Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
File: n7bU2YfQBKAPopfmnCaOt189mkA.mft (raw, json)
Hash identifier: +3BBe79s7p8mT2YrNrBxFaIX1QssrHzJ4ltS/uafwqs=
Subject key identifier: 08:68:A0:A9:06:18:8F:3E:17:05:93:8E:ED:68:07:74:60:43:37:92
Authority key identifier: 9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
Certificate issuer: /CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Certificate serial: 019D382E6434407FA6DAE44DA519E8CB5368
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
Manifest number: 106E
Signing time: Sun 29 Mar 2026 06:00:57 +0000
Manifest this update: Sun 29 Mar 2026 06:00:57 +0000
Manifest next update: Mon 30 Mar 2026 06:00:57 +0000
Files and hashes: 1: KG8loLuhTcIMjieWs1KfwpWofRk.roa (hash: RxfX57Z0L5BZOB9gWwKFQnTlLw89l17p5HkheRVermQ=)
2: n7bU2YfQBKAPopfmnCaOt189mkA.crl (hash: mYtXgrouJJY4jHE/aiBfsXP5s89qdj0V8jtiUBVq+lM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2e:64:34:40:7f:a6:da:e4:4d:a5:19:e8:cb:53:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb6d4d987d004a00fa297e69c268eb75f3d9a40
Validity
Not Before: Mar 29 06:00:57 2026 GMT
Not After : Mar 30 06:00:57 2026 GMT
Subject: CN=0868a0a906188f3e1705938eed68077460433792
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e3:31:ae:43:c6:ad:78:7c:59:fb:a1:cf:a6:
90:3d:3b:a6:c1:0a:fd:cb:0c:1d:ea:07:02:b2:23:
8f:8f:c1:fc:14:b2:bf:d2:76:09:88:ef:a0:5a:4f:
a1:f7:78:2e:c2:cb:39:35:26:2e:f6:88:26:37:4c:
5a:d2:f8:06:c0:e1:fa:f5:d2:d8:9a:36:34:8f:be:
16:57:b8:58:18:86:a2:3a:83:f7:2f:51:dd:31:83:
8d:ed:05:68:33:b8:dc:d7:84:db:0e:94:f9:a6:b2:
02:d0:b1:be:3f:b1:b3:e2:9a:37:e3:2a:e6:13:8c:
69:c1:e9:86:54:39:40:23:af:35:f4:08:22:12:df:
05:bf:3c:a1:7f:ad:e5:2a:e9:a2:c2:55:96:f7:45:
fd:b8:c0:d1:30:21:08:af:4f:48:43:5b:c7:88:ea:
d7:5f:43:66:e5:92:e4:66:0f:3f:87:4e:d1:b3:b5:
f5:32:4a:f6:25:60:86:9a:61:58:b8:f7:f1:1b:a7:
ac:05:1b:b0:56:7c:9d:7a:fb:11:15:fc:74:f2:85:
b9:4b:d4:68:bf:57:1b:75:a0:1a:22:4b:ac:66:5f:
6e:ca:fe:68:1c:ac:7b:cd:20:65:db:d6:7f:99:e6:
b2:34:ff:5c:e7:a8:55:2b:db:1a:83:99:42:48:dc:
82:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:68:A0:A9:06:18:8F:3E:17:05:93:8E:ED:68:07:74:60:43:37:92
X509v3 Authority Key Identifier:
keyid:9F:B6:D4:D9:87:D0:04:A0:0F:A2:97:E6:9C:26:8E:B7:5F:3D:9A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7bU2YfQBKAPopfmnCaOt189mkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/02400f-7802-44e7-8527-8b291e26d1d9/1/n7bU2YfQBKAPopfmnCaOt189mkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d3:e1:1f:84:62:c6:72:50:63:9d:ce:a8:83:f8:de:69:57:b3:
9c:fe:4b:62:a9:03:a8:cb:dc:98:80:23:9e:27:37:7c:dd:03:
d7:e7:a3:ce:92:63:48:79:ad:52:05:a5:43:47:1b:5b:37:02:
a2:a9:81:81:ba:17:b4:48:b3:c3:82:1c:d2:5b:15:31:c9:c2:
b9:8c:e8:af:93:cc:02:29:fa:5c:72:1d:d5:e4:0e:b6:8c:2e:
9e:11:56:67:c0:dd:05:51:31:28:ab:eb:e2:cd:61:f1:5c:d6:
b5:8c:88:91:ed:e3:bc:a6:cb:d3:d6:4b:28:0e:e3:71:20:5f:
21:72:4d:7d:ef:d4:fd:21:22:ad:4f:52:01:b5:63:7d:dd:90:
ce:e9:97:d7:38:7b:b9:6b:6f:8a:0d:e7:2c:44:51:73:8a:a2:
d2:e7:70:72:9c:41:35:1a:8e:49:f9:e1:05:1a:bd:4c:38:2c:
df:81:18:e3:13:6e:a2:96:2b:94:e0:85:27:a3:cf:9b:1c:75:
10:e3:fd:98:5c:dc:8a:c2:0c:8a:75:97:53:32:a8:44:c8:6f:
13:66:9e:76:11:02:15:87:89:32:a3:3e:a9:92:6d:03:e1:05:
06:e4:d4:34:10:d6:08:a2:75:6b:cd:6f:d7:d6:ac:26:55:31:
39:6f:04:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:49 2026 by rpki-client