Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
File: nT1ifCl_5ULYNZqG2OL569lWWoE.mft (raw, json)
Hash identifier: bLa5dGjiV3oB/JECXA1tcc0K4lq1x7Y6l4wSvCK4LUY=
Subject key identifier: F2:24:13:05:E6:41:84:79:97:25:1D:A8:F7:42:1F:E6:D3:01:DD:42
Authority key identifier: 9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
Certificate issuer: /CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Certificate serial: 019CABD945A4386BA30919E3EBEC62118D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 00:01:08 +0000
Manifest this update: Mon 02 Mar 2026 00:01:08 +0000
Manifest next update: Tue 03 Mar 2026 00:01:08 +0000
Files and hashes: 1: 0Pd5gy1haK4v6OlTaLPDRmtxWpo.roa (hash: EzclGfghMLp2uc4PlgnAz7kDOAZSuAY96WRm8e0asj4=)
2: 6zJUO9RbzLWdWeLPIAC4BRt20y8.roa (hash: VqpAVUw0h0qkGOlMqRzOLvCd/yLUIDbbUUoOf2xDNIw=)
3: eDu9UPYyz5Jbf-XKyeS71yiEEec.roa (hash: avsknqZQJ99jD7fEDnp/UuPCpVghiI2Oj1daPMTPgxM=)
4: nT1ifCl_5ULYNZqG2OL569lWWoE.crl (hash: ZtJrjQeRfA8VRdM8VmjKOOISWN0tYD4aab1diFymRM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:45:a4:38:6b:a3:09:19:e3:eb:ec:62:11:8d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d3d627c297fe542d8359a86d8e2f9ebd9565a81
Validity
Not Before: Mar 2 00:01:08 2026 GMT
Not After : Mar 3 00:01:08 2026 GMT
Subject: CN=f2241305e641847997251da8f7421fe6d301dd42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:76:81:b8:09:90:cf:6d:b1:48:0b:1b:fb:d8:
a5:03:58:17:60:40:59:8f:f6:f5:6c:5a:2c:cb:fe:
0b:ad:07:cb:b6:84:5b:9b:29:c7:d2:8e:8b:a7:71:
6e:5a:b8:9a:5d:de:01:65:82:d4:27:0c:f7:7f:cd:
90:93:a1:00:a9:89:56:1a:99:fb:49:61:d6:52:49:
13:44:90:f1:f0:21:a7:8d:fa:01:94:6a:ac:c2:1a:
41:cd:62:11:8b:79:8a:0d:36:7e:78:80:15:d7:2e:
a9:c6:aa:9b:86:7b:d9:49:06:b7:0c:be:f3:6b:0f:
c1:33:3f:c3:d6:2e:b6:de:34:c0:dd:34:af:1e:7f:
0c:11:78:f8:98:8d:36:b7:6b:4e:c7:63:52:bc:aa:
ce:6d:53:73:4e:90:a3:fc:1c:04:a2:22:53:f9:ae:
0c:5a:c4:96:3a:24:bc:a2:16:b5:07:6f:51:48:ff:
23:52:f0:06:53:12:7c:3f:cf:1a:2c:2c:de:94:1e:
00:4c:ea:a0:84:13:86:90:24:3b:bf:26:60:a4:6e:
95:d8:0a:92:82:97:ba:3a:ed:fb:74:32:ed:a9:9d:
0f:d5:5b:41:9d:9a:1d:3f:0a:ad:17:67:5e:4b:09:
55:09:94:00:bc:72:6c:75:56:57:a0:65:5e:63:c0:
c6:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:13:05:E6:41:84:79:97:25:1D:A8:F7:42:1F:E6:D3:01:DD:42
X509v3 Authority Key Identifier:
keyid:9D:3D:62:7C:29:7F:E5:42:D8:35:9A:86:D8:E2:F9:EB:D9:56:5A:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nT1ifCl_5ULYNZqG2OL569lWWoE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/ddc1aa-5a3a-4163-b5e8-15ea337a7840/1/nT1ifCl_5ULYNZqG2OL569lWWoE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:97:96:97:cf:76:fd:85:0e:e2:3f:e2:18:df:f2:f8:ba:5d:
3e:93:8d:35:bd:d8:e2:a7:fb:e8:b5:9e:d8:b6:98:a6:ae:a0:
9f:fb:ff:76:2d:2b:9b:27:3f:b2:e1:50:0a:56:4c:20:5d:97:
4b:a5:35:e1:4c:6b:5f:bd:60:a8:ff:f0:de:90:3e:fb:17:7c:
1f:87:e1:f8:ae:95:8f:34:88:38:08:c8:8a:0a:a3:b0:ed:9e:
94:5b:25:be:d3:52:14:ed:41:7e:92:84:e6:2d:85:65:09:60:
8a:d6:a7:fa:02:21:42:7a:0a:99:90:c6:5a:a3:d0:38:24:66:
57:79:0d:9a:8e:84:0f:a9:56:3b:b9:0a:7a:26:0b:01:8b:21:
28:bf:03:3e:fe:5d:1e:2a:68:d3:33:ae:15:ea:7e:67:da:92:
aa:dd:54:66:af:99:e6:03:20:d0:2e:8a:fc:00:91:89:6b:1c:
27:ae:de:49:57:82:10:75:5d:d0:f6:45:4c:b1:25:a0:93:59:
0e:98:43:12:e0:4a:75:51:0f:99:8d:9f:b5:a1:2c:1a:d7:83:
ba:32:18:f7:cf:57:5f:95:4d:2b:9b:56:32:e2:9e:7f:e0:3c:
e6:c5:76:16:98:dd:e7:b3:a9:0d:c1:74:d3:64:21:a3:c3:96:
ac:9b:8d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:34:40 2026 by rpki-client