Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: /seMzd7MHRXJq6B2psuUWg2FErSb++FKVHqaaN6SkIs=
Subject key identifier: 00:13:AF:9E:48:A6:0A:EF:7A:9D:D5:B8:D6:ED:7B:15:B3:C3:18:C9
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 019CAB345EAFD81D8F9C9D31506EB2FECD28
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0D50
Signing time: Sun 01 Mar 2026 21:01:01 +0000
Manifest this update: Sun 01 Mar 2026 21:01:01 +0000
Manifest next update: Mon 02 Mar 2026 21:01:01 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: Kq0EfVCIhUCscjJQiDKkLTOWjzB9J4DItQnNfY11Wrc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:5e:af:d8:1d:8f:9c:9d:31:50:6e:b2:fe:cd:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Mar 1 21:01:01 2026 GMT
Not After : Mar 2 21:01:01 2026 GMT
Subject: CN=0013af9e48a60aef7a9dd5b8d6ed7b15b3c318c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e9:5c:7a:f0:fd:15:24:e2:36:50:13:84:05:
65:aa:8b:b4:56:92:87:1c:05:89:3d:61:81:92:a6:
e3:1e:cf:b4:f2:b0:f0:d3:24:b6:01:c2:0e:00:dd:
66:c7:16:b9:b0:5f:02:eb:61:73:58:17:e4:e5:93:
c3:d6:e3:dd:11:2c:58:8f:d0:49:91:df:35:37:1a:
2e:93:6a:52:6d:76:bd:b8:06:36:a1:15:7e:8f:60:
fd:32:98:c2:d3:9e:c0:3a:df:22:74:21:e6:90:d8:
91:3c:29:12:e6:ad:82:9f:52:c0:b1:04:fb:69:2b:
49:3f:89:55:c6:0f:f2:30:d4:a3:fd:fc:49:e8:24:
ad:55:49:4a:86:75:80:93:ad:1c:d0:de:dd:34:62:
ad:f5:22:4c:db:0e:d6:0a:0b:11:22:d1:af:85:2e:
85:80:46:e4:1e:84:79:eb:70:21:5e:a6:fd:d9:4e:
32:d0:0f:20:ed:44:bb:38:17:0e:0d:fe:78:c5:d5:
96:0d:71:7f:52:09:55:3b:5e:0f:9d:8d:3c:6c:46:
07:e3:92:51:2a:19:28:37:f0:1e:0d:2d:01:98:96:
df:a0:f6:5b:b9:81:5a:56:c1:a8:f4:d2:0d:e1:22:
05:d9:98:cd:cb:f3:7f:8a:15:5a:5c:68:f9:e9:b4:
78:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:13:AF:9E:48:A6:0A:EF:7A:9D:D5:B8:D6:ED:7B:15:B3:C3:18:C9
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:87:f6:7c:17:f7:00:7c:59:fc:55:c0:38:83:e6:ab:1e:7a:
1d:3d:02:a9:27:69:65:1f:15:6e:95:3b:45:4d:25:c9:df:f6:
1a:28:c4:0b:fd:aa:35:15:20:e3:17:c5:b6:1b:f7:6a:48:9c:
be:da:ca:0e:51:2f:28:30:21:f8:83:0c:05:52:e4:7b:f4:c6:
4e:6d:5e:13:21:a8:51:8f:75:41:2f:ff:0e:b5:33:f9:68:20:
b0:be:6c:d1:38:36:16:49:58:66:cc:ab:fa:f1:d6:0f:37:ff:
c5:91:75:3a:fc:61:18:84:d8:08:0d:cd:39:fa:4c:9d:82:b3:
7a:a7:ee:cc:3b:b4:44:ec:78:b1:36:81:1b:14:aa:44:47:a1:
31:d6:5a:5a:72:84:bf:99:6f:6c:31:7d:1a:5b:1f:56:1f:64:
76:ec:f2:7b:ab:f8:5d:d5:d9:43:a4:76:56:44:e0:83:04:80:
79:9c:fe:25:b9:1f:e7:e2:37:93:1d:77:dd:06:89:af:f9:71:
3d:a7:e9:03:1a:72:b3:16:e4:fb:de:36:36:76:06:48:cf:50:
0f:96:fa:ce:be:41:02:bc:f3:29:c8:21:ae:eb:f7:ae:96:5d:
98:54:e8:91:1c:48:88:ab:ae:eb:86:6a:14:33:be:6b:7a:ae:
15:cc:6a:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:11:38 2026 by rpki-client