Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
File: n6c21GmBzkhjlN_vnHOLfr62Gm0.mft (raw, json)
Hash identifier: ODREbXfHYVqlbbGZK/tKAXuCUww66gq2LxDK3qrk9DU=
Subject key identifier: 71:03:FF:83:30:DD:DB:3A:A8:25:3B:DA:08:D8:AC:3D:73:A8:27:4D
Authority key identifier: 9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
Certificate issuer: /CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Certificate serial: 019D3977C28B2DF7D4AFB73C114C6FFFA652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
Manifest number: 1485
Signing time: Sun 29 Mar 2026 12:00:43 +0000
Manifest this update: Sun 29 Mar 2026 12:00:43 +0000
Manifest next update: Mon 30 Mar 2026 12:00:43 +0000
Files and hashes: 1: XF1Nc0TElShdxgSlTTRramDytfo.roa (hash: 2x0djNsK99Aex80NEk4TpsPuhlZgzcphXHvm3HIeB7I=)
2: n6c21GmBzkhjlN_vnHOLfr62Gm0.crl (hash: RzbIxj99YZVsd5an9IRZsvWUSYqW2YS0797xP5YE+P8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:77:c2:8b:2d:f7:d4:af:b7:3c:11:4c:6f:ff:a6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa736d46981ce486394dfef9c738b7ebeb61a6d
Validity
Not Before: Mar 29 12:00:43 2026 GMT
Not After : Mar 30 12:00:43 2026 GMT
Subject: CN=7103ff8330dddb3aa8253bda08d8ac3d73a8274d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:b6:12:54:b4:c4:94:31:4d:51:68:e3:bd:d2:
b9:52:cf:62:ea:fa:f9:84:9d:ea:a0:d9:f3:b7:aa:
0f:00:a3:8e:03:95:46:60:eb:bf:25:46:46:bf:1f:
ff:0c:46:0c:95:8d:21:b3:cc:ae:64:f2:86:3e:9f:
2e:44:5b:91:1c:22:67:14:d8:58:23:eb:c3:6f:c4:
f7:17:ab:f0:1f:48:b4:35:ca:23:95:6a:86:c2:7a:
97:7b:5f:63:13:b4:97:9a:dd:b6:20:a9:9c:c8:b7:
ff:d5:12:46:30:4e:ed:b6:01:14:e0:a7:47:f5:7b:
40:56:9a:ad:90:a4:30:53:20:ae:87:64:61:1b:c0:
65:09:ef:a0:8d:fe:7b:2e:82:19:dd:5d:4e:fa:39:
72:fb:37:5b:a5:68:76:3e:db:8a:72:37:dd:f1:f7:
44:f5:9c:05:88:fd:28:8a:38:94:18:97:79:89:1b:
30:4e:15:de:26:d0:a8:bf:0c:76:b6:43:a4:89:c5:
b2:78:e6:3d:e1:d8:27:e3:5f:dc:8b:a8:15:b2:29:
95:cd:71:2c:82:26:9b:14:24:77:14:eb:2f:e6:05:
43:13:a2:e5:b5:c5:cc:93:9d:00:4e:b7:f6:77:49:
65:1d:df:94:8b:5a:0c:d9:ac:ff:ac:38:45:b3:4f:
5d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:03:FF:83:30:DD:DB:3A:A8:25:3B:DA:08:D8:AC:3D:73:A8:27:4D
X509v3 Authority Key Identifier:
keyid:9F:A7:36:D4:69:81:CE:48:63:94:DF:EF:9C:73:8B:7E:BE:B6:1A:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6c21GmBzkhjlN_vnHOLfr62Gm0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/4d74d9-6c4c-4b14-815f-d262803cf644/1/n6c21GmBzkhjlN_vnHOLfr62Gm0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
af:d3:3d:ed:12:6b:19:98:f8:2c:80:e8:24:ce:43:ee:5d:41:
d6:dd:c9:af:af:c5:27:36:af:e8:3b:16:08:c3:0f:10:55:60:
a1:60:32:48:d9:35:ef:e5:53:90:fa:22:0b:3e:07:90:c1:ff:
2c:b7:a3:e8:e5:e4:84:24:17:89:3c:24:a2:f3:cd:49:62:08:
79:d7:76:5f:49:cc:37:4a:4e:b2:98:9e:a5:c5:a6:73:24:20:
7f:4b:31:d1:aa:63:4c:05:39:53:0d:5d:10:c6:3e:4e:f3:79:
f0:89:cc:ca:97:7c:ba:23:37:1c:30:7d:ab:d1:68:da:dd:97:
c2:c8:3d:55:92:bb:16:24:91:44:dd:d9:ee:87:6a:ed:2b:eb:
82:79:1b:44:1b:00:8a:8f:96:54:bf:89:11:da:8f:e2:d2:9d:
e1:e3:7c:03:fa:7a:a9:c7:66:0c:70:68:f1:42:02:18:6f:38:
13:cc:dc:e8:0e:3a:36:36:57:ce:b2:57:4c:92:06:e3:68:1b:
51:44:eb:54:e0:67:3f:ab:cc:86:96:2c:47:73:df:1b:cb:1a:
e9:6c:cd:1d:5a:04:86:81:9d:26:11:b1:af:a2:1f:16:50:21:
5d:02:82:14:8f:90:b0:a7:d3:02:db:14:1c:b2:66:b7:05:ac:
b5:fd:cc:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05d8KLLffUr7c8EUxv/6ZSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmYTczNmQ0Njk4MWNlNDg2Mzk0ZGZlZjljNzM4YjdlYmVi
NjFhNmQwHhcNMjYwMzI5MTIwMDQzWhcNMjYwMzMwMTIwMDQzWjAzMTEwLwYDVQQD
Eyg3MTAzZmY4MzMwZGRkYjNhYTgyNTNiZGEwOGQ4YWMzZDczYTgyNzRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbYSVLTElDFNUWjjvdK5Us9i6vr5
hJ3qoNnzt6oPAKOOA5VGYOu/JUZGvx//DEYMlY0hs8yuZPKGPp8uRFuRHCJnFNhY
I+vDb8T3F6vwH0i0NcojlWqGwnqXe19jE7SXmt22IKmcyLf/1RJGME7ttgEU4KdH
9XtAVpqtkKQwUyCuh2RhG8BlCe+gjf57LoIZ3V1O+jly+zdbpWh2PtuKcjfd8fdE
9ZwFiP0oijiUGJd5iRswThXeJtCovwx2tkOkicWyeOY94dgn41/ci6gVsimVzXEs
giabFCR3FOsv5gVDE6LltcXMk50ATrf2d0llHd+Ui1oM2az/rDhFs09dqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHED/4Mw3ds6qCU72gjYrD1zqCdNMB8GA1UdIwQY
MBaAFJ+nNtRpgc5IY5Tf75xzi36+thptMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYt
ZDI2MjgwM2NmNjQ0LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC80ZDc0ZDktNmM0Yy00YjE0LTgxNWYtZDI2MjgwM2NmNjQ0
LzEvbjZjMjFHbUJ6a2hqbE5fdm5IT0xmcjYyR20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAr9M97RJr
GZj4LIDoJM5D7l1B1t3Jr6/FJzav6DsWCMMPEFVgoWAySNk17+VTkPoiCz4HkMH/
LLej6OXkhCQXiTwkovPNSWIIedd2X0nMN0pOspiepcWmcyQgf0sx0apjTAU5Uw1d
EMY+TvN58InMypd8uiM3HDB9q9Fo2t2Xwsg9VZK7FiSRRN3Z7odq7SvrgnkbRBsA
io+WVL+JEdqP4tKd4eN8A/p6qcdmDHBo8UICGG84E8zc6A46NjZXzrJXTJIG42gb
UUTrVOBnP6vMhpYsR3PfG8sa6WzNHVoEhoGdJhGxr6IfFlAhXQKCFI+QsKfTAtsU
HLJmtwWstf3M/g==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:24 2026 by rpki-client