Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: SWt9sx4cQtgVOGSCCxhx9KMVVFTYkh7+g8mlfNrTjQk=
Subject key identifier: C1:4A:95:B4:0B:8D:BD:D3:06:48:78:38:63:C1:94:1A:7D:A5:4C:5F
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 019CAD5A18E6E1B85C142132F6F68C5918D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 0D47
Signing time: Mon 02 Mar 2026 07:01:28 +0000
Manifest this update: Mon 02 Mar 2026 07:01:28 +0000
Manifest next update: Tue 03 Mar 2026 07:01:28 +0000
Files and hashes: 1: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: U9yIFOXEqTa4SnSRMQWowr1l1WSNXtmresV1Q3X2mqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:5a:18:e6:e1:b8:5c:14:21:32:f6:f6:8c:59:18:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Mar 2 07:01:28 2026 GMT
Not After : Mar 3 07:01:28 2026 GMT
Subject: CN=c14a95b40b8dbdd30648783863c1941a7da54c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:a7:ec:17:95:7b:03:d4:bf:34:f3:58:f3:67:
78:42:c3:eb:d4:b3:b7:a6:a4:de:46:97:9b:70:8f:
c0:e1:fa:d9:10:7a:c8:c7:2a:d1:b9:99:59:28:8e:
cc:2b:e2:5e:6e:74:fc:c5:70:51:4e:ec:52:37:2c:
d1:40:9c:94:b9:5b:4c:4f:40:d0:e5:75:46:b9:30:
44:2b:12:f1:52:80:c8:21:c6:49:57:ee:10:67:c9:
ca:eb:d6:46:8d:f5:e8:d8:7c:82:ab:b8:88:52:b7:
9a:f7:f1:71:9d:8f:61:76:10:ff:5a:f7:98:f9:db:
71:37:eb:ad:dd:c0:7d:6d:d2:2d:d3:62:9d:74:bf:
d8:23:16:51:df:72:e2:53:39:36:67:68:e8:52:f6:
62:63:2e:14:0c:c8:09:6f:c2:d9:10:77:36:ec:d9:
0c:43:63:c3:d9:8f:c6:6a:60:09:be:9d:dc:da:4d:
9d:6b:29:c1:b7:cb:30:43:8d:08:75:27:1c:80:32:
29:eb:c1:ac:cc:94:9c:1b:91:65:fe:67:8d:84:29:
57:52:50:74:24:67:8e:ec:23:04:f0:44:e3:90:51:
bc:96:d0:db:a7:7d:65:f6:1b:a3:10:90:eb:1c:55:
58:5c:b5:aa:17:40:ac:6b:84:23:14:da:02:4b:57:
d6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:4A:95:B4:0B:8D:BD:D3:06:48:78:38:63:C1:94:1A:7D:A5:4C:5F
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:12:13:c8:77:34:f6:41:7f:fb:67:ba:a2:0c:7c:c2:98:2d:
cb:18:54:5e:58:80:b5:0b:ec:4d:a5:4e:e1:76:bd:f6:fa:a6:
0d:c7:ad:b0:a8:46:b6:08:2e:f8:bd:73:4c:ac:cc:f9:ab:7f:
e8:bf:f0:93:25:5e:ff:a5:6d:26:ee:84:12:d0:3b:bd:8b:e6:
8d:28:f4:98:e8:36:e2:f8:0f:02:e6:4f:f0:c1:6b:c9:e8:b4:
e4:66:f3:8c:43:b3:5d:d4:ac:de:c9:77:57:80:19:15:7c:73:
74:7b:15:54:11:c4:3b:eb:5a:3c:78:80:ff:95:ce:dd:9a:e4:
c9:b4:5f:ad:e3:42:1d:4d:bc:e2:5d:f0:80:37:e7:fd:34:a3:
a9:f1:3b:57:1e:07:57:0b:2e:83:f2:3a:aa:93:41:48:15:2f:
13:c5:8f:54:bc:40:4b:80:20:1f:66:7e:eb:ce:2e:69:12:30:
c6:7f:4f:fc:f2:49:7b:6f:b4:c5:96:91:1d:03:89:83:fb:83:
3b:18:36:2c:d1:3e:e2:e9:0b:75:2f:83:aa:93:66:f5:4a:4a:
53:f3:62:01:e7:7b:70:ab:87:1b:95:f4:cb:a6:5b:7c:cc:98:
27:d5:a8:43:8a:f6:b5:21:f2:a8:5a:68:19:c0:78:2b:b7:54:
16:25:5d:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWhjm4bhcFCEy9vaMWRjXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmOTcxMTA5ZDJlYTU2OWIzM2U5MGEzOGUwMzAyY2ZmMTY3
YmQwMzUwHhcNMjYwMzAyMDcwMTI4WhcNMjYwMzAzMDcwMTI4WjAzMTEwLwYDVQQD
EyhjMTRhOTViNDBiOGRiZGQzMDY0ODc4Mzg2M2MxOTQxYTdkYTU0YzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKfsF5V7A9S/NPNY82d4QsPr1LO3
pqTeRpebcI/A4frZEHrIxyrRuZlZKI7MK+JebnT8xXBRTuxSNyzRQJyUuVtMT0DQ
5XVGuTBEKxLxUoDIIcZJV+4QZ8nK69ZGjfXo2HyCq7iIUrea9/FxnY9hdhD/WveY
+dtxN+ut3cB9bdIt02KddL/YIxZR33LiUzk2Z2joUvZiYy4UDMgJb8LZEHc27NkM
Q2PD2Y/GamAJvp3c2k2daynBt8swQ40IdSccgDIp68GszJScG5Fl/meNhClXUlB0
JGeO7CME8ETjkFG8ltDbp31l9hujEJDrHFVYXLWqF0Csa4QjFNoCS1fWVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMFKlbQLjb3TBkh4OGPBlBp9pUxfMB8GA1UdIwQY
MBaAFJ+XEQnS6labM+kKOOAwLP8We9A1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUt
OTZiMjI0MjE5M2Y5LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9kNzRlMTAtMzQ5NC00NDZmLWEwMDUtOTZiMjI0MjE5M2Y5
LzEvbjVjUkNkTHFWcHN6NlFvNDREQXNfeFo3MERVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQRITyHc0
9kF/+2e6ogx8wpgtyxhUXliAtQvsTaVO4Xa99vqmDcetsKhGtggu+L1zTKzM+at/
6L/wkyVe/6VtJu6EEtA7vYvmjSj0mOg24vgPAuZP8MFryei05GbzjEOzXdSs3sl3
V4AZFXxzdHsVVBHEO+taPHiA/5XO3ZrkybRfreNCHU284l3wgDfn/TSjqfE7Vx4H
Vwsug/I6qpNBSBUvE8WPVLxAS4AgH2Z+684uaRIwxn9P/PJJe2+0xZaRHQOJg/uD
Oxg2LNE+4ukLdS+DqpNm9UpKU/NiAed7cKuHG5X0y6ZbfMyYJ9WoQ4r2tSHyqFpo
GcB4K7dUFiVdcg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:26:13 2026 by rpki-client