Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
File: nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft (raw, json)
Hash identifier: Pj729gaQQojcJlrEv1Nl3x5/cUvo6c8SvKzuU89mVPQ=
Subject key identifier: E8:FA:DF:38:4F:83:A5:04:9E:C4:ED:70:A7:7F:17:B0:14:17:42:42
Authority key identifier: 9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
Certificate issuer: /CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Certificate serial: 019CAE6C0F5901AD33E86238A1ADE3327D51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
Manifest number: 1849
Signing time: Mon 02 Mar 2026 12:00:43 +0000
Manifest this update: Mon 02 Mar 2026 12:00:43 +0000
Manifest next update: Tue 03 Mar 2026 12:00:43 +0000
Files and hashes: 1: ZAbsRN0fUXbnd5YBz0EAlHk_95M.roa (hash: ZZQdUJPsVGvVmbO6BIZT7SnJBcEBT1ZftSP8BYy67GI=)
2: c57e1whtl5eogTBCeFXU_KrAjnI.roa (hash: rui/Yx3IAn8AclnySbYIVuFoxnyBxQ2AYt9fq4YiyHI=)
3: nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl (hash: D8stgmayMEN8z35Wuq+2DBM/lDgSRNPi8Kp5/wzth7A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6c:0f:59:01:ad:33:e8:62:38:a1:ad:e3:32:7d:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c8a1876fddc2b63748b457b770b79a7e66e793c
Validity
Not Before: Mar 2 12:00:43 2026 GMT
Not After : Mar 3 12:00:43 2026 GMT
Subject: CN=e8fadf384f83a5049ec4ed70a77f17b014174242
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:ec:14:28:5d:26:10:d2:d9:af:f9:8f:1a:31:
49:4c:5c:ca:41:89:64:3e:99:0d:5a:6d:1f:83:24:
87:71:e9:e1:30:67:c1:b1:bb:05:e5:bb:3e:35:f4:
54:d6:26:cb:01:2a:3f:56:79:29:99:7d:63:15:ad:
e3:8a:33:5c:d6:e4:a9:ab:0a:ac:21:19:34:c0:d7:
7b:52:46:64:cc:77:8d:7b:44:f7:aa:45:1b:24:11:
9a:d2:59:0c:af:16:7b:4e:dc:76:34:7e:a4:33:f4:
12:c7:89:0d:41:12:18:0c:98:58:0d:49:2c:dd:34:
7a:ac:04:19:95:f6:67:0d:4a:9f:0c:34:6f:e7:91:
34:c3:b0:64:3a:35:1e:79:e3:73:fc:85:17:8f:29:
b3:25:e6:e6:dd:18:de:69:73:34:12:d5:ac:93:c8:
99:f3:ab:ba:0d:ab:c2:12:44:6e:54:63:4d:9b:d6:
93:d6:83:bf:d9:00:ae:b9:43:a0:b1:ab:76:3d:85:
85:0a:d6:bb:8b:8a:83:4d:08:40:36:a8:5e:02:4b:
43:69:6f:d1:21:53:64:52:63:f5:bd:73:ab:e8:98:
4d:1b:ee:b0:4f:b4:88:2d:83:75:cf:7a:01:b8:0f:
7d:4e:84:69:bd:ec:7d:35:38:dd:e4:48:2a:35:c5:
fa:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:FA:DF:38:4F:83:A5:04:9E:C4:ED:70:A7:7F:17:B0:14:17:42:42
X509v3 Authority Key Identifier:
keyid:9C:8A:18:76:FD:DC:2B:63:74:8B:45:7B:77:0B:79:A7:E6:6E:79:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nIoYdv3cK2N0i0V7dwt5p-ZueTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/9ea68f-743d-47da-b71c-709fbe84cdfb/1/nIoYdv3cK2N0i0V7dwt5p-ZueTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:2f:f7:ef:a4:a8:74:48:02:b2:07:5b:a8:6d:a9:d3:af:a9:
c3:2f:ca:4f:14:d7:8d:83:c7:22:57:6e:59:c7:01:0f:ac:07:
b1:0c:1e:6b:a5:0f:5f:56:a0:ad:a0:5e:6e:5d:1d:ef:77:7b:
d1:91:1b:16:56:e4:58:26:47:b5:23:6f:50:63:66:66:b6:4a:
3f:2b:e4:d9:36:03:fa:39:df:bb:96:aa:24:d8:7e:4d:1b:7f:
da:5a:7c:78:80:30:0d:b4:bb:f5:13:1f:2c:ac:75:62:a9:04:
6f:71:a1:ad:9d:32:7c:ab:1f:f9:c7:ad:5a:40:07:48:53:80:
37:5f:8c:b3:fb:8d:59:86:c7:24:8f:f2:13:60:38:48:f4:ad:
0a:b9:70:fb:97:7c:64:0f:4a:52:b4:34:17:9b:d5:e6:d2:bd:
6e:1c:2d:71:f8:7c:68:16:f1:f6:5f:a6:eb:57:3d:b2:20:19:
81:fc:1a:f1:3f:dd:8b:ec:72:75:8a:33:49:a9:ef:c4:cd:71:
aa:3a:b1:9b:18:1b:19:39:a8:a0:5d:6b:3d:09:bf:7a:88:87:
b2:cd:27:75:b2:4e:12:98:02:17:a4:9e:c1:ef:3e:15:90:ab:
0f:5f:77:09:0e:dd:8e:f4:20:70:21:68:27:68:24:e4:54:92:
47:9f:01:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:57:10 2026 by rpki-client