Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
File: n7edKYEQtvsxkwHrwivxgOcFR5Y.mft (raw, json)
Hash identifier: pAOxmMiJYf0QEZqqCQRKn+BMtdx84IeV1c3edRnQ6hs=
Subject key identifier: 1D:96:B0:70:0D:18:26:3C:DC:44:D5:CF:75:A2:05:1C:CD:FA:64:E1
Authority key identifier: 9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
Certificate issuer: /CN=9fb79d298110b6fb319301ebc22bf180e7054796
Certificate serial: 019D3909AFA975F1943B2941D192221F7EC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 10:00:29 +0000
Manifest this update: Sun 29 Mar 2026 10:00:29 +0000
Manifest next update: Mon 30 Mar 2026 10:00:29 +0000
Files and hashes: 1: L6c5Lr0p1aRMGxRILmBZgQtfR4U.roa (hash: zHP0uUQQ1j3lH9UmRrJUovyfnfMO31UL4btwp3/nVG0=)
2: n7edKYEQtvsxkwHrwivxgOcFR5Y.crl (hash: Dp2qICn0izhpBFVz2n3YXAawI5Cjpp1UVBXuLtN8GAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:af:a9:75:f1:94:3b:29:41:d1:92:22:1f:7e:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb79d298110b6fb319301ebc22bf180e7054796
Validity
Not Before: Mar 29 10:00:29 2026 GMT
Not After : Mar 30 10:00:29 2026 GMT
Subject: CN=1d96b0700d18263cdc44d5cf75a2051ccdfa64e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d2:05:a5:6f:3d:f4:24:b7:85:2a:1f:41:6f:
85:3b:1f:4e:90:a2:85:fd:63:76:89:a4:57:b5:8a:
f9:de:ee:af:c1:b5:57:95:06:e7:48:3f:70:09:d6:
f6:e4:2f:59:58:24:c0:33:58:10:77:60:b6:a6:0d:
21:c2:a2:71:4b:04:0d:b9:9c:27:d8:e7:ba:0e:19:
38:6c:b1:c6:ac:e5:31:8c:03:fb:0a:d8:a2:9e:ec:
cc:52:fd:61:c0:58:5c:97:47:b9:dc:16:b7:cb:c8:
02:24:01:00:d6:06:15:0b:18:a4:90:7c:df:91:2a:
2b:00:f2:3a:4a:2a:9f:e0:6e:4e:79:11:46:c9:40:
27:92:11:81:9e:8d:5b:b1:ae:92:5f:11:83:e5:62:
b2:98:96:99:58:c8:9d:c3:22:1c:78:f2:11:8c:db:
c1:8c:a9:f4:52:f5:6c:13:27:bb:0e:0c:80:13:e4:
58:e7:a5:9a:73:27:77:ba:85:ff:c8:d1:2d:bf:50:
e5:c0:6b:2c:0f:95:ae:42:1b:97:15:f9:ab:c2:96:
f7:46:2b:63:23:64:b8:d5:4d:a7:aa:31:69:5b:32:
d1:72:73:60:d3:48:1a:2e:5a:cd:1f:f0:29:a5:56:
a4:29:fb:88:5b:07:84:f8:13:ee:3c:da:c8:82:ff:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:96:B0:70:0D:18:26:3C:DC:44:D5:CF:75:A2:05:1C:CD:FA:64:E1
X509v3 Authority Key Identifier:
keyid:9F:B7:9D:29:81:10:B6:FB:31:93:01:EB:C2:2B:F1:80:E7:05:47:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7edKYEQtvsxkwHrwivxgOcFR5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/e85a41-b3ff-4fcd-80b2-4aabec0d30a3/1/n7edKYEQtvsxkwHrwivxgOcFR5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e2:8c:c5:0f:fe:8f:22:23:80:81:74:cf:93:b0:06:e6:00:
8b:52:c1:43:f1:cf:e1:4c:05:8e:92:93:f4:f0:31:4a:87:ea:
ef:2a:d7:ea:43:a2:59:e4:f1:90:1f:e8:30:46:b6:58:23:58:
75:3b:36:d7:6f:b3:52:92:4d:ee:f2:47:1e:20:f4:4b:f3:81:
44:7a:2f:34:36:a2:30:02:e0:22:b0:3e:be:87:8a:60:1e:65:
0b:48:a5:8a:93:4d:da:cf:18:f9:85:61:59:bd:8a:41:7a:4a:
93:c4:21:38:c1:67:5d:49:85:92:3d:2c:b3:5c:46:70:f2:74:
64:d2:c6:4a:ec:e8:32:1d:51:ac:b7:c0:90:85:e7:45:dd:4c:
02:4d:2f:9f:d1:91:49:08:21:3a:d5:a8:ef:94:1a:df:1b:6b:
f5:c6:01:aa:35:e5:1a:b6:c8:c8:ae:20:db:6a:e1:34:ea:fd:
d1:59:06:d8:14:e3:2e:88:26:f2:71:7e:5c:82:9e:6c:f9:e3:
92:14:9e:f0:3d:d8:c7:8e:36:61:d9:e6:84:55:23:58:f7:bb:
b9:a0:28:92:89:5d:e6:cd:d1:81:c3:ba:8a:dc:ac:ac:a5:57:
d6:13:83:3c:a6:08:73:fe:bb:0b:c0:e1:fc:91:41:e6:86:e8:
95:03:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:32:23 2026 by rpki-client