Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: McwxYYR/NzMgviXoemjw3bhobV8SF32uxikhTSVGghQ=
Subject key identifier: A2:DF:28:BE:8D:BC:EC:14:56:1E:CD:44:B5:A3:98:09:4F:18:FB:34
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 019D3909D602D808539CCC8F0F79869FC1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0E97
Signing time: Sun 29 Mar 2026 10:00:39 +0000
Manifest this update: Sun 29 Mar 2026 10:00:39 +0000
Manifest next update: Mon 30 Mar 2026 10:00:39 +0000
Files and hashes: 1: ARvHC35mwQKQSHNS1J2UcxIOXhk.roa (hash: I+P0+0NUkpAeizIJ4ocanrSBj4ovLyBDmtkFNJ1PWfg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: j218ONAug3Qu6c8qJquBl+mySv5qCBX+YnnT7o/3JSU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 08:48:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:d6:02:d8:08:53:9c:cc:8f:0f:79:86:9f:c1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Mar 29 10:00:39 2026 GMT
Not After : Mar 30 10:00:39 2026 GMT
Subject: CN=a2df28be8dbcec14561ecd44b5a398094f18fb34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:73:93:4c:62:85:10:85:4b:16:a8:f9:8b:37:
b7:0a:f8:19:bd:ed:af:c6:1f:85:10:f7:d5:20:43:
1b:66:0d:65:08:1b:6d:10:fd:02:e3:3d:50:47:8c:
a6:43:b9:e0:86:8f:67:39:04:14:f1:4c:30:d8:4d:
1d:81:e1:c9:76:32:f0:3c:11:b0:42:d2:5b:3e:f8:
65:b9:41:0a:8e:f2:c2:f1:09:02:4f:c9:c1:33:7e:
2e:25:ed:01:da:6c:1f:55:f7:2f:55:cd:03:fa:fb:
5d:3c:e5:04:2d:bb:4b:f7:eb:a5:43:98:b3:19:97:
b0:e3:b1:50:7e:a6:e6:74:e7:be:9b:0e:24:1e:4d:
21:1f:b0:ec:1e:cf:63:75:11:59:e4:a3:2e:28:7b:
62:bf:1d:6f:17:08:3c:b0:8a:cc:5c:96:64:aa:73:
54:14:d6:59:41:42:d8:b4:17:70:fd:85:47:c2:3c:
92:1c:8d:3a:3d:51:95:f7:ed:8b:73:c1:e7:a1:45:
d9:0e:16:84:d2:1e:a1:bc:2f:28:b2:bd:e3:c8:7d:
fb:04:28:65:fa:99:d9:8e:c5:ec:ef:68:0d:b0:94:
27:84:40:11:fa:6e:0a:d7:24:b6:d8:0e:fd:fe:ec:
c9:9d:45:d5:f1:c3:4f:ec:15:01:b9:4d:0a:54:92:
91:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:DF:28:BE:8D:BC:EC:14:56:1E:CD:44:B5:A3:98:09:4F:18:FB:34
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f9:e3:46:95:7e:85:9b:9d:61:fd:af:ce:d3:eb:ff:a5:4e:
04:e2:b1:aa:e3:d5:6b:d9:43:24:2c:7e:f2:1a:d9:6a:62:9c:
bf:1d:d9:71:7e:12:3e:6f:3a:76:b4:60:1f:e0:10:58:c0:5b:
55:7f:d7:63:10:8f:df:eb:1a:ac:98:6a:e4:07:a2:92:89:41:
20:bf:2b:97:41:fd:2d:41:32:65:79:22:58:e7:c3:72:89:9c:
e2:b6:c2:4d:19:00:f2:0b:06:4f:b6:27:7d:75:ca:0a:70:18:
9e:8f:d2:7c:52:4b:b8:48:e3:78:e7:6e:32:a0:6d:57:c6:f1:
1e:fc:e6:08:63:d9:34:22:ff:e2:68:25:5d:8e:1e:79:b4:b1:
ba:d4:a4:56:28:cb:68:3f:dc:ac:fa:79:a9:73:a0:a2:93:25:
64:3c:8f:81:d8:d9:56:3c:64:1d:5c:9e:6b:27:f4:3e:cf:00:
68:a1:db:51:e7:29:bf:4a:36:dd:25:23:e6:0b:b2:b6:dc:c2:
6a:f8:a3:b5:7c:4a:8a:e7:47:b2:28:f6:ca:a6:54:a7:08:db:
3a:d9:52:41:60:13:ed:4b:f9:a3:08:21:c8:3e:16:ad:ad:ba:
cb:75:fa:7b:40:6f:c4:bd:fb:28:39:c3:fe:28:26:5e:3a:07:
9d:ac:df:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CdYC2AhTnMyPD3mGn8GxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3
ZGEyY2EwHhcNMjYwMzI5MTAwMDM5WhcNMjYwMzMwMTAwMDM5WjAzMTEwLwYDVQQD
EyhhMmRmMjhiZThkYmNlYzE0NTYxZWNkNDRiNWEzOTgwOTRmMThmYjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXOTTGKFEIVLFqj5ize3CvgZve2v
xh+FEPfVIEMbZg1lCBttEP0C4z1QR4ymQ7ngho9nOQQU8Uww2E0dgeHJdjLwPBGw
QtJbPvhluUEKjvLC8QkCT8nBM34uJe0B2mwfVfcvVc0D+vtdPOUELbtL9+ulQ5iz
GZew47FQfqbmdOe+mw4kHk0hH7DsHs9jdRFZ5KMuKHtivx1vFwg8sIrMXJZkqnNU
FNZZQULYtBdw/YVHwjySHI06PVGV9+2Lc8HnoUXZDhaE0h6hvC8osr3jyH37BChl
+pnZjsXs72gNsJQnhEAR+m4K1yS22A79/uzJnUXV8cNP7BUBuU0KVJKRWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKLfKL6NvOwUVh7NRLWjmAlPGPs0MB8GA1UdIwQY
MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt
NTcwMWQwMWMxZTg3LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3
LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfnjRpV+
hZudYf2vztPr/6VOBOKxquPVa9lDJCx+8hrZamKcvx3ZcX4SPm86drRgH+AQWMBb
VX/XYxCP3+sarJhq5AeikolBIL8rl0H9LUEyZXkiWOfDcomc4rbCTRkA8gsGT7Yn
fXXKCnAYno/SfFJLuEjjeOduMqBtV8bxHvzmCGPZNCL/4mglXY4eebSxutSkVijL
aD/crPp5qXOgopMlZDyPgdjZVjxkHVyeayf0Ps8AaKHbUecpv0o23SUj5guyttzC
avijtXxKiudHsij2yqZUpwjbOtlSQWAT7Uv5owghyD4Wra26y3X6e0BvxL37KDnD
/igmXjoHnazfwQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 18:38:19 2026 by rpki-client