Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
File: n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft (raw, json)
Hash identifier: hSqkwHSb5lBXgJtEKt/S+l+KCSZdSH6u5/V6wBiA/KY=
Subject key identifier: C8:75:18:6B:AF:ED:62:8D:FA:FD:FE:74:05:F5:20:38:C1:1E:75:FA
Authority key identifier: 9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
Certificate issuer: /CN=9fb41d252f120acb140d0fc84334152114b6c826
Certificate serial: 019CB8F0A643633B2EC80FF7869B7C78BE92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
Manifest number: 0376
Signing time: Wed 04 Mar 2026 13:01:44 +0000
Manifest this update: Wed 04 Mar 2026 13:01:44 +0000
Manifest next update: Thu 05 Mar 2026 13:01:44 +0000
Files and hashes: 1: n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl (hash: 5FgyCR0cHHmXsvNSFMOGLyl884LOy3EaosE/oAXgBr8=)
2: qDTCMJHmL38g7Q3yN-YIXsmnvn4.roa (hash: S3eC/w96DFQPDgFJUFEhb7780RHsrN7s0rIndTg2a1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Mar 2026 13:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f0:a6:43:63:3b:2e:c8:0f:f7:86:9b:7c:78:be:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fb41d252f120acb140d0fc84334152114b6c826
Validity
Not Before: Mar 4 13:01:44 2026 GMT
Not After : Mar 5 13:01:44 2026 GMT
Subject: CN=c875186bafed628dfafdfe7405f52038c11e75fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:58:f5:e2:de:9d:a1:26:21:06:d9:d7:2a:27:
67:a1:d1:f8:f1:35:2e:12:ec:8c:5a:09:9f:bc:ce:
2e:f3:7f:90:c5:d5:db:f2:68:bc:26:79:6f:cd:c8:
51:ff:2a:18:ad:66:c9:41:cc:82:c5:7c:70:d7:26:
ac:5e:a9:cf:05:7d:cd:1e:00:e6:c0:45:50:51:54:
02:9a:24:e1:b8:74:11:ef:17:02:2f:7a:a5:c7:d8:
ce:16:3a:7a:a3:77:97:29:da:87:78:b8:ff:82:88:
e5:f6:75:2f:dd:9f:73:46:8f:67:4e:ca:ad:ec:0a:
5f:23:41:3e:80:45:4c:d0:b3:af:dd:ef:43:09:ba:
e2:80:79:6e:c6:3f:d1:bf:5f:07:76:14:c7:ad:09:
b9:11:80:56:bc:b3:77:b0:b7:2c:d4:91:ce:f5:39:
3c:89:a0:80:86:a9:b5:99:20:65:c8:9a:60:16:18:
ed:6e:4f:a8:4b:d3:46:0c:d9:49:ed:1a:3e:7d:f4:
4f:d3:ae:6e:cb:61:69:70:37:48:e2:c0:c8:64:72:
ad:87:5a:d9:8e:72:26:50:c5:30:a5:9e:02:c3:52:
3a:66:38:57:db:cd:dc:0f:4c:08:82:5a:6f:69:01:
56:2c:29:f0:65:f2:60:47:75:ac:9d:0d:a0:7e:1e:
c2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:75:18:6B:AF:ED:62:8D:FA:FD:FE:74:05:F5:20:38:C1:1E:75:FA
X509v3 Authority Key Identifier:
keyid:9F:B4:1D:25:2F:12:0A:CB:14:0D:0F:C8:43:34:15:21:14:B6:C8:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n7QdJS8SCssUDQ_IQzQVIRS2yCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/a1811b-617f-469f-acde-63e1c104a8db/1/n7QdJS8SCssUDQ_IQzQVIRS2yCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:23:d1:49:e3:c5:ad:d5:32:c0:b4:9e:e6:ab:80:c7:5d:fe:
70:e2:57:f7:35:c5:7a:96:1c:3b:7b:c5:6d:c9:8e:0a:96:a1:
4d:c8:28:68:ab:d5:7d:04:8c:ea:59:f7:30:ce:28:fe:13:62:
64:f6:a3:b1:78:9e:68:ee:2e:c5:e2:75:7a:c1:25:b9:b8:06:
70:b5:78:a2:43:d8:92:8a:8e:b1:6d:ce:44:2e:07:39:d2:ba:
5c:e6:96:36:4d:48:72:e8:5e:1c:52:8b:69:30:28:b0:3e:d2:
01:90:72:ff:91:23:ad:b0:7f:84:32:18:91:da:6f:b3:4c:b4:
6c:cc:fd:e1:4c:11:2a:0c:40:3e:34:90:4b:5c:1a:97:57:f4:
86:5f:f0:a1:da:c4:50:4a:89:1d:b6:e1:49:14:85:ff:c4:bf:
2c:3e:d8:37:82:9f:de:cd:6c:6e:ad:5a:d9:44:24:6f:d2:eb:
3a:76:fd:c0:5b:25:4c:5b:01:ea:3a:a5:96:58:96:af:47:37:
e5:03:cc:16:18:b8:ec:9e:4d:08:1f:27:bf:78:ea:b4:dc:b6:
84:38:0f:8a:a1:7c:ec:bc:47:b2:6d:dc:88:8a:35:a8:5e:06:
0c:84:8f:3f:3d:17:e3:ce:91:1f:ea:25:54:9a:7b:cf:29:72:
52:84:9a:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 4 20:51:21 2026 by rpki-client