Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier: Sp7AJno+0BsDU/I5w+WAdIRL8w32FASRNaHAACxLAmY=
Subject key identifier: EF:12:D6:1B:F9:83:8A:6D:F3:06:C4:8C:DD:F7:76:E2:8A:E8:9C:D4
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 019D390984841EBDDC67D1BF1D43AA732945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number: 152C
Signing time: Sun 29 Mar 2026 10:00:18 +0000
Manifest this update: Sun 29 Mar 2026 10:00:18 +0000
Manifest next update: Mon 30 Mar 2026 10:00:18 +0000
Files and hashes: 1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=)
2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: sdiTCAqfZP8OSs3ophTr7r2m/37Njmr9J/bLE0GCpo4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 10:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:84:84:1e:bd:dc:67:d1:bf:1d:43:aa:73:29:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Mar 29 10:00:18 2026 GMT
Not After : Mar 30 10:00:18 2026 GMT
Subject: CN=ef12d61bf9838a6df306c48cddf776e28ae89cd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:09:5f:04:84:c0:3b:d4:67:76:f9:2f:bf:fe:
a5:d1:74:26:f4:df:04:da:50:c3:22:8f:f0:ba:61:
67:c9:2b:9b:ec:d2:1e:ae:df:59:3e:89:e8:ef:f5:
69:1c:5a:39:39:35:a3:3a:8a:ba:5a:dc:95:40:c2:
35:75:c6:54:58:1e:cb:f1:4a:f7:ef:da:6c:c2:95:
ee:29:1b:cf:c5:61:04:a5:0f:be:6b:7e:6f:6a:26:
d9:00:57:47:fa:67:ed:fc:d8:3b:6b:d8:90:86:db:
66:43:09:fd:2e:7d:27:be:ff:c5:d1:75:7c:65:ec:
f1:9d:5e:89:f8:39:8d:7c:aa:83:22:d3:2a:fe:0c:
92:45:72:0d:94:a9:78:8f:5f:9c:a3:41:bd:87:92:
d6:fd:a8:59:02:a6:ae:42:24:a6:11:eb:2b:98:83:
1a:e6:49:37:3d:4c:cb:af:9e:6c:54:2e:c4:7e:8b:
be:90:cf:c4:0e:92:1e:b1:8d:48:ea:cb:f6:31:f1:
a8:f8:25:2b:34:eb:5f:91:a1:fa:67:58:97:a8:85:
45:65:93:af:47:2e:dc:5d:60:f4:70:fb:89:c5:02:
91:e2:72:48:f5:54:f0:ae:b5:ea:89:b5:e1:b0:ca:
4f:c3:f8:41:26:0f:9d:fc:f4:82:7e:88:2e:cb:d5:
21:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:12:D6:1B:F9:83:8A:6D:F3:06:C4:8C:DD:F7:76:E2:8A:E8:9C:D4
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:fe:34:62:fd:6e:04:ce:d0:3c:60:78:1a:79:a0:d8:73:52:
0c:82:64:8b:1e:0d:c3:2d:22:13:d4:81:c2:22:0a:d2:2b:ac:
4e:3f:62:d0:6e:b2:11:97:6e:2e:d6:c8:4b:58:b5:73:2a:64:
17:8c:c8:84:5a:c2:ef:09:39:06:58:6d:49:f3:8c:9c:dd:1c:
81:fe:4b:c5:19:33:d7:1c:cf:d9:33:40:a1:c5:50:38:31:02:
8b:d6:7b:73:04:f1:97:91:df:68:82:f1:e1:e2:95:40:98:a1:
06:a3:d9:1d:8d:a4:6d:fc:02:64:e6:3d:93:03:0b:94:48:38:
5c:7b:89:c2:7f:b6:af:ac:bd:43:3a:61:9b:09:f6:03:4d:a7:
81:c6:d2:f6:5f:3d:91:d6:ff:b1:df:40:1d:c5:a9:fd:ca:c0:
46:b6:2e:75:4f:fa:2e:59:b3:4a:8b:e4:93:8b:bc:5a:ce:be:
43:ac:32:11:77:c6:29:47:db:90:26:ab:9f:cd:09:1b:dd:37:
47:d0:41:2f:2b:15:1d:7a:49:bf:9b:17:cb:b7:5a:1b:d2:4c:
41:9e:dd:a3:35:33:b2:dd:13:10:dd:0d:27:3a:eb:23:99:c9:
9e:de:85:1d:d2:c4:65:1a:e9:2a:df:db:0c:07:85:d8:60:91:
8d:6c:66:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:13:20 2026 by rpki-client