Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
File: n5FENjC-1KQYJ6zlcHmpR6yHy74.mft (raw, json)
Hash identifier: mkX7bwzobZBxC6jS62IFMyEqPvBcHkZYgfMFQfYo2eA=
Subject key identifier: 4F:F3:AD:5A:C0:81:78:1A:18:0B:E9:42:E3:E0:19:19:41:F5:40:05
Authority key identifier: 9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
Certificate issuer: /CN=9f91443630bed4a41827ace57079a947ac87cbbe
Certificate serial: 019D394188270A72DE2117F1564C440FCA67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
Manifest number: 0390
Signing time: Sun 29 Mar 2026 11:01:28 +0000
Manifest this update: Sun 29 Mar 2026 11:01:28 +0000
Manifest next update: Mon 30 Mar 2026 11:01:28 +0000
Files and hashes: 1: n5FENjC-1KQYJ6zlcHmpR6yHy74.crl (hash: FQ/YpB/Y9/1ApjQ83qC6pouVFNagdrFjgq0HQy2vdSw=)
2: qvxb9I-qtYwq5nyaTOxh967mrFw.roa (hash: 0+npisFp4U/poMLopt75vxz8Mv7lcpuIpt+bI27YjSA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:88:27:0a:72:de:21:17:f1:56:4c:44:0f:ca:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f91443630bed4a41827ace57079a947ac87cbbe
Validity
Not Before: Mar 29 11:01:28 2026 GMT
Not After : Mar 30 11:01:28 2026 GMT
Subject: CN=4ff3ad5ac081781a180be942e3e0191941f54005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fb:9e:15:9c:b5:df:48:da:49:33:a3:9d:6e:
7f:75:54:9d:bf:ce:f1:8f:ca:d9:ec:2b:ec:0a:31:
36:f2:38:5f:6b:fb:37:5e:66:5e:47:9a:28:37:29:
17:6b:13:ca:5c:57:40:17:72:1a:21:d5:3c:b2:83:
bb:59:40:86:a5:46:21:bf:cb:a3:6a:56:f7:c9:bb:
7b:ab:7b:16:7f:58:4b:3b:d6:51:a5:45:7f:e6:39:
33:9c:f5:ec:75:b1:3d:ea:eb:95:15:08:f4:37:df:
bf:97:05:cc:60:27:b2:be:2b:99:de:49:8d:04:a3:
59:c2:8a:ee:d9:34:bb:a9:84:e0:b0:1a:a6:0c:48:
1e:85:48:9c:43:c9:13:a6:2d:ef:26:f2:a9:70:cb:
52:3f:88:62:61:57:e7:e8:99:a9:f4:35:e9:f9:ff:
ab:39:b1:bc:b9:9e:3a:53:37:ba:21:52:a9:07:6f:
2b:f3:9d:48:e1:bf:76:ae:3a:da:94:5b:09:e8:a8:
4f:a4:02:3f:ae:2b:52:f4:c4:a7:ee:9b:ee:f5:b4:
56:f9:1e:60:db:af:22:56:b1:87:a5:3d:7e:20:64:
34:dd:73:86:09:2c:0d:b6:f3:2d:c5:23:b3:20:e1:
8b:b3:56:c3:73:f1:ec:94:72:2c:f9:54:e3:96:39:
4a:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:F3:AD:5A:C0:81:78:1A:18:0B:E9:42:E3:E0:19:19:41:F5:40:05
X509v3 Authority Key Identifier:
keyid:9F:91:44:36:30:BE:D4:A4:18:27:AC:E5:70:79:A9:47:AC:87:CB:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5FENjC-1KQYJ6zlcHmpR6yHy74.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/0f7d30-6f24-4b8c-b75c-61700dde7692/1/n5FENjC-1KQYJ6zlcHmpR6yHy74.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:21:ca:bd:fc:bf:c0:1e:dd:74:b5:f6:65:05:55:b8:6c:77:
13:9a:c7:64:14:2c:fb:8a:bc:02:e5:4c:c4:60:bb:48:3a:e5:
92:03:b8:19:95:74:75:2c:59:5d:f7:eb:0c:07:fb:d9:2e:0e:
bd:c1:28:9d:24:c1:7e:9f:7c:43:c2:5c:24:ff:3f:16:f3:56:
46:69:f8:0d:4a:6e:8a:1b:49:29:65:d7:a7:05:86:01:4a:eb:
be:a5:de:9a:8d:d8:57:c6:eb:0e:d3:54:53:96:59:ce:c5:76:
1f:b2:62:dd:4c:cf:df:a0:69:e9:1e:5f:9f:61:21:37:c5:fa:
0a:60:1c:68:6d:b2:3f:06:0f:21:31:b9:74:98:d8:d8:30:8d:
fe:a2:d7:1c:26:c1:c7:58:59:53:a5:c5:f0:bb:4c:39:48:98:
63:96:45:d4:eb:a5:ae:42:09:57:2e:59:53:94:bc:c1:64:66:
0f:f7:4a:65:51:20:c4:f6:ea:b9:8a:da:7f:fb:e9:99:86:eb:
be:4b:b1:cb:84:94:1a:ca:34:a1:2a:58:be:0a:0a:2c:3e:a2:
11:ed:1c:bb:5c:57:98:b6:32:57:b6:8e:d3:32:52:d3:13:d1:
14:e5:10:d1:91:56:53:ac:1c:db:4a:52:d6:f0:f3:c8:29:8f:
21:05:61:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05QYgnCnLeIRfxVkxED8pnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTE0NDM2MzBiZWQ0YTQxODI3YWNlNTcwNzlhOTQ3YWM4
N2NiYmUwHhcNMjYwMzI5MTEwMTI4WhcNMjYwMzMwMTEwMTI4WjAzMTEwLwYDVQQD
Eyg0ZmYzYWQ1YWMwODE3ODFhMTgwYmU5NDJlM2UwMTkxOTQxZjU0MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/ueFZy130jaSTOjnW5/dVSdv87x
j8rZ7CvsCjE28jhfa/s3XmZeR5ooNykXaxPKXFdAF3IaIdU8soO7WUCGpUYhv8uj
alb3ybt7q3sWf1hLO9ZRpUV/5jkznPXsdbE96uuVFQj0N9+/lwXMYCeyviuZ3kmN
BKNZworu2TS7qYTgsBqmDEgehUicQ8kTpi3vJvKpcMtSP4hiYVfn6Jmp9DXp+f+r
ObG8uZ46Uze6IVKpB28r851I4b92rjralFsJ6KhPpAI/ritS9MSn7pvu9bRW+R5g
268iVrGHpT1+IGQ03XOGCSwNtvMtxSOzIOGLs1bDc/HslHIs+VTjljlK/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE/zrVrAgXgaGAvpQuPgGRlB9UAFMB8GA1UdIwQY
MBaAFJ+RRDYwvtSkGCes5XB5qUesh8u+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMt
NjE3MDBkZGU3NjkyLzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8wZjdkMzAtNmYyNC00YjhjLWI3NWMtNjE3MDBkZGU3Njky
LzEvbjVGRU5qQy0xS1FZSjZ6bGNIbXBSNnlIeTc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARyHKvfy/
wB7ddLX2ZQVVuGx3E5rHZBQs+4q8AuVMxGC7SDrlkgO4GZV0dSxZXffrDAf72S4O
vcEonSTBfp98Q8JcJP8/FvNWRmn4DUpuihtJKWXXpwWGAUrrvqXemo3YV8brDtNU
U5ZZzsV2H7Ji3UzP36Bp6R5fn2EhN8X6CmAcaG2yPwYPITG5dJjY2DCN/qLXHCbB
x1hZU6XF8LtMOUiYY5ZF1OulrkIJVy5ZU5S8wWRmD/dKZVEgxPbquYraf/vpmYbr
vkuxy4SUGso0oSpYvgoKLD6iEe0cu1xXmLYyV7aO0zJS0xPRFOUQ0ZFWU6wc20pS
1vDzyCmPIQVhJA==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:12:38 2026 by rpki-client