
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
File: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft (raw, json)
Hash identifier: wp3KFAzSQkb1N7gt2XBHHTY74Yb8zRum7AEoWZd8xzo=
Subject key identifier: 9F:50:66:7D:0D:3C:BF:DA:57:7A:CD:C1:0C:D4:2B:30:4F:68:53:9E
Authority key identifier: FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
Certificate issuer: /CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Certificate serial: 019D386556834C611BDBF32C456371207EA9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
Manifest number: 0343
Signing time: Sun 29 Mar 2026 07:00:58 +0000
Manifest this update: Sun 29 Mar 2026 07:00:58 +0000
Manifest next update: Mon 30 Mar 2026 07:00:58 +0000
Files and hashes: 1: _Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl (hash: kZKCyZ1rANPZMx95ldlFcrsmZlK8s5EnkBgeBxpAOls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:56:83:4c:61:1b:db:f3:2c:45:63:71:20:7e:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7399f87470c3ea4e4dfd697a98ae2bd026f9c
Validity
Not Before: Mar 29 07:00:58 2026 GMT
Not After : Mar 30 07:00:58 2026 GMT
Subject: CN=9f50667d0d3cbfda577acdc10cd42b304f68539e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ab:cc:45:a8:7a:66:e9:7a:08:7c:00:62:10:
a9:96:5d:86:ea:86:63:0b:46:32:6a:b7:f7:46:c8:
42:5e:c9:f5:a2:bc:1b:33:cf:8c:fe:db:d2:00:04:
18:c6:bd:d2:e6:4c:89:a7:d9:87:0d:28:85:52:b8:
60:56:ae:fd:39:23:ec:f4:58:80:cf:9c:aa:2b:00:
1a:4f:52:7b:bb:0e:69:40:a4:11:75:f1:33:89:46:
a5:bc:82:b4:35:8e:5d:ad:ee:cc:c4:dd:7d:45:1d:
ce:f5:5b:5b:03:df:0a:65:92:c7:5b:ea:f2:aa:f0:
d2:55:6a:46:26:3e:10:3f:35:52:ab:b7:32:89:f5:
3b:91:d5:61:f6:e3:ac:00:11:43:fb:aa:4b:5e:6e:
f0:1c:65:1c:99:64:fd:9d:02:e6:53:a0:c2:70:50:
c2:61:ce:14:fa:28:e2:0d:42:4b:5d:41:50:5b:17:
d7:c6:f0:da:19:ba:a4:4e:7b:5b:c8:ca:17:23:09:
2a:91:11:0e:a4:93:52:e6:7c:45:34:59:7a:3c:ab:
52:77:07:18:41:35:61:dc:b1:3f:01:c5:2e:7c:65:
a2:32:e8:40:3c:3f:ff:d3:a9:24:bd:2f:08:b6:8a:
aa:b1:74:3f:c4:1c:dd:22:d1:c8:70:fc:c8:5c:48:
14:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:50:66:7D:0D:3C:BF:DA:57:7A:CD:C1:0C:D4:2B:30:4F:68:53:9E
X509v3 Authority Key Identifier:
keyid:FC:D7:39:9F:87:47:0C:3E:A4:E4:DF:D6:97:A9:8A:E2:BD:02:6F:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/6e8816-552b-4996-9fc4-de90e9e3cc32/1/_Nc5n4dHDD6k5N_Wl6mK4r0Cb5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:4e:7a:5d:14:a8:9b:7d:a5:30:0d:42:46:d4:02:db:10:17:
22:bd:c9:65:fc:1d:70:05:fa:81:68:77:d2:49:e2:26:34:c2:
29:94:e5:50:99:90:d1:75:22:e5:02:a6:19:86:74:09:a0:91:
4b:56:1c:1a:fe:81:b0:12:0a:cf:e0:b6:84:f2:2f:3e:0f:2c:
d8:8a:23:6d:1b:bc:91:35:cb:f5:47:96:3f:0e:f5:40:4c:ac:
88:81:6d:27:c1:c7:90:a4:fc:9d:a9:8a:4f:a3:94:49:38:21:
22:e3:9b:c0:54:15:55:99:1a:48:ee:69:06:6b:7d:78:22:36:
79:4a:a5:2a:0a:08:ad:2e:fb:ea:d9:6a:49:5f:aa:55:f3:42:
6b:2f:37:a1:15:7a:95:05:da:8c:96:55:c8:89:c1:11:7d:6a:
3c:43:aa:bb:23:0f:f9:28:75:76:49:6b:f7:e5:16:7f:30:77:
67:f1:4e:80:33:31:a2:32:d6:05:ef:49:ff:e9:15:41:e8:07:
c5:c7:51:67:22:2c:f0:02:df:d4:3b:2b:de:72:ca:b5:e2:7e:
82:82:f2:b5:14:0e:ce:3f:5e:ae:e9:f2:83:ba:fd:05:22:8a:
a5:02:6b:09:19:05:6b:b3:9b:95:e5:69:42:56:e0:ea:98:1a:
e0:df:c2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:42:37 2026 by rpki-client