
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier: tpoq/JIMW0t+8JhsSv1kDEbuNza2Wv+mcq+oAD7SCj8=
Subject key identifier: 74:A8:30:50:4D:D2:6A:D1:50:F8:89:C9:66:3A:C8:5D:CD:C9:2D:BD
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial: 019D39E5560DAE95261214FF6CDF209DDE40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number: 0634
Signing time: Sun 29 Mar 2026 14:00:24 +0000
Manifest this update: Sun 29 Mar 2026 14:00:24 +0000
Manifest next update: Mon 30 Mar 2026 14:00:24 +0000
Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: ZbGURf5+tQTK090GUSXvKoImm+EYOWpPF7P6BcQljL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:e5:56:0d:ae:95:26:12:14:ff:6c:df:20:9d:de:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Validity
Not Before: Mar 29 14:00:24 2026 GMT
Not After : Mar 30 14:00:24 2026 GMT
Subject: CN=74a830504dd26ad150f889c9663ac85dcdc92dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:f8:f3:b4:ce:61:5e:56:4d:ce:0e:c9:3f:a1:
83:78:b0:14:30:b4:30:1e:c8:a4:32:52:e6:be:ad:
49:31:db:b7:82:14:c0:d5:ad:3d:77:50:12:1b:6b:
bf:dd:e6:16:3d:90:e5:01:f1:61:84:f8:e0:56:19:
5f:01:d0:d6:ed:fd:2f:ae:4b:5c:05:67:86:41:23:
25:ba:80:6d:d6:2c:08:f1:e7:cd:3d:1b:aa:b5:1b:
60:ac:16:63:1d:39:2a:2d:83:e6:35:d9:f9:2a:77:
94:a6:71:f2:56:13:6d:7e:cf:59:73:61:07:d1:d8:
3b:30:a6:06:40:00:61:24:1f:ef:87:55:19:11:59:
47:f5:c8:ef:20:f8:a7:a4:e4:e8:b0:1e:2c:a7:6d:
91:81:c6:65:bc:d5:27:98:28:1e:1b:8d:6c:59:2a:
6d:4a:d4:26:10:d7:c5:f1:ce:42:23:72:cc:a6:f1:
5e:96:21:06:08:dd:a1:58:57:63:3b:89:97:01:d0:
1e:f4:bb:0c:40:0e:c9:e3:b3:de:22:c3:94:22:d4:
e3:4b:c0:05:4c:d5:19:f0:a4:78:d7:83:b3:e7:e4:
c3:bd:02:d8:f0:9f:2f:b7:27:fd:7d:60:31:a3:52:
af:87:5d:71:9e:18:97:88:84:9a:6e:a6:85:2c:24:
29:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:A8:30:50:4D:D2:6A:D1:50:F8:89:C9:66:3A:C8:5D:CD:C9:2D:BD
X509v3 Authority Key Identifier:
keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:4a:61:1c:5d:3a:41:87:9b:b2:e4:fd:76:1a:43:4f:a5:d7:
21:fd:c7:d2:0c:fc:3f:cf:f4:a9:71:3f:06:a2:f1:9c:c3:e3:
f5:46:e7:ad:99:fd:4f:4c:00:97:93:ba:21:a0:d5:40:c6:68:
fd:49:66:f3:b6:e9:3f:19:e9:b5:2d:33:24:bb:eb:b0:ed:91:
0e:30:80:bd:dc:98:7e:d4:bc:8d:57:e4:c4:fe:c7:4d:8e:c5:
cc:68:b6:d7:80:79:6b:91:f2:7a:89:42:c6:c8:03:ab:ef:3c:
1d:98:3c:21:8f:3e:86:c8:b8:5b:25:13:0b:8d:0c:cb:c3:e6:
bc:a1:1a:03:48:f9:6c:c5:4e:85:36:a2:59:13:34:9a:9e:ea:
15:2a:6f:d7:22:ef:bc:1d:ef:de:44:01:9b:90:89:d9:57:dc:
ce:ac:de:2c:a8:a0:c4:a9:a3:9e:56:25:37:d5:7d:ba:cf:c4:
0e:40:6c:48:79:77:79:6a:ac:8c:a9:ac:cd:6d:46:fd:ca:b9:
1c:86:2e:b1:96:8d:73:84:91:84:c4:ba:1f:98:d6:d1:7b:86:
04:b3:81:af:a6:92:1e:b6:a4:22:dd:e0:f6:23:ff:1e:a1:ee:
2d:7d:d1:ac:ec:ab:fc:f7:84:79:16:c6:9f:49:8e:4a:c9:3e:
78:9b:82:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:51:50 2026 by rpki-client