Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
File: n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft (raw, json)
Hash identifier: iWDuKSNsXcM2s7/KyiurKbEDxLKIDsIbKZhxWm1xQH8=
Subject key identifier: 46:4F:56:0F:BE:7B:7C:E2:2D:AC:1E:CE:D0:1F:38:15:FC:77:90:A3
Authority key identifier: 9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
Certificate issuer: /CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Certificate serial: 019D394086518CC97FFBB1289CC3A6614657
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
Manifest number: 0CFD
Signing time: Sun 29 Mar 2026 11:00:22 +0000
Manifest this update: Sun 29 Mar 2026 11:00:22 +0000
Manifest next update: Mon 30 Mar 2026 11:00:22 +0000
Files and hashes: 1: 3YrPqOPm2HTyKR3X-5RSXy5Hk4U.roa (hash: 5vGo/rzHCgJgztw1UHKfY47yWsIJL5OxKuVDeP97MLA=)
2: n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl (hash: EJ9hIwoUDF9lQq63EDycnrGRiduLfp+4zmhOis2jDeM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:86:51:8c:c9:7f:fb:b1:28:9c:c3:a6:61:46:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8a3c9a9edf644735a94eb09f01cab39855d278
Validity
Not Before: Mar 29 11:00:22 2026 GMT
Not After : Mar 30 11:00:22 2026 GMT
Subject: CN=464f560fbe7b7ce22dac1eced01f3815fc7790a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:ad:8e:19:f1:08:51:59:ed:ea:0e:7d:5b:f5:
8d:6d:65:c9:01:41:db:96:66:da:35:4a:78:c1:f2:
5b:f6:74:cf:07:ed:a7:0b:7a:4c:57:05:6c:2b:87:
b8:5b:29:46:71:3a:37:62:24:be:1e:95:db:22:22:
28:7d:24:ed:f0:27:14:0f:0e:39:85:1a:7f:bf:d9:
6f:1e:a3:eb:ce:75:7a:8a:06:ef:38:0c:e8:e9:3c:
4d:55:3c:97:f0:99:a0:a2:96:a6:a8:1f:9b:2b:e4:
70:69:87:54:a3:46:13:1c:fd:6c:16:ae:0c:8a:a3:
e3:aa:14:05:b1:42:d7:67:04:8e:b0:a2:29:8e:07:
f9:c7:9a:f3:6f:2f:7d:0d:40:28:41:0c:48:49:79:
8d:11:4e:67:27:99:a1:0b:a9:ca:3c:15:77:35:f1:
bf:26:9f:51:13:01:cc:39:1c:18:77:06:e2:85:15:
b5:e7:cf:20:8f:a4:c8:3c:ae:44:84:58:53:83:41:
8f:3e:50:08:8e:27:cd:55:d9:a7:41:0c:e1:51:ca:
73:a7:62:af:e6:39:d2:9e:e5:cb:98:c2:32:dc:3d:
31:31:4f:19:0c:66:8f:02:d8:ec:a3:4e:6b:8f:cf:
80:b9:e0:73:d7:2e:c1:a5:30:3a:24:8d:e5:a1:96:
fb:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:4F:56:0F:BE:7B:7C:E2:2D:AC:1E:CE:D0:1F:38:15:FC:77:90:A3
X509v3 Authority Key Identifier:
keyid:9F:8A:3C:9A:9E:DF:64:47:35:A9:4E:B0:9F:01:CA:B3:98:55:D2:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4o8mp7fZEc1qU6wnwHKs5hV0ng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a17b93-cc89-4d08-a5b2-636d6fc0048f/1/n4o8mp7fZEc1qU6wnwHKs5hV0ng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:62:82:29:90:b4:1d:a2:ce:15:5f:bf:9d:aa:37:42:5c:f7:
90:2f:c8:df:71:1b:f0:77:3c:a8:28:8e:ed:d3:08:cc:63:bb:
75:d9:09:35:44:2c:36:17:72:a7:6a:b0:f9:81:39:46:46:ba:
67:e9:6d:c1:4c:6e:89:a4:45:c2:30:45:e5:f3:dd:40:89:a0:
40:1f:53:2e:4d:83:5a:48:97:49:4d:c4:d6:72:ab:0e:04:8d:
61:aa:90:01:0e:7e:a8:a0:1c:fd:e4:8f:f6:5b:db:6e:85:b1:
2b:e6:16:ae:9d:de:e3:98:b2:61:22:c7:6e:2d:5a:7a:84:83:
3c:58:57:38:75:0a:8d:87:b6:92:bb:ff:88:4b:03:20:ba:3d:
a3:78:b6:ad:41:af:e5:8b:73:d8:40:11:ae:eb:cd:91:68:03:
09:65:4c:c4:73:ef:57:6b:ed:4b:6c:14:4f:1f:63:09:7a:06:
3e:c7:50:52:80:e2:c4:37:f4:b9:02:63:52:a4:d9:b7:f2:c1:
4c:b6:88:6b:bb:ab:0d:3c:1a:2d:d0:32:d6:c6:64:a5:bb:21:
9d:03:1c:c8:9b:f7:35:cd:ec:7b:b7:82:4a:de:bf:e3:65:6c:
7c:12:2d:14:7d:a9:20:b7:6d:02:f7:96:4c:5d:98:02:80:f8:
b4:93:5a:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:50:33 2026 by rpki-client