Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
File: rN3HO1mh_N7iLiWCTUCswnKGqlI.mft (raw, json)
Hash identifier: KW3sKF4zjN1j7E2dUEr1LsRTZ8/WiubG8vPNE2n6DgA=
Subject key identifier: DB:9A:BC:12:82:26:0F:BA:32:02:19:65:1E:F8:58:94:05:41:32:DA
Authority key identifier: AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
Certificate issuer: /CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Certificate serial: 019D3909B68E4938C988DC668D7EBA081949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
Manifest number: 04E9
Signing time: Sun 29 Mar 2026 10:00:30 +0000
Manifest this update: Sun 29 Mar 2026 10:00:30 +0000
Manifest next update: Mon 30 Mar 2026 10:00:30 +0000
Files and hashes: 1: oMb2k7Oz9unm3siEKObsvSGOu5s.roa (hash: pGiHyUdRro6M/TUFejm603qJXDKgL9TMHqLZBCWVjz4=)
2: rN3HO1mh_N7iLiWCTUCswnKGqlI.crl (hash: sMUTZPylQhs2QdZdO13e/ls4WfLA921FATk+gB9bKoM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:b6:8e:49:38:c9:88:dc:66:8d:7e:ba:08:19:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acddc73b59a1fcdee22e25824d40acc27286aa52
Validity
Not Before: Mar 29 10:00:30 2026 GMT
Not After : Mar 30 10:00:30 2026 GMT
Subject: CN=db9abc1282260fba320219651ef85894054132da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1a:44:51:a1:9c:5a:cc:99:ba:57:36:c5:ad:
58:cf:0f:0f:f9:c6:7e:83:86:ae:7a:71:99:cd:18:
63:7f:26:e8:bd:27:27:b5:75:3f:f6:5e:8f:a3:0c:
08:4d:41:a0:cd:5f:ef:f2:cb:92:0c:b3:b7:b1:14:
c0:b8:0f:3b:24:e2:20:68:d8:30:d6:f0:42:0e:5b:
eb:91:a9:1c:79:77:af:32:0d:1a:6c:29:a5:ba:d4:
3c:8a:de:7a:e4:f3:e2:18:9b:ba:b6:77:e7:13:76:
02:ec:5c:0b:d6:74:84:66:1d:19:91:41:4e:d8:26:
af:59:f4:17:13:ce:b3:10:2f:08:11:28:16:8e:78:
01:dc:7f:3e:b2:cc:c3:c4:6f:4e:35:44:bd:5a:14:
ec:fd:d4:e8:bc:02:21:b0:45:23:11:24:d4:1c:53:
d0:e9:9e:67:65:df:12:f2:6d:28:89:29:ec:e8:10:
53:4d:ec:d8:4e:c0:dd:93:95:a9:4a:50:88:60:61:
10:0b:d6:5f:88:db:e3:79:3a:c2:59:91:f5:89:70:
77:45:fc:a7:17:9f:58:b9:a7:25:54:b4:fe:73:80:
6b:7f:10:38:85:64:1d:3b:4e:67:a1:d1:3b:8d:27:
84:b4:2b:f2:64:a5:6a:63:98:4b:9c:5f:ce:47:e5:
3d:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:9A:BC:12:82:26:0F:BA:32:02:19:65:1E:F8:58:94:05:41:32:DA
X509v3 Authority Key Identifier:
keyid:AC:DD:C7:3B:59:A1:FC:DE:E2:2E:25:82:4D:40:AC:C2:72:86:AA:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rN3HO1mh_N7iLiWCTUCswnKGqlI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/8788e5-8ab8-43e9-9dab-a0ec84a31393/1/rN3HO1mh_N7iLiWCTUCswnKGqlI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:d4:5a:14:1a:37:fc:14:fa:ff:69:39:26:e5:33:75:1a:79:
8c:8b:d3:3a:0a:bf:41:3c:d3:2b:0f:46:83:a7:27:a6:13:cf:
63:46:b2:d0:d6:09:12:a6:62:3c:29:2f:bb:07:5a:e2:86:e5:
7c:cc:69:27:14:81:e0:73:9f:5d:e7:70:6d:2e:96:84:b2:50:
bd:df:0a:f2:84:54:58:6f:47:6a:a9:2e:76:77:0d:0e:be:16:
66:34:d3:fc:c6:51:09:6d:bb:1e:03:e7:bb:35:77:a3:e2:b6:
e8:13:07:1a:f7:cd:28:59:67:68:a1:e5:13:e9:9b:e3:b1:a5:
f7:66:b2:50:12:21:f3:9e:4f:ee:fb:25:f7:09:01:72:10:76:
be:91:37:bd:63:6a:79:d6:ee:0b:51:2a:26:8f:a2:36:09:ae:
3a:7d:e8:cf:0c:bd:03:f6:41:8d:b3:d0:e6:5f:e4:af:dc:6b:
1f:1e:7f:a2:cb:d3:4d:96:84:98:f4:89:62:3a:62:ea:86:18:
f7:4a:66:7d:d5:68:b4:f4:9b:05:28:e9:6f:dc:23:64:27:1a:
28:60:d3:ac:50:c5:1c:1a:10:5e:4e:21:c1:e1:2b:64:b5:f4:
0c:bd:8f:e4:23:27:6e:e4:f5:91:02:4a:e1:de:aa:39:1d:7e:
49:b0:94:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:47 2026 by rpki-client