Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
File: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json)
Hash identifier: j5IfTx9YdGOeB4KX0PIUjM4l6ClvWSxXh8H+FPxTHl8=
Subject key identifier: B4:5F:F8:76:E1:DD:C7:52:06:82:CF:9F:EE:4E:CD:11:96:31:FD:D4
Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Certificate serial: 019D3909ABAF01344E7F19386C1EAAE3029E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
Manifest number: 0139
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: MDrbORic-T38FR83kdivFTffx_U.roa (hash: 0rj1HAHMfMHh1ezQi/n9W4biWte5hyp/X9lG/Kaw1f4=)
2: TayBP7whOn8uG-iZTgalyiKPGes.roa (hash: P7tnKReQ+Y3epX8ceT4jhZXneWQc4RVJRl4N9gsisuk=)
3: bJB2KlYnnSQctiMVw5LEcI6puPE.roa (hash: NI9BvmeAMx8yGHKi/OTTLd4uTBAvPT7/AwZXssX4nIQ=)
4: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: BYpmFuxLip71adfbaLl4LP7Ov0zIliClKw4yL4fNzxA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ab:af:01:34:4e:7f:19:38:6c:1e:aa:e3:02:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=b45ff876e1ddc7520682cf9fee4ecd119631fdd4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:fd:e0:6c:86:88:87:56:f2:75:2e:4f:68:8f:
27:92:1f:7e:7f:40:18:a3:f4:22:f1:44:ae:22:af:
9e:d8:5c:2c:cb:e1:18:11:37:26:ba:12:d5:20:c4:
a5:b0:54:54:e1:e9:b3:ea:6a:76:b6:30:43:75:5d:
1d:55:fc:5c:a8:49:06:1c:04:8f:e8:98:8c:9b:c9:
dd:42:e0:1f:88:76:bb:74:5d:3e:dc:bf:9b:b1:a7:
33:78:51:97:de:84:13:38:44:3a:f1:65:e1:c3:ee:
28:d6:59:5b:d5:f4:13:2d:6e:ce:04:b6:eb:8f:03:
47:13:46:b6:aa:eb:f4:ad:79:6d:06:1c:40:ca:67:
9b:46:f2:0f:e1:87:b5:a2:4b:da:28:cf:94:31:63:
69:97:9b:a2:40:8d:ab:f4:16:19:59:ac:de:67:a7:
5f:26:40:2d:6b:36:e3:3a:34:7c:c8:69:d2:53:fd:
f8:d9:84:0a:37:60:1f:71:b8:9e:ea:f6:fb:27:ce:
6f:d6:a5:f4:a2:e2:3f:9e:ef:2a:1b:8f:d9:57:4b:
12:dd:d7:52:57:0b:d7:7e:f1:87:e4:a2:ba:0f:87:
69:17:bf:95:a9:0a:11:55:a0:76:f1:c7:e6:d6:aa:
4a:29:78:e3:6b:02:47:17:21:4d:a7:57:ee:ee:72:
75:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:5F:F8:76:E1:DD:C7:52:06:82:CF:9F:EE:4E:CD:11:96:31:FD:D4
X509v3 Authority Key Identifier:
keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:54:ad:b7:eb:d7:8f:3b:9f:43:0e:80:50:14:d2:4d:79:c9:
de:3e:24:d1:37:26:e3:41:13:05:12:a2:cd:a8:35:98:f1:e0:
3b:21:ce:54:8a:cc:0d:d3:79:58:f8:a4:a3:78:84:2a:73:7f:
ec:98:33:3a:fc:60:c4:84:12:7d:28:28:76:12:89:a7:05:95:
d5:22:1b:c0:25:e7:3a:90:a3:89:13:a7:50:84:8f:87:75:21:
65:a4:ae:5e:53:70:5b:8a:7c:f4:83:eb:22:cc:80:77:29:c3:
38:e6:d1:70:87:bd:70:ff:f9:78:90:92:e6:b4:88:13:a1:a4:
30:8f:c6:b5:87:fa:63:5e:e4:5f:dd:68:4e:b7:09:f5:3b:41:
cb:36:28:27:6e:bf:fb:f3:90:fe:08:4b:ed:6f:67:0b:89:6f:
6f:97:a0:e3:01:0c:6d:8c:3f:e3:4c:df:12:a8:07:84:e8:09:
51:de:a9:06:8b:c0:50:17:06:9d:db:15:79:fc:e8:0e:2a:ef:
55:e4:18:b3:b7:80:7d:18:14:85:b1:ef:46:8f:81:f8:72:47:
79:c3:7c:e3:c2:e6:5c:2a:cf:8d:c5:79:b5:33:ac:9d:85:dc:
25:80:c9:aa:95:7d:bd:a7:e7:9b:35:cf:42:17:ca:2b:0a:c4:
df:15:49:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:36:05 2026 by rpki-client