Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: vMU9DygkziwvONQw1eHIwsQxtHzPgZlThcoEFQHDO8Q=
Subject key identifier: EF:95:31:6F:F1:98:D1:0B:F7:D9:25:AE:9B:49:02:7A:5E:B0:FD:90
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019D2F61D14DA044DD33D418A12128B313B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 10BF
Signing time: Fri 27 Mar 2026 13:00:32 +0000
Manifest this update: Fri 27 Mar 2026 13:00:32 +0000
Manifest next update: Sat 28 Mar 2026 13:00:32 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: xj2B0oN7uUba/KBVK7TyRwp8QWP1w2rQ/99NY+Lio6U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2f:61:d1:4d:a0:44:dd:33:d4:18:a1:21:28:b3:13:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Mar 27 13:00:32 2026 GMT
Not After : Mar 28 13:00:32 2026 GMT
Subject: CN=ef95316ff198d10bf7d925ae9b49027a5eb0fd90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:e7:0b:9a:31:23:f9:c5:de:af:c5:50:fa:
d0:83:e2:5e:ec:3a:d9:53:bd:84:d3:83:32:45:45:
52:c3:57:2e:dc:d1:62:44:9b:8f:8b:bc:66:22:46:
0b:04:35:f5:50:1a:6c:b0:aa:df:bd:e7:b8:b7:f3:
29:b1:08:5a:7e:3c:f3:a7:44:2f:e8:67:3e:2c:4a:
fc:9c:25:72:fe:ca:a6:45:82:5f:13:76:bd:a5:c7:
e1:06:47:92:c2:50:55:0c:55:c0:d2:e3:51:e4:f9:
88:f9:2f:b0:96:b2:d9:b6:59:fa:b1:68:db:c2:e6:
6b:03:02:0c:06:b7:a1:28:d2:84:06:66:08:34:07:
d4:2b:13:82:e8:7e:59:b9:9d:fc:1d:a1:e3:fd:98:
ac:de:87:8b:74:27:b6:b3:9f:f1:f2:d9:42:93:ec:
b1:cf:1a:af:73:e1:4c:c7:5e:7f:a4:13:32:7a:26:
06:c8:f0:c6:0e:4c:84:a1:63:2b:f5:f8:fc:53:42:
3c:95:5f:af:c0:c4:a9:46:55:7b:c1:1b:f7:3c:64:
91:de:b6:fb:6d:16:80:1d:f9:fb:1f:c7:f3:31:79:
c0:a3:18:2a:d6:00:bc:33:36:d4:e4:1d:d6:41:04:
54:9e:6b:84:e1:4d:d0:84:76:e2:76:d2:6e:cb:5d:
97:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:95:31:6F:F1:98:D1:0B:F7:D9:25:AE:9B:49:02:7A:5E:B0:FD:90
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:73:66:85:ca:6b:8b:26:85:39:57:39:93:6e:63:e1:a6:c3:
6c:96:19:80:15:37:72:1e:94:d6:db:db:82:5b:b2:02:39:e0:
8c:8b:27:e1:79:5d:cb:4f:f6:a2:21:a4:16:7c:81:d9:52:ed:
76:bd:eb:95:99:2a:e5:3a:38:c7:a5:6f:10:df:54:d6:07:8b:
35:02:8b:ea:65:fd:15:cd:6c:02:19:7e:f6:29:33:b1:71:d9:
8f:42:1d:22:4b:ba:23:61:9f:ad:43:9d:20:8b:e2:89:aa:11:
54:c3:54:a5:43:8a:68:e7:b6:b9:9e:50:95:97:d0:6b:4d:77:
50:b2:a2:7e:69:bf:a3:f7:61:cc:cd:d7:8e:92:54:dd:b2:4c:
c6:03:ad:f4:69:81:59:cc:0b:b9:4d:7f:36:e3:20:3f:cd:99:
60:26:8d:d4:ee:5b:22:01:8f:e9:0b:a0:5c:3d:c5:32:49:d9:
a6:f5:84:2d:60:2a:92:7a:96:fa:97:4c:d9:8f:f9:06:67:c1:
f5:9b:29:0e:39:90:16:a3:9a:29:96:7b:4f:2d:c2:b0:6d:55:
b0:10:08:71:c1:6c:35:66:03:61:01:b1:d0:c5:7c:f2:ec:6f:
07:93:e0:a5:6b:64:1d:ea:0a:f2:33:17:a1:f2:73:50:24:b2:
09:47:1d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 22:27:43 2026 by rpki-client