Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
File: n98bEcryuCRFMXghJa6TOudpn3Y.mft (raw, json)
Hash identifier: nYE3mr3iIB4BIYELSTDNiYYDpEZa+PO8LKxPfGXX9xE=
Subject key identifier: 87:8B:29:1F:FF:0B:7B:72:63:DC:9B:5D:2B:33:2A:A1:75:E4:12:BA
Authority key identifier: 9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
Certificate issuer: /CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Certificate serial: 019CE259E9123AAE12220F574F352480364E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
Manifest number: 1830
Signing time: Thu 12 Mar 2026 14:01:09 +0000
Manifest this update: Thu 12 Mar 2026 14:01:09 +0000
Manifest next update: Fri 13 Mar 2026 14:01:09 +0000
Files and hashes: 1: n98bEcryuCRFMXghJa6TOudpn3Y.crl (hash: KcoXf0PGfpwFaB6xCg1L2u+BlZb5c3cOGeufFqx+ZH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 14:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e2:59:e9:12:3a:ae:12:22:0f:57:4f:35:24:80:36:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fdf1b11caf2b8244531782125ae933ae7699f76
Validity
Not Before: Mar 12 14:01:09 2026 GMT
Not After : Mar 13 14:01:09 2026 GMT
Subject: CN=878b291fff0b7b7263dc9b5d2b332aa175e412ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ff:08:19:da:af:69:a9:e7:d7:4f:89:50:e9:
d4:ba:f5:98:85:a3:59:dd:c2:10:6d:18:dd:bf:d6:
64:b8:38:af:45:cd:71:18:fd:25:b8:8a:64:b7:48:
00:90:6f:20:d4:b9:51:de:e1:9d:3d:26:eb:45:40:
f2:db:4f:6d:32:5c:28:91:ea:10:4e:85:57:e8:50:
da:67:fa:77:ec:0a:8d:78:3f:86:4b:09:71:f0:5c:
6d:41:71:29:d8:d6:9e:d2:58:05:d1:ec:ec:68:27:
52:d7:97:33:d7:e7:c1:7a:71:fe:fd:c0:15:15:2f:
b3:54:a9:62:e2:9a:15:9f:cd:ec:6a:ad:32:4d:5a:
97:a4:13:dc:da:d0:8e:57:c9:ee:de:89:24:4a:7c:
4f:a7:6c:3b:0c:e6:7a:f1:5a:ec:d1:57:29:dc:dd:
26:61:67:66:49:d3:5f:f4:49:8a:59:e8:16:0f:ab:
ba:bf:96:28:5d:42:3d:fc:70:d3:1e:15:22:e5:23:
cc:c0:ee:e9:ba:7f:56:43:61:4c:57:cb:64:86:05:
a2:28:56:2c:86:b6:da:26:86:2c:16:b1:9c:57:a2:
41:e9:9a:83:ea:47:08:92:3d:65:d1:ad:6e:a7:ee:
00:27:df:52:56:9e:05:d7:41:7c:2d:a3:1a:8f:e3:
a8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:8B:29:1F:FF:0B:7B:72:63:DC:9B:5D:2B:33:2A:A1:75:E4:12:BA
X509v3 Authority Key Identifier:
keyid:9F:DF:1B:11:CA:F2:B8:24:45:31:78:21:25:AE:93:3A:E7:69:9F:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n98bEcryuCRFMXghJa6TOudpn3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/8abe54-3dc7-4617-9907-472f4dad7fde/1/n98bEcryuCRFMXghJa6TOudpn3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:58:33:5d:3a:50:2a:87:e2:c2:03:39:5d:62:f1:bf:98:5f:
c4:13:8a:84:f9:7f:81:e4:3f:9b:1d:5d:d7:50:17:8d:ba:cd:
6d:7d:66:fc:4d:6d:41:ed:4f:f9:60:f4:4b:c0:22:42:cb:67:
27:f8:d3:3d:00:33:3e:4e:a8:45:f4:c8:60:24:f3:bb:da:56:
8c:ad:cb:97:07:68:8c:8a:a2:0a:2e:f1:28:4f:9c:8a:60:a6:
10:f4:1f:64:f0:00:68:55:56:3e:f1:41:72:38:fd:63:32:03:
d2:85:15:d7:20:a8:ec:24:1d:bd:dc:d6:97:fe:74:51:62:a3:
a2:a1:d9:6a:84:49:8d:a2:8a:11:90:c7:37:37:c8:0f:3c:fc:
7f:6a:44:9f:82:d5:ff:dc:8e:70:46:1a:56:c4:9e:bd:d0:fb:
d2:99:16:2a:9e:7a:d6:2c:f1:5d:26:be:2d:c1:4e:b9:ae:98:
3d:f3:32:f6:0d:ad:07:3b:28:22:0f:6d:89:98:b4:51:7d:bb:
9b:94:7a:67:cf:b3:e4:c4:60:6c:0c:a6:c8:0a:58:be:ef:ec:
1d:b7:01:5c:59:2b:a8:6b:92:5c:cb:2d:f7:f9:14:2e:c0:03:
0f:b5:37:dd:f8:06:7d:8a:8d:2f:8e:f4:36:d5:47:6c:dc:8e:
02:e6:2d:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 21:28:23 2026 by rpki-client