Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: u0thkkGoHY4BcB0DADjeN6Ya1X59Z7BIbvqnfUWERJA=
Subject key identifier: CD:9C:8D:86:EF:57:27:6D:5F:32:3A:97:5C:1E:31:EC:87:A2:A6:EF
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 019D3940F9B03402DEC9257F767F4D68C265
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 1356
Signing time: Sun 29 Mar 2026 11:00:52 +0000
Manifest this update: Sun 29 Mar 2026 11:00:52 +0000
Manifest next update: Mon 30 Mar 2026 11:00:52 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: CTJjvlVd8VUAD3WkkRPg3q99kFIXyWMjYaZ4qnANDx0=)
2: t2nvtC07fwfG4DJZdYyApeiuOoI.roa (hash: Y4IHvCKtqY3mhfa2IhWhMpbzNg7eswOXZP8ib5pSXR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:f9:b0:34:02:de:c9:25:7f:76:7f:4d:68:c2:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Mar 29 11:00:52 2026 GMT
Not After : Mar 30 11:00:52 2026 GMT
Subject: CN=cd9c8d86ef57276d5f323a975c1e31ec87a2a6ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:c0:de:9c:77:d2:58:13:86:6a:9a:b0:bb:87:
03:98:76:34:88:24:5b:73:7b:3a:1f:87:1a:68:fc:
ff:89:05:2a:90:de:70:17:66:dc:a6:a7:e5:c0:0c:
c0:05:b2:42:1b:bb:1f:98:86:47:9f:6e:16:0f:f1:
dc:fc:de:c3:1b:e9:1b:03:64:0d:f3:5a:36:db:09:
63:44:6a:f2:15:d0:8b:ad:58:1f:76:b4:70:fd:c0:
20:64:d9:6c:57:aa:19:d6:f4:1c:2b:74:3d:6a:e2:
d4:a0:77:2f:5a:c2:22:7b:d9:ef:04:a0:b3:0a:4c:
93:4c:32:40:c6:b5:3f:9a:04:f0:9e:3b:af:d2:f1:
8e:2a:b0:5e:b2:5d:a6:89:ed:a5:1e:0f:00:d3:59:
8a:97:76:96:0e:ce:14:c1:7a:33:0b:a7:43:2d:95:
f9:2e:8c:b5:17:ea:45:10:b2:5c:ac:e7:7b:4d:2b:
7e:ee:33:15:1c:bf:e5:d4:a0:85:b6:48:b8:3e:1f:
d2:8a:20:00:96:f2:11:87:ee:35:d3:33:f4:c6:0e:
b5:2b:4b:4b:d8:3f:f4:37:62:f3:cb:a6:47:af:1d:
1f:d7:69:6c:15:3d:eb:89:97:d7:01:57:73:7b:c8:
86:e7:cf:57:d6:15:7b:b5:3a:1e:80:b0:5d:0a:1f:
1a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9C:8D:86:EF:57:27:6D:5F:32:3A:97:5C:1E:31:EC:87:A2:A6:EF
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:7d:85:91:7d:6f:48:df:b8:2f:9b:e5:28:2e:c2:b5:f8:1d:
43:4c:a6:6c:0e:01:55:f2:43:54:1d:8e:c4:5a:07:c3:d9:9e:
8d:a4:e2:c1:84:ab:2c:77:82:72:a4:f0:b3:7a:d7:96:2f:09:
10:74:db:6f:99:c8:74:0c:25:01:dc:d4:d4:70:0a:5e:68:34:
de:66:8d:82:83:ba:75:ac:d6:3b:59:3f:d4:48:8e:38:ab:27:
10:55:3e:36:4f:1e:50:a0:d6:84:c0:77:01:34:4a:8e:4e:c0:
56:c6:4c:09:22:d4:35:a3:c6:fe:e5:42:f2:ad:d5:e9:31:67:
d1:c4:52:6c:7d:52:41:ef:36:a1:ba:5c:a2:54:34:7f:5d:a2:
76:27:cf:38:f9:ad:bf:1e:b9:6e:e4:55:1a:45:76:04:15:72:
c0:32:cd:8a:9d:e3:4a:89:68:30:20:56:6f:52:73:25:18:48:
f5:6b:47:4d:ae:81:20:dd:78:fd:27:c6:fd:7f:67:9c:b8:fa:
ec:82:d7:dc:c7:e2:1b:54:41:d7:37:eb:d4:33:7b:b9:90:74:
9f:96:a3:c8:4f:f7:ff:31:0b:b0:f1:50:04:17:87:50:ff:45:
e8:f9:c6:61:ae:4a:21:3e:4e:7c:18:24:3f:e8:d6:3c:e0:a3:
5d:35:6d:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:01 2026 by rpki-client