Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier: 325ptRRjE3qKPN+pwEVtXG2nA4GdLoVpHIygDUqi3uQ=
Subject key identifier: 8B:01:15:82:8C:6C:6D:76:D8:F3:7C:83:CC:49:D4:FC:31:1B:6D:92
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 019CAB348F6A3FE0E8D05FFA39E8AECA289C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number: 1025
Signing time: Sun 01 Mar 2026 21:01:14 +0000
Manifest this update: Sun 01 Mar 2026 21:01:14 +0000
Manifest next update: Mon 02 Mar 2026 21:01:14 +0000
Files and hashes: 1: KG8loLuhTcIMjieWs1KfwpWofRk.roa (hash: RxfX57Z0L5BZOB9gWwKFQnTlLw89l17p5HkheRVermQ=)
2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: mbswqmB9opqDeJvM2Pkhi6vPS3ds8roBkTdJ7Eio338=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:8f:6a:3f:e0:e8:d0:5f:fa:39:e8:ae:ca:28:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Mar 1 21:01:14 2026 GMT
Not After : Mar 2 21:01:14 2026 GMT
Subject: CN=8b0115828c6c6d76d8f37c83cc49d4fc311b6d92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:cd:68:44:ad:64:47:3e:c7:ab:a4:eb:7f:38:
e8:52:b4:d9:e1:0a:af:04:9b:8a:9e:31:7c:5d:3c:
1d:a5:a0:c5:30:1f:74:fe:18:56:8e:fd:ed:99:02:
22:f8:5e:03:97:33:ea:6b:1d:88:27:53:e3:a4:2f:
d7:09:4d:b5:c5:6b:6b:d5:d7:d8:1b:45:da:72:43:
a9:a6:cc:b5:29:1e:c1:1a:00:b2:de:6c:c6:87:53:
72:3f:dc:3c:7f:78:4b:95:28:f8:58:c1:70:fc:d7:
e7:30:8a:f7:95:f2:bf:3f:54:f6:a6:ab:f9:47:ef:
ae:81:b5:12:f9:8b:48:8d:d9:fc:38:30:bd:49:2e:
c1:35:b4:45:3d:22:a0:12:37:9a:18:9f:a6:b3:37:
98:58:f5:08:eb:9a:39:0c:56:2f:33:16:97:b4:27:
e4:15:6e:82:cd:af:c7:04:3e:07:89:fd:bb:1f:a5:
70:95:64:d2:d9:da:a4:d2:75:9d:d1:0d:37:1f:7d:
96:dc:f9:e3:68:0d:47:08:16:de:ab:f7:b2:cc:fb:
e4:aa:cc:e9:a5:0b:7c:ab:53:2f:b3:54:0e:1b:e2:
50:12:dc:05:16:6d:20:0d:37:47:3e:0f:f9:59:26:
1c:35:28:e1:55:e2:a7:b9:b0:f6:94:e7:a6:b7:e3:
e4:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:01:15:82:8C:6C:6D:76:D8:F3:7C:83:CC:49:D4:FC:31:1B:6D:92
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:f0:6f:47:0d:9f:1d:43:a9:f4:bc:6e:47:0b:ac:a4:26:8d:
66:fb:f2:d6:25:16:55:16:05:b5:74:e7:29:df:db:ea:67:e1:
5e:15:00:2c:6b:b3:58:3c:73:51:5e:cb:09:99:d6:2e:ca:4b:
0a:8b:18:49:bc:bf:ad:e4:b5:79:36:87:19:62:2c:07:a7:6d:
2d:2f:c7:fa:3a:81:ae:ee:13:15:00:5b:81:4f:24:d0:65:2e:
7e:41:f9:15:da:c4:99:ae:0f:f6:78:80:a5:a9:b6:0d:5e:12:
f1:85:66:38:25:48:dd:d7:e4:4a:9b:bb:6d:f3:6c:64:5e:16:
11:c4:06:ba:99:20:89:3d:b7:65:b1:c5:9c:2e:e4:15:04:79:
65:88:b7:5b:71:b6:a9:e0:a8:82:09:55:86:57:17:fb:a5:84:
3c:f3:fb:79:81:c5:05:e1:5c:80:79:51:b9:d8:a0:f4:d3:99:
e6:ed:0f:f0:b4:a5:ee:9d:b3:19:97:e3:bd:c7:8b:bb:1f:d7:
ee:b9:49:8a:39:65:aa:25:64:cf:24:39:96:ce:6e:bb:9c:3d:
d9:d1:52:8b:b0:2e:fc:b5:9e:02:af:12:3e:76:c2:c0:26:ed:
05:9c:3f:3f:9c:ec:6c:4c:5a:33:c5:bc:5e:5f:37:48:c9:51:
5d:96:47:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:18:50 2026 by rpki-client