Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: lJlZcG+oPn/2rkUJut0u+FJWTZq3ypjQJrsdeH5sBTk=
Subject key identifier: 5B:22:A6:3B:61:B7:35:2B:56:8B:E3:B0:CA:28:69:C5:AC:B5:99:58
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 019D37C011AFEBD0DC8A200A0DBAAC5506A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 13F9
Signing time: Sun 29 Mar 2026 04:00:27 +0000
Manifest this update: Sun 29 Mar 2026 04:00:27 +0000
Manifest next update: Mon 30 Mar 2026 04:00:27 +0000
Files and hashes: 1: jrXfTMtV6H8gigUiywKcsYuAQWc.roa (hash: mgcQY3R0XYxNLA95issP8LL8M3tboWLY7IU4hd9EG4w=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: BUSuMdL7SiZlBgLSsPEUPLfOd5Nt1RHfnzKmikvi9nI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:11:af:eb:d0:dc:8a:20:0a:0d:ba:ac:55:06:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Mar 29 04:00:27 2026 GMT
Not After : Mar 30 04:00:27 2026 GMT
Subject: CN=5b22a63b61b7352b568be3b0ca2869c5acb59958
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:a2:f2:91:f6:44:1c:0b:b6:2c:23:78:9d:71:
41:8c:a6:40:b9:4e:d7:99:dc:1d:bd:e9:de:80:5c:
d3:ea:80:60:53:97:54:04:b3:16:dc:0f:6c:06:e8:
16:22:39:21:97:a3:b8:a3:5e:8d:4c:d8:9f:7c:5b:
90:b4:7a:7a:4a:b4:59:85:77:69:cb:62:ef:04:68:
ce:70:0b:23:1d:1a:43:97:bd:b2:0e:2e:92:c1:cc:
9d:9a:71:f7:df:e2:d1:db:2d:e3:d4:dd:30:b8:70:
05:d4:9f:c8:4c:49:35:3b:1f:82:64:60:59:3a:0c:
e8:70:fb:e7:f6:ce:63:d9:91:70:24:f2:2d:c5:23:
6e:75:4e:f6:5c:aa:9d:fd:b1:39:05:f4:f6:94:bf:
ba:c4:49:51:9c:25:f6:9f:60:15:f0:5d:30:c9:ac:
12:ec:bc:be:ae:2e:ad:58:21:65:f7:a7:0f:2d:1a:
20:22:9f:c8:1e:c0:91:67:05:45:f6:5d:99:e9:5f:
48:6b:38:f1:36:6c:fa:4b:e5:a2:25:15:c6:2c:28:
70:70:3b:4f:05:77:f6:9a:2e:8f:56:2f:2f:c7:a1:
d0:cf:c9:7e:0e:8a:12:a5:1b:1d:5f:b1:ad:c3:a5:
62:fb:b2:f2:60:8b:77:ac:d1:52:13:e8:cf:9b:9e:
ee:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:22:A6:3B:61:B7:35:2B:56:8B:E3:B0:CA:28:69:C5:AC:B5:99:58
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:e0:5e:23:40:5e:d4:5d:56:0e:b2:ef:69:b9:a1:6d:cf:3b:
a5:1b:c5:3f:3b:31:7c:b9:d9:c9:65:a7:6b:2e:9e:5e:95:f4:
c8:de:28:2e:05:dd:1c:e3:ac:bf:03:d3:6e:74:cc:52:3f:dd:
3e:6c:42:8f:ce:bb:e2:01:8d:ff:6d:93:4c:d1:b1:62:26:9d:
2c:10:a3:2a:af:f0:c7:0a:69:f8:af:81:02:98:48:fa:06:20:
c2:4c:e7:5d:2f:3a:96:7b:ab:3e:07:b5:f3:de:47:ba:e3:73:
d6:b9:4e:26:72:5d:62:0d:56:f4:03:9e:87:48:3f:32:f4:d8:
e1:48:66:77:4d:bc:67:07:e7:95:c0:85:0e:11:b8:00:c5:60:
cf:29:cb:c6:f9:1c:d5:81:cd:74:e7:ed:23:ef:c5:43:3e:b7:
d5:86:4b:cf:bd:8b:fc:a6:37:ea:a8:9d:ba:40:eb:a1:c1:21:
40:64:7c:fd:72:84:c1:d1:e4:a6:b2:f4:9f:fb:ee:e5:13:c9:
09:7e:f3:86:66:9d:ab:e6:20:9d:d5:5c:6d:78:72:df:7a:03:
a5:e0:b9:75:37:29:bb:09:f5:d7:dd:d7:e4:8f:4b:ef:f3:36:
1d:8d:86:ff:8c:12:fa:57:d7:99:0b:6c:58:a1:62:65:07:af:
61:28:ad:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:02:01 2026 by rpki-client