Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
File: n78C8E7EMIy1tgeL0GoXywDYM2k.mft (raw, json)
Hash identifier: xik+IX+r/yrOQlXFUAbiJqcQd8llphhZXuoAMxixjM4=
Subject key identifier: 78:B9:2D:A4:45:A4:5F:EF:D7:81:8B:43:4D:7F:90:8E:82:BC:51:37
Authority key identifier: 9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
Certificate issuer: /CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Certificate serial: 019D3909AD299280061004860D3D091C759E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
Manifest number: 031F
Signing time: Sun 29 Mar 2026 10:00:28 +0000
Manifest this update: Sun 29 Mar 2026 10:00:28 +0000
Manifest next update: Mon 30 Mar 2026 10:00:28 +0000
Files and hashes: 1: DJqntjgYkfPW1Br18ErHhvNgn_M.roa (hash: B5GRLWvmtpau9qTab26EepTDGZK6+L4FVVyJPZXWVFg=)
2: n78C8E7EMIy1tgeL0GoXywDYM2k.crl (hash: BA95FcVmVAV7Ajfh1ldnWilKJlTezF70rzjAwhiw32Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:09:ad:29:92:80:06:10:04:86:0d:3d:09:1c:75:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbf02f04ec4308cb5b6078bd06a17cb00d83369
Validity
Not Before: Mar 29 10:00:28 2026 GMT
Not After : Mar 30 10:00:28 2026 GMT
Subject: CN=78b92da445a45fefd7818b434d7f908e82bc5137
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8f:08:f3:b8:a0:96:d6:54:01:a7:fd:13:37:
84:52:9a:1f:24:14:e5:ba:6e:e8:8c:52:62:e5:5d:
88:97:3a:ec:c6:54:cb:00:eb:c2:8b:f7:fa:e9:3b:
ef:a6:24:cb:03:02:fb:45:f1:a1:e8:90:dd:e1:54:
a9:a2:19:4a:6c:97:c5:b9:df:63:99:e7:e9:62:1d:
61:46:dc:6a:31:15:35:c1:8d:57:76:17:b0:2c:06:
61:9d:aa:14:d8:18:d3:a4:ff:2f:57:f8:a7:a8:fa:
46:84:7c:17:dc:60:c0:82:30:1f:71:13:8d:10:8a:
5e:37:65:32:5d:2a:dd:2d:69:d4:b1:57:ef:25:57:
3a:c4:0c:1f:a6:9d:8d:9b:41:62:b1:89:4d:ff:40:
0e:93:e2:56:75:14:85:8b:88:e7:e9:e3:8a:2a:07:
7e:da:f3:cc:8c:fe:4b:48:03:8c:79:41:eb:90:ad:
d2:20:45:8b:f7:75:bb:64:3e:c3:06:86:02:d6:96:
51:d4:f5:da:2a:2d:28:0c:dd:bd:0f:6b:3c:e9:31:
b4:01:d5:12:28:23:85:1b:26:75:12:96:98:13:75:
42:9a:40:81:e6:08:33:a7:77:c5:4d:c2:47:5d:40:
a2:0b:31:31:d4:82:75:0c:bc:1a:b6:cf:b3:0b:d6:
f9:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:B9:2D:A4:45:A4:5F:EF:D7:81:8B:43:4D:7F:90:8E:82:BC:51:37
X509v3 Authority Key Identifier:
keyid:9F:BF:02:F0:4E:C4:30:8C:B5:B6:07:8B:D0:6A:17:CB:00:D8:33:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n78C8E7EMIy1tgeL0GoXywDYM2k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/caf466-6e6c-4009-a55a-5fa9da03f570/1/n78C8E7EMIy1tgeL0GoXywDYM2k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:be:37:fc:90:6e:71:fa:ff:2e:cb:04:58:5e:38:d1:4d:74:
86:00:48:6a:65:70:6b:93:b0:7a:7c:13:6d:11:af:8d:33:6c:
35:ff:5b:01:62:a0:40:c5:95:99:8c:b3:e3:74:1f:73:67:21:
fa:eb:31:39:d2:77:7b:6f:12:ce:ca:48:f9:10:ba:b0:45:3d:
02:fd:f9:a2:26:13:be:10:f5:42:08:ab:d6:c5:b8:d9:0a:93:
9f:41:8d:45:ea:58:1d:c2:5d:49:62:0c:45:b8:b6:11:db:c1:
6e:ad:05:fb:09:69:c9:10:1e:af:1d:cd:88:3e:62:1d:fd:00:
9e:5b:23:1b:d8:f5:ce:8a:6f:9c:de:25:44:06:47:28:11:59:
e0:c0:b9:87:2b:5f:61:c1:56:67:5c:35:d4:e8:60:ac:0f:52:
0c:c9:ca:5c:3a:aa:7f:34:f7:af:36:b1:26:fa:be:10:81:29:
0b:a2:b8:18:fe:88:00:06:db:c8:f6:b4:23:0a:41:44:b2:a9:
5e:2b:29:b7:36:34:19:90:95:a2:8b:ff:88:98:6e:45:a6:f3:
09:60:8b:d0:6c:aa:e1:ba:0a:ad:5d:71:10:19:05:42:da:10:
b6:aa:5d:ed:fc:26:4d:ae:5f:d6:25:87:4e:f8:c1:79:8a:66:
7a:96:53:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:18 2026 by rpki-client