Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: 4ZXBwmRIY4bHwIodBUFGIXiT9b2SKU/oWQEW4UB/g5M=
Subject key identifier: 26:E4:FB:9E:2E:1D:8A:DE:3C:6C:0B:AC:1C:D4:92:C3:5E:72:94:A5
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 019D98BE0C01B95EE1E3CA7F9ACB6F35022F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0DCB
Signing time: Fri 17 Apr 2026 00:01:24 +0000
Manifest this update: Fri 17 Apr 2026 00:01:24 +0000
Manifest next update: Sat 18 Apr 2026 00:01:24 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: 7QEdIvqa2WB221gyEYLeWJQDsqy1cq+nAMAuB//XSDY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:0c:01:b9:5e:e1:e3:ca:7f:9a:cb:6f:35:02:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Apr 17 00:01:24 2026 GMT
Not After : Apr 18 00:01:24 2026 GMT
Subject: CN=26e4fb9e2e1d8ade3c6c0bac1cd492c35e7294a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:61:eb:a9:1b:c0:cb:0e:88:46:ed:7c:3b:96:
2d:29:22:35:78:1b:14:6e:22:81:c7:59:45:94:dd:
d2:ea:b1:d2:af:b8:c0:4a:b9:ab:62:6f:85:53:4d:
b8:17:9a:66:cc:f8:41:e7:eb:df:9a:56:a8:7d:5c:
28:a7:5b:e2:36:27:93:17:b5:81:03:43:1c:10:e5:
eb:10:6a:d6:33:07:35:69:cc:2a:54:64:80:58:56:
f6:9e:11:02:6a:f7:ea:5b:49:4b:0d:ca:13:1c:d4:
ad:50:3e:4e:f2:d0:b4:63:4a:8d:21:fc:66:e9:3a:
31:e1:4d:3d:c2:67:89:d6:d4:e0:25:86:76:4a:9f:
71:14:11:6c:52:12:70:86:10:a8:91:e2:77:9b:dd:
4d:50:ef:de:5f:70:ce:1c:9c:30:5e:ad:45:68:6c:
c0:77:e9:51:7e:02:6a:83:05:3e:9a:df:f1:dc:28:
6e:fd:02:58:98:31:31:51:33:1a:99:c0:0b:b4:9e:
c8:b8:93:d0:5d:35:cc:a9:cf:20:3b:b4:bd:aa:22:
3e:a0:d9:e4:f2:28:c2:76:c6:e3:4a:36:0a:d4:b8:
89:82:8c:b9:2a:de:44:2d:ae:cb:98:c9:dc:43:f6:
90:d2:11:fc:a0:21:dc:d5:0e:51:c7:33:9b:55:28:
9e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:E4:FB:9E:2E:1D:8A:DE:3C:6C:0B:AC:1C:D4:92:C3:5E:72:94:A5
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e1:f1:85:06:01:b2:dc:64:a9:ff:ae:02:b3:ac:d1:74:9f:
65:9f:5c:ce:e5:f6:50:fc:62:f2:9b:26:64:13:cd:3e:ef:bc:
c3:cd:26:c9:c8:6f:06:5b:07:17:f4:0d:7a:d9:a5:e2:a4:b8:
54:8f:90:37:28:37:4a:f9:2e:0d:10:d4:f9:d7:03:13:80:e9:
5b:d7:29:83:cf:fa:7e:c5:35:b6:24:17:ed:8d:37:3f:ee:22:
ab:a4:55:97:c3:25:8d:06:2e:f4:9b:21:ac:9c:94:39:62:bb:
fe:68:03:9a:ec:83:83:47:31:08:a0:82:fe:8e:fa:59:17:c0:
f9:91:c9:a4:30:73:9d:0d:ec:4f:73:fd:bc:b6:f4:36:37:8a:
16:3d:dd:b3:58:0c:58:42:15:56:f6:19:24:17:3d:dd:e6:bf:
30:37:9b:9b:4d:cf:1e:74:27:01:95:1d:58:9d:17:d2:e7:56:
e7:b8:f2:02:43:59:90:d3:2a:a2:a0:4b:80:17:fa:5a:9e:0c:
37:fb:97:86:ef:83:c3:56:19:03:b2:00:30:ee:9c:68:07:47:
62:17:f1:15:84:52:38:98:e9:64:60:97:02:af:e7:67:29:3a:
c6:aa:62:97:6c:51:02:00:e6:ee:bf:19:9f:32:e7:cd:b2:f3:
0b:6c:e5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:57:21 2026 by rpki-client