Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
File: n8bodwmunQRHlA8j11Tfi6gXWw0.mft (raw, json)
Hash identifier: 7nR1DDcrp8qptm7K4AwTQYp/4Qy2WnVGQWL51+/lIW0=
Subject key identifier: D8:BC:97:F9:C0:1D:58:F2:32:6A:F5:33:D7:E8:0F:2A:CC:71:3A:F3
Authority key identifier: 9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
Certificate issuer: /CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Certificate serial: 019CAF7EBE8C0C483CA159AE4E3F46D47C50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
Manifest number: 16F1
Signing time: Mon 02 Mar 2026 17:00:44 +0000
Manifest this update: Mon 02 Mar 2026 17:00:44 +0000
Manifest next update: Tue 03 Mar 2026 17:00:44 +0000
Files and hashes: 1: Dcw-9xDEt0LNQllufwK5cz5PrZk.roa (hash: GXNoM6IBXntm7+w+WV0lZ7wmbCHNUEG3uFWcTka2eaY=)
2: n8bodwmunQRHlA8j11Tfi6gXWw0.crl (hash: YHU4TtF7ynhDytJCT7V5rZCtIkIUjwAelKEwKlukpxU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:af:7e:be:8c:0c:48:3c:a1:59:ae:4e:3f:46:d4:7c:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc6e87709ae9d0447940f23d754df8ba8175b0d
Validity
Not Before: Mar 2 17:00:44 2026 GMT
Not After : Mar 3 17:00:44 2026 GMT
Subject: CN=d8bc97f9c01d58f2326af533d7e80f2acc713af3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:0f:ae:34:c3:31:44:9f:4f:4d:66:17:4e:b1:
0d:71:cc:59:67:2a:59:4e:5d:a4:91:2a:dc:75:88:
f2:aa:44:f5:25:27:8e:da:46:5b:dd:1b:04:ab:71:
97:2d:10:d7:94:d0:13:7c:d8:2f:ae:da:fe:77:d8:
9b:3b:a1:61:04:86:39:be:a2:c4:d4:c3:3e:76:23:
a6:97:e5:81:f5:79:d1:70:a1:8f:c8:bb:ca:72:4d:
c3:7b:9b:5c:bf:9b:7a:48:9c:84:0a:b3:e9:d6:c7:
37:11:b7:9c:79:e4:2c:21:4b:6a:d9:1a:2b:ec:21:
dc:dd:5f:38:1f:11:ad:46:53:10:e4:ee:21:9b:b9:
ad:1c:02:86:f0:ea:8f:b7:cd:79:42:d4:76:be:80:
79:48:b4:21:ff:01:94:4d:2b:35:67:fe:a2:25:05:
e8:51:9e:42:62:94:77:83:7a:3c:4b:84:95:9b:27:
b9:e8:ac:da:bd:91:4a:83:27:35:f5:25:d9:53:41:
45:47:40:9a:3e:0b:5d:0b:b6:e6:8e:b3:2c:09:76:
ab:60:64:ec:2e:c7:08:3c:e8:b0:88:2a:39:21:88:
b2:7d:87:46:34:4b:9d:d7:6f:e3:f7:e6:3f:dc:5e:
ca:35:f8:f9:b1:73:c7:42:e7:a3:d6:00:48:fd:d6:
7a:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:BC:97:F9:C0:1D:58:F2:32:6A:F5:33:D7:E8:0F:2A:CC:71:3A:F3
X509v3 Authority Key Identifier:
keyid:9F:C6:E8:77:09:AE:9D:04:47:94:0F:23:D7:54:DF:8B:A8:17:5B:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8bodwmunQRHlA8j11Tfi6gXWw0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/e42800-c8c7-4599-b1fd-88a74d039f7f/1/n8bodwmunQRHlA8j11Tfi6gXWw0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:0b:c0:09:48:6f:c6:67:35:12:ce:d0:2b:5b:ed:b6:12:4c:
c1:9b:8a:85:ee:bc:07:f6:16:c1:59:e0:20:be:9e:b0:a9:f1:
ec:83:f2:85:0e:5c:8d:8a:e9:11:29:9a:e8:10:53:d7:fd:84:
22:24:66:27:65:6f:28:dc:f3:00:c1:d2:23:1a:21:71:46:e4:
6d:6f:38:e3:84:60:f8:7d:3e:c4:43:ac:02:86:75:e9:af:1f:
16:0c:d2:62:a1:bc:b2:49:03:5b:c1:6e:cf:bf:d9:ff:c1:7e:
df:25:df:e3:d4:24:5f:1a:b1:bb:fb:27:06:4a:c4:72:28:dd:
90:c1:96:73:7f:40:81:9e:6d:80:a4:e6:ff:b9:06:6f:b9:33:
14:0a:c9:9c:21:c9:a3:b6:0d:06:20:40:af:77:27:1a:ad:fb:
96:40:fb:9b:6a:ed:38:d5:41:f0:61:c7:f3:03:c2:19:cc:8e:
50:2f:0a:db:4f:86:16:29:07:50:ad:40:aa:a4:1a:ff:91:cf:
37:62:cf:21:e1:4a:f5:65:95:09:bc:ba:89:17:b1:7f:a8:6d:
41:43:d7:86:ff:b8:a9:90:f6:02:b5:a8:1d:7a:66:09:4d:bc:
a1:9d:a6:61:37:d2:66:91:4f:ce:35:6f:15:33:0c:f2:3a:6a:
0e:50:19:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:52 2026 by rpki-client