Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: VwW/jieOyG3lT12MsdSKY9NPujRIB3D8ctprY7lFy/M=
Subject key identifier: AB:95:8F:23:A8:70:A9:7D:8B:81:E5:43:E7:C0:86:3E:BA:A7:1C:31
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 019DCFE31BDEFC242FDAA420F0241BA9252E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 18AB
Signing time: Mon 27 Apr 2026 17:01:00 +0000
Manifest this update: Mon 27 Apr 2026 17:01:00 +0000
Manifest next update: Tue 28 Apr 2026 17:01:00 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: ugVs7MsG8Kpm3ZyTpxChr4C4l/zVdShHBr8xQz69NgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 17:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cf:e3:1b:de:fc:24:2f:da:a4:20:f0:24:1b:a9:25:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Apr 27 17:01:00 2026 GMT
Not After : Apr 28 17:01:00 2026 GMT
Subject: CN=ab958f23a870a97d8b81e543e7c0863ebaa71c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:92:a8:5c:ab:b6:b8:f0:1b:aa:37:92:ca:b2:
b1:23:69:af:89:e9:78:d1:fe:08:d5:ff:7a:93:c6:
5b:ae:d3:af:5d:0d:38:6c:aa:ae:d2:aa:62:10:f7:
f5:0d:8a:82:f2:4f:97:ac:5d:7e:79:45:f4:5a:d0:
65:d1:7a:98:24:6e:dc:b6:6c:08:12:09:e1:65:63:
34:b1:13:56:b5:e2:45:16:20:76:5c:55:b6:0d:2a:
23:a8:04:1a:98:4f:bd:aa:6a:b1:9e:aa:44:ac:fe:
d2:64:34:43:37:8b:ee:f6:8b:f4:0e:f9:15:68:2e:
52:e2:56:34:1a:ba:f2:a4:e3:a3:9d:8d:11:8a:66:
e0:e9:1a:36:4c:41:6c:98:78:4a:3c:ac:94:6f:a6:
eb:fa:1a:dc:03:73:67:5b:fb:3b:f5:02:97:57:a5:
53:18:28:5b:3e:38:56:80:f6:a9:a3:26:11:27:bd:
cc:cf:98:44:aa:00:31:46:3d:79:2b:72:88:b7:e9:
c5:35:56:a5:71:2f:94:ec:86:46:57:a9:36:ef:93:
47:64:20:f9:74:05:e4:fb:88:de:ae:d2:f9:78:e0:
f9:b6:1b:2a:31:fd:fa:d7:8e:03:84:ce:71:3d:49:
91:4e:2b:92:55:03:68:d9:7f:6f:4e:cd:8e:83:b5:
cc:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:95:8F:23:A8:70:A9:7D:8B:81:E5:43:E7:C0:86:3E:BA:A7:1C:31
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:19:45:45:ca:6d:cb:00:da:7f:97:93:e4:41:f7:59:48:b4:
bf:35:dd:d8:b5:1a:8e:c2:a3:79:86:c1:93:f8:9e:99:d6:9a:
02:87:90:c9:ea:83:fe:33:17:db:9b:83:56:81:02:1d:1d:b5:
f9:05:4c:90:7e:dc:3d:66:19:3c:51:aa:62:6b:1b:a8:0c:4c:
36:e4:74:ca:20:f6:7e:ca:b6:94:42:18:4d:b6:4d:7f:36:4b:
00:3a:04:e7:e4:de:93:3d:b3:53:bb:48:9b:2e:87:6f:6f:4f:
d2:67:4f:e1:29:4a:cb:b4:5d:a4:fe:8d:06:31:86:e5:51:44:
01:b0:bc:9c:88:3f:48:38:1a:60:57:9f:21:05:c0:17:22:a0:
82:9c:ea:87:bb:5b:e0:1f:1e:1d:d0:d3:87:18:0d:ae:fe:76:
03:a4:30:ba:49:92:8c:fb:df:06:dd:e1:91:1d:c5:2e:f9:c5:
b7:fe:7c:61:45:d0:a8:92:a1:15:6c:8e:27:36:ae:b0:ce:f0:
cd:7b:03:99:eb:fb:f0:29:fc:08:3a:c8:6d:52:7e:e6:07:69:
fb:3c:46:a5:fe:3e:08:93:01:74:20:5a:17:65:75:cf:ea:cc:
4f:cc:bb:a5:b0:a0:75:f7:1d:22:5f:b4:6c:3e:b9:ca:94:a3:
89:db:72:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 00:30:30 2026 by rpki-client