Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
File: n9e3i11VWv7XZxyRbCbrf_x-LJo.mft (raw, json)
Hash identifier: 0MiWy+KoQoMHFUaNgVrdbWmHnMrWOMk2NLyrpDB0QS0=
Subject key identifier: D3:AC:66:61:78:5C:BA:F6:F5:B3:EB:2E:B9:0E:D5:2A:D3:9A:92:38
Authority key identifier: 9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
Certificate issuer: /CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Certificate serial: 019D3940D6CB330F79B06B61477F2059D4F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
Manifest number: 078B
Signing time: Sun 29 Mar 2026 11:00:43 +0000
Manifest this update: Sun 29 Mar 2026 11:00:43 +0000
Manifest next update: Mon 30 Mar 2026 11:00:43 +0000
Files and hashes: 1: n9e3i11VWv7XZxyRbCbrf_x-LJo.crl (hash: QLa5mUONPpd+kiCNFnHCTUkK2nQYR8Yd8OtXkQBntmc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:d6:cb:33:0f:79:b0:6b:61:47:7f:20:59:d4:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fd7b78b5d555afed7671c916c26eb7ffc7e2c9a
Validity
Not Before: Mar 29 11:00:43 2026 GMT
Not After : Mar 30 11:00:43 2026 GMT
Subject: CN=d3ac6661785cbaf6f5b3eb2eb90ed52ad39a9238
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:01:61:2d:a7:d8:f4:5f:4f:1e:64:b1:0f:32:
91:05:0d:0f:de:03:31:d0:9b:12:be:3f:6a:2a:e2:
14:91:e1:42:e5:0d:57:da:57:42:2f:1c:2b:e8:af:
92:28:66:0a:2e:79:e8:7d:8c:a6:de:84:e5:f5:5a:
06:df:f8:b0:29:12:55:04:f4:82:57:b5:6c:71:fc:
0b:9d:df:1e:d5:77:04:33:b0:a5:60:ae:3d:40:d6:
fa:09:12:4c:c3:1a:78:8b:c6:d6:40:4e:6e:74:44:
95:ac:30:42:b0:45:b3:26:23:1f:41:3b:ec:a1:4a:
44:a3:9f:6c:c5:b4:8f:bd:1c:b1:4c:90:4e:62:3b:
0a:ac:6e:d3:89:40:49:fa:73:86:48:36:94:39:5d:
f8:13:6f:e6:59:b9:bf:bc:cd:18:11:43:85:98:04:
6c:5c:d3:97:b5:d1:7f:f3:37:c5:d4:3d:e9:6d:02:
41:25:81:b3:f6:89:06:49:2f:ab:e0:c0:fc:05:c8:
01:bf:10:09:53:1a:63:5e:42:40:54:b8:c7:4e:b9:
06:ec:d6:2f:62:aa:54:5f:ed:5e:37:7f:d5:20:94:
8f:20:46:2e:98:ba:e9:6b:37:12:93:4e:f6:39:d2:
2b:76:75:12:25:57:49:b8:2a:61:d5:70:b9:a9:07:
25:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:AC:66:61:78:5C:BA:F6:F5:B3:EB:2E:B9:0E:D5:2A:D3:9A:92:38
X509v3 Authority Key Identifier:
keyid:9F:D7:B7:8B:5D:55:5A:FE:D7:67:1C:91:6C:26:EB:7F:FC:7E:2C:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n9e3i11VWv7XZxyRbCbrf_x-LJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/cd2d1f-501e-4383-901f-ce008b150ffe/1/n9e3i11VWv7XZxyRbCbrf_x-LJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:f8:30:70:3f:95:60:fd:d7:0d:44:22:10:b4:6e:2f:ee:eb:
e6:0c:60:73:e7:a9:f6:9e:5b:62:85:25:5d:47:c7:c2:01:db:
b4:68:42:56:aa:e3:64:f6:90:43:82:75:59:7d:17:27:bf:4d:
48:5f:94:05:52:4f:46:ee:40:53:50:de:be:ce:9c:f0:9b:d5:
b3:ed:62:1a:55:6f:cd:8b:96:33:88:75:10:01:4b:14:9b:86:
94:ea:63:47:8f:8b:fa:97:10:e3:70:b4:9e:77:f0:c4:25:b8:
be:16:67:f6:0d:40:d5:2e:ed:cb:4d:2d:90:36:39:6e:3d:01:
23:99:f3:23:2e:dc:a7:ac:dc:a0:9d:6a:10:b3:f2:8c:c5:7c:
97:a4:bd:71:9f:d7:74:6d:89:ac:57:25:36:63:8f:6a:c9:9f:
4d:c2:ea:0b:6a:9d:15:d4:5e:88:56:39:33:85:46:a9:d7:a2:
d3:cc:36:60:bc:af:0c:a6:ab:0c:50:6b:7d:39:a5:3f:37:f8:
c8:90:f8:d1:31:2e:80:de:2a:25:e4:9b:84:fb:30:f3:2a:d6:
c5:36:f0:81:c2:ef:d6:59:56:49:0a:db:24:6d:f3:08:7b:5b:
1d:23:69:71:b5:20:d4:6e:0f:09:95:3c:87:60:3f:d8:70:9f:
75:c7:47:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 18:35:49 2026 by rpki-client