Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
File: __N-YUS-f13ZOtubq9g9SNUYlP0.mft (raw, json)
Hash identifier: Ujioo6VNbo/WcrE2bnpdsPh9tL6kysSoFJ0ULRZ0oO4=
Subject key identifier: F9:DC:81:60:1B:8E:A3:AB:2F:39:95:18:52:1A:91:72:7C:C0:0A:17
Authority key identifier: FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
Certificate issuer: /CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Certificate serial: 019D382DCBFA5EDA07479113C830BC2D778E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
Manifest number: 1893
Signing time: Sun 29 Mar 2026 06:00:18 +0000
Manifest this update: Sun 29 Mar 2026 06:00:18 +0000
Manifest next update: Mon 30 Mar 2026 06:00:18 +0000
Files and hashes: 1: __N-YUS-f13ZOtubq9g9SNUYlP0.crl (hash: lHT03CWpc5MzdaC7GAClBnrCcAr21j4TM11klfitbak=)
2: h4f1U0CpFFDSHXynxae3wWiZYnM.roa (hash: bjAME8b4hx8ihQ73euWcNmN5HY/fjR8Ib6ZPO1ecoaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:cb:fa:5e:da:07:47:91:13:c8:30:bc:2d:77:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fff37e6144be7f5dd93adb9babd83d48d51894fd
Validity
Not Before: Mar 29 06:00:18 2026 GMT
Not After : Mar 30 06:00:18 2026 GMT
Subject: CN=f9dc81601b8ea3ab2f399518521a91727cc00a17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d5:09:64:47:11:b5:53:a0:13:f3:0f:98:81:
79:9d:5a:6a:17:19:7a:70:fc:bc:d0:f4:98:3a:e4:
2e:71:04:67:80:5e:ac:ad:18:20:2c:99:0e:70:6f:
99:f0:3c:80:6a:0a:c8:ba:63:17:4a:4f:6e:7f:e1:
4d:db:da:bf:5f:ab:6f:19:a3:c8:3c:7f:26:7e:94:
a9:8d:11:52:95:c1:3b:ff:c8:6f:74:49:c3:a3:88:
c2:8d:4d:3f:89:c6:7f:fa:89:1c:97:bb:e6:a1:e1:
0f:8e:68:ff:4d:a8:29:1d:65:6f:de:5f:7d:fd:9c:
d4:30:6a:e4:0c:53:e1:31:97:46:96:fa:9d:df:c2:
47:0f:dd:4f:b2:2f:95:e2:90:17:70:33:77:f2:05:
0d:88:35:f4:11:3b:b2:8a:82:c6:81:c1:d2:c1:ed:
a6:81:61:83:af:56:93:f9:c5:6e:24:9f:81:ff:18:
30:15:fb:37:b8:fc:8c:ae:f9:20:9d:6d:00:6e:d7:
71:ed:12:01:40:20:d0:4e:ab:56:7c:f8:f7:f4:d9:
1c:2a:0c:6e:89:bc:12:37:3b:cc:36:19:f5:1d:22:
0e:c8:7c:8c:5b:21:b8:bb:81:f3:8d:31:12:04:cb:
79:06:5e:fb:09:2e:61:ca:ae:93:ce:de:54:cb:cf:
d5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:DC:81:60:1B:8E:A3:AB:2F:39:95:18:52:1A:91:72:7C:C0:0A:17
X509v3 Authority Key Identifier:
keyid:FF:F3:7E:61:44:BE:7F:5D:D9:3A:DB:9B:AB:D8:3D:48:D5:18:94:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/__N-YUS-f13ZOtubq9g9SNUYlP0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/32fe0f-bcc9-42bc-9226-0bce80d4dff9/1/__N-YUS-f13ZOtubq9g9SNUYlP0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:31:fc:8e:76:63:17:46:df:14:e1:9e:9c:8c:b9:4b:b5:a6:
24:15:dc:5c:01:bb:52:46:cf:c6:41:9d:98:0c:1b:4f:40:65:
43:89:c4:cf:be:39:77:16:6f:a5:f1:3e:69:4f:19:dc:1a:3d:
78:36:a1:8b:17:57:e6:2a:91:fa:b5:3a:50:c1:ac:4f:32:ae:
ba:ea:6e:d4:23:1d:9c:d5:89:9c:c8:20:07:4d:a4:bc:3b:30:
16:1d:9e:d0:42:72:be:76:07:b4:db:55:98:c1:63:19:47:2b:
58:fa:fb:0c:10:20:1a:38:35:ca:c9:e9:be:20:c9:97:99:6d:
f5:84:d3:dc:77:b9:f8:32:bd:44:76:42:5c:31:bc:d1:66:8f:
85:bd:a3:00:cb:35:71:54:01:6d:d5:fa:5a:1e:a4:e7:32:dd:
5e:99:e0:92:fb:20:ed:ba:b8:bb:d6:c6:59:58:96:d1:b1:0a:
46:65:a1:68:97:2e:3d:53:aa:1b:e6:62:fe:39:c6:3c:35:72:
94:fc:5f:41:7a:fe:fb:a3:3c:ea:29:07:c0:34:37:72:90:79:
18:46:cb:47:03:e9:d4:c4:bc:f9:37:a8:bd:7d:27:85:2c:bb:
47:9a:ed:ff:2d:01:aa:3e:3a:02:ba:86:af:40:73:3b:a5:8c:
71:31:23:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:54:09 2026 by rpki-client