:FD:39:3F:51:16:0F:DB:B7:60:7E:1E:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8nisvMRvEz79OT9RFg_bt2B-HhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/537267-b243-4657-99ff-94b514433c11/1/8nisvMRvEz79OT9RFg_bt2B-HhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:ec:9e:af:b3:8b:46:d2:66:65:82:f9:e4:b9:51:1f:23:77:
fd:36:36:9b:12:26:84:96:67:93:b7:ea:a6:79:94:f1:3e:03:
94:70:58:d9:55:35:22:43:5d:cf:b2:e9:19:e1:fa:f1:08:11:
ca:db:14:40:eb:5c:d0:b8:f5:d2:3d:f1:5a:91:95:48:3a:b7:
b0:7a:78:4b:51:e7:9e:90:f8:ef:f0:f7:0d:61:ab:85:bf:dd:
5c:75:91:5a:71:9f:57:3a:b2:76:19:78:03:b5:41:93:d6:98:
e4:1b:34:20:42:22:7a:8e:25:25:bb:e4:93:43:39:4a:33:41:
06:fc:86:be:30:48:2e:37:30:15:b0:c7:25:18:0a:52:c5:92:
a1:dd:57:b3:c8:4b:b5:45:02:ea:74:05:45:2c:fd:2f:5d:32:
1e:95:33:88:d8:fb:12:9f:b3:2d:d1:cb:1a:d8:3e:87:6c:5b:
93:3e:64:63:30:f4:ea:36:da:98:a1:98:02:c9:39:78:ff:6b:
f3:98:a2:8a:e4:f0:5e:2d:48:48:72:ef:00:7e:3e:1e:9a:ff:
b1:0d:da:3b:ac:35:9f:c5:8a:ff:a1:31:6d:1f:a3:17:59:4b:
1a:25:1f:78:99:b9:00:44:1d:07:f7:8d:38:fd:cd:c4:6c:78:
ff:3a:a3:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:34 2026 by rpki-client