Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
File: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft (raw, json)
Hash identifier: 7LxC+CQ6naHJdSt1/Xu8ZTULULEV2Pa7B9rEk82w70I=
Subject key identifier: E4:4F:86:A5:A2:F2:B3:3A:0F:89:F9:0F:D1:58:F0:C1:C1:13:75:7E
Authority key identifier: 9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
Certificate issuer: /CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Certificate serial: 019CACB45F800A3EC5EF48304990EBB97EF1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
Manifest number: 1846
Signing time: Mon 02 Mar 2026 04:00:27 +0000
Manifest this update: Mon 02 Mar 2026 04:00:27 +0000
Manifest next update: Tue 03 Mar 2026 04:00:27 +0000
Files and hashes: 1: l0La-cqh0YtCqpb_P_ploY3jtxY.roa (hash: 96uWLiEvgAqq8mEo7+VReaVgrIrRgh/p9r34i4OMLOw=)
2: nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl (hash: MVQvJ27abR2OqLyt7GtpMpY5eBPYzi0cpYvgVmAqBho=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:5f:80:0a:3e:c5:ef:48:30:49:90:eb:b9:7e:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d8f112756f1458dcf3e387a4be890f30ea949b3
Validity
Not Before: Mar 2 04:00:27 2026 GMT
Not After : Mar 3 04:00:27 2026 GMT
Subject: CN=e44f86a5a2f2b33a0f89f90fd158f0c1c113757e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:39:38:2e:e5:c2:fc:e8:88:8c:ba:fc:5f:50:
0c:f8:29:bc:41:8b:c1:1a:b5:1d:10:4f:cd:e3:15:
3a:68:9d:ac:5a:da:5a:44:94:dc:44:2e:d3:84:75:
30:a0:44:a3:74:55:1a:9d:57:36:f8:ba:1c:c5:8e:
ff:88:aa:14:94:3d:8c:fe:a6:6c:6d:9a:68:01:25:
db:43:8c:9f:68:b9:6e:cf:5b:b3:72:5d:85:5d:ce:
8c:05:70:0f:a6:ef:77:30:75:68:78:e9:21:3d:d7:
0b:87:35:29:ed:13:e9:99:3e:b0:88:a9:df:85:ce:
76:4b:a1:4f:81:1f:0f:62:68:96:dd:9a:5c:55:fa:
4e:63:1b:d5:6b:2e:49:4b:66:5f:66:a0:e3:6c:f2:
04:41:14:87:d7:bf:09:28:3d:6b:98:0e:d8:4c:28:
f2:89:25:3c:b1:78:8d:f4:46:bd:2a:35:46:bb:be:
2a:1e:6f:cd:6a:5b:5b:d1:ad:79:32:39:81:fc:6f:
2c:3f:40:47:e8:b0:d9:c1:29:df:68:af:93:04:ff:
1d:e8:99:ce:46:6f:fe:54:a0:9d:c6:02:1e:76:11:
af:bd:1d:46:3e:6e:15:92:ad:d6:66:d8:ae:51:59:
9b:c8:14:7f:1a:ff:34:bb:99:3c:1e:90:b8:6e:a8:
b2:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:4F:86:A5:A2:F2:B3:3A:0F:89:F9:0F:D1:58:F0:C1:C1:13:75:7E
X509v3 Authority Key Identifier:
keyid:9D:8F:11:27:56:F1:45:8D:CF:3E:38:7A:4B:E8:90:F3:0E:A9:49:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/7a6e21-d40b-4eeb-b3cb-00ed90269bb4/1/nY8RJ1bxRY3PPjh6S-iQ8w6pSbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:b8:f7:75:16:d6:bc:63:32:01:3c:e5:8c:56:df:c7:e9:a6:
9b:7f:01:d1:66:65:0e:ad:50:5f:63:df:de:5d:cc:b4:a3:69:
ae:55:0b:58:ef:f1:2e:d6:f4:35:68:51:06:80:83:21:62:ab:
df:99:6d:5c:de:48:f9:ab:89:45:ea:a3:5b:c2:32:66:b5:fb:
36:8b:41:f5:01:41:d9:e5:43:2f:0f:d7:a4:de:b6:e4:b6:0a:
1c:10:60:c2:d0:4d:b3:37:3f:c2:ce:5b:4f:6d:fc:6f:81:ca:
51:ca:56:e5:ed:1d:3c:53:28:81:bb:16:b3:9a:50:0c:ac:33:
b3:d9:43:1f:53:e3:95:27:18:e4:80:23:d1:35:b1:01:43:32:
84:4b:07:12:c2:51:26:23:9e:2b:7b:d0:15:d1:0f:ff:1e:ef:
85:f6:ce:59:22:94:72:2f:85:11:b7:93:6a:4a:0b:dc:a6:bb:
5a:64:3f:1d:9d:49:c8:1f:cc:cd:c7:9a:29:69:fc:f4:bd:d7:
e7:44:ef:77:55:b2:4f:42:56:51:16:df:83:65:98:0a:83:44:
9a:50:07:87:df:d9:0f:ab:c3:f2:1b:ae:ab:c5:98:1a:08:09:
14:89:e0:e1:f0:49:e2:ac:d2:e0:aa:72:d7:b1:c1:f1:fe:2c:
68:60:ab:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:53:10 2026 by rpki-client