Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
File: n7jb0z1dO8T6Nknt9_kU6uejiF0.mft (raw, json)
Hash identifier: H9cFhohkRqaRUA7S8eaLuNXrbDPvGalkUD3sM85x1h8=
Subject key identifier: 65:C8:63:FF:64:38:F9:E3:5D:82:7E:5C:75:65:87:96:8F:B0:17:93
Authority key identifier: 9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
Certificate issuer: /CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Certificate serial: 019D38662D5B287EB7839F6BF4DD37A823A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
Manifest number: 0603
Signing time: Sun 29 Mar 2026 07:01:53 +0000
Manifest this update: Sun 29 Mar 2026 07:01:53 +0000
Manifest next update: Mon 30 Mar 2026 07:01:53 +0000
Files and hashes: 1: n7jb0z1dO8T6Nknt9_kU6uejiF0.crl (hash: fUtfFjVvh2srWOZpYV01ki3QhzSEcm38EwtjqB9Y3Ig=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:2d:5b:28:7e:b7:83:9f:6b:f4:dd:37:a8:23:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb8dbd33d5d3bc4fa3649edf7f914eae7a3885d
Validity
Not Before: Mar 29 07:01:53 2026 GMT
Not After : Mar 30 07:01:53 2026 GMT
Subject: CN=65c863ff6438f9e35d827e5c756587968fb01793
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c1:b8:40:0c:a2:a3:c4:80:40:80:ca:92:c9:
c5:b7:01:fa:17:fe:1e:c5:f2:35:81:ea:9d:e6:f6:
4c:44:25:e3:df:5d:6b:62:d1:a8:f9:f7:57:36:05:
7f:01:e1:7b:78:e6:22:65:b9:e0:8e:53:5b:2c:1e:
e1:92:b9:9b:3e:e1:6c:2b:6d:19:9f:84:8e:a2:ea:
d6:04:fa:c1:ae:df:44:23:ff:6e:69:ec:b9:1d:fa:
d9:1a:d8:5e:c7:cb:e4:25:c2:1d:25:f6:62:75:ae:
0b:7b:5c:24:b4:2a:7e:73:d9:89:dc:ec:3b:cc:6b:
fc:0c:e6:c1:d8:3f:c8:24:cc:16:03:c9:84:5f:78:
f9:49:35:f1:25:16:03:22:52:0c:f8:3a:d4:cd:f7:
1c:6b:89:37:f5:34:d7:de:2b:d2:25:e8:52:66:90:
d6:83:bd:34:d6:20:84:97:e5:ce:df:40:60:16:d6:
7e:2a:dc:b3:6d:94:66:22:f1:b1:57:84:9b:4e:8d:
81:78:4f:bd:ba:dd:90:be:35:86:6a:ed:21:40:aa:
da:97:6a:d7:40:56:18:79:b8:26:10:8c:61:15:d5:
31:78:9f:53:a0:45:05:9b:9a:0d:cd:32:b2:d0:85:
af:a1:b1:e8:05:49:8d:0a:54:da:6a:0e:ff:b7:51:
4f:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:63:FF:64:38:F9:E3:5D:82:7E:5C:75:65:87:96:8F:B0:17:93
X509v3 Authority Key Identifier:
keyid:9F:B8:DB:D3:3D:5D:3B:C4:FA:36:49:ED:F7:F9:14:EA:E7:A3:88:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7jb0z1dO8T6Nknt9_kU6uejiF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ad0f8d-a5e7-40b3-b8a8-7362b19de73e/1/n7jb0z1dO8T6Nknt9_kU6uejiF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:c3:27:15:8e:b0:05:06:f2:2e:c0:54:2a:f8:c8:fc:b2:8a:
92:bf:cc:28:d7:a9:c7:15:5e:0e:8f:77:0b:dd:c4:18:cd:cc:
e9:64:d8:90:85:c2:c3:83:af:52:5a:29:3d:45:dc:c3:f3:f8:
a9:5b:31:b7:7d:2c:cb:96:11:95:8a:81:81:de:e3:64:dd:d6:
1a:9d:d5:e3:e5:7d:a1:ee:95:b2:07:62:13:21:05:e9:78:a7:
08:ec:8b:d0:c7:d0:d9:52:d3:87:81:2e:9d:fd:72:40:fe:7e:
d3:89:4a:d8:59:7d:c7:6f:9c:5b:29:b6:dd:f6:36:9e:1d:68:
9d:ba:05:cf:1d:5a:2c:75:6c:be:eb:67:f8:05:82:67:fe:24:
96:88:d4:97:b3:34:0e:46:7c:b7:02:51:3b:a4:34:d2:45:46:
d2:2c:77:9a:5e:06:19:1c:ec:a1:0b:70:17:c4:f3:88:79:a2:
7b:54:12:a0:17:4f:1e:8e:26:fb:86:3c:1e:36:13:b1:e8:14:
ea:8f:73:44:ab:a2:2f:9d:a1:82:8b:e9:61:da:ec:6c:fd:9d:
13:72:d1:1d:64:91:98:19:01:96:2a:0a:16:68:71:98:e5:ab:
ae:aa:61:15:1b:c6:20:f8:64:e0:f5:d4:aa:99:29:ce:bf:76:
69:05:11:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:58:20 2026 by rpki-client