Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: EQtY4YQeARIUmwWUmZZKlXSANVipsshSLUAO//iT0II=
Subject key identifier: 71:4F:97:89:C9:6F:4A:BA:E0:63:AD:D1:6A:36:43:7E:E5:9D:7D:EB
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 019D39AED714F1D6C9AAFA5E5ED46908897A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 1653
Signing time: Sun 29 Mar 2026 13:00:52 +0000
Manifest this update: Sun 29 Mar 2026 13:00:52 +0000
Manifest next update: Mon 30 Mar 2026 13:00:52 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: leLS29d1kbP/dcQuFG5d1vYUVa2DJ4h6VLCV1JvmnKA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:d7:14:f1:d6:c9:aa:fa:5e:5e:d4:69:08:89:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Mar 29 13:00:52 2026 GMT
Not After : Mar 30 13:00:52 2026 GMT
Subject: CN=714f9789c96f4abae063add16a36437ee59d7deb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:dd:f7:6b:7b:8c:28:bc:f0:6f:6d:18:56:ef:
8e:25:bb:8d:23:88:65:84:2c:ea:e1:08:79:e8:7b:
c6:3b:1e:bf:5a:fa:b3:f8:2e:01:1f:2d:23:28:16:
48:71:c7:81:45:dc:b0:44:1b:15:1b:4e:ee:9d:fa:
b3:26:8a:c8:08:c7:4d:3b:b2:f0:bc:0d:a0:5e:9c:
95:ee:b3:16:7b:59:aa:30:4c:aa:86:b4:e0:6d:3b:
30:65:c2:ed:4f:60:90:b0:8f:c6:77:c3:8a:b0:b4:
38:e0:59:aa:4e:9d:e5:41:d0:c1:49:c9:ea:d0:b0:
8d:6e:77:26:eb:39:92:b9:63:2f:7a:0e:57:b4:e4:
46:f4:7f:6f:a8:95:49:d4:3b:ae:65:2d:ec:6a:64:
a4:81:60:9b:c3:a5:b9:30:22:c9:f7:29:da:d1:e8:
00:69:9f:37:28:4a:b4:57:a1:7f:4c:f6:b2:98:36:
d4:33:a5:9a:e5:9e:e4:75:f9:47:d8:f7:2d:04:f3:
85:e3:52:86:7a:48:22:26:0c:8e:87:a2:c9:8a:dc:
8e:56:75:e0:77:a4:1b:ac:02:c6:a5:65:97:42:8e:
d5:f6:05:37:66:c1:1e:fa:42:f8:80:32:a1:b1:82:
92:42:6a:4e:f5:99:01:d2:2d:6e:49:cd:d8:37:51:
21:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:4F:97:89:C9:6F:4A:BA:E0:63:AD:D1:6A:36:43:7E:E5:9D:7D:EB
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c4:66:14:8c:77:a1:f4:9e:2b:5b:e0:74:6f:73:e5:c7:8a:52:
b3:4e:21:8b:04:56:69:b4:a0:02:ba:08:6c:6b:4d:3c:5c:21:
05:88:1c:23:1d:de:bc:7a:50:01:12:ac:5a:b6:ad:5a:a4:98:
c1:ba:37:95:f6:64:29:9d:a7:5b:26:48:4c:5e:c4:9c:a8:a0:
df:08:55:f6:fe:74:98:1b:7b:59:9c:6e:ea:cc:7b:3e:5e:8f:
cd:e6:9f:7c:8c:11:40:61:24:1f:51:84:a2:f3:ca:24:92:5d:
28:1c:67:f5:99:e5:f4:ee:c3:b0:cf:63:6b:27:1d:1c:c3:17:
39:08:dc:c6:85:a7:66:fa:bf:ae:20:aa:a4:bb:b0:f3:3e:d7:
47:dc:4d:a0:b9:ad:60:1c:88:0b:0a:15:72:f7:4b:2a:65:b9:
1d:ad:55:6f:71:28:2f:a6:25:16:25:21:6b:6a:33:82:3a:ce:
20:81:66:7d:8a:cc:7e:d0:4e:3a:e8:20:9f:c2:38:57:e8:a6:
ea:2b:e3:00:cd:02:4d:61:7a:b2:17:0f:38:28:f2:75:b7:cb:
da:cb:59:99:ed:1c:0f:1f:a8:ee:65:40:68:30:0c:82:b0:8b:
4d:c8:b5:b2:09:a4:67:04:4c:df:1e:27:9d:5a:cd:23:14:a3:
f5:6b:a4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 20:48:15 2026 by rpki-client