Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: RxiFziC8z2Ag+09qggDxnkT/26fvoKrBRw1PcBAFFME=
Subject key identifier: 8E:47:B3:2E:D2:A6:6A:54:86:BD:28:AB:D2:41:E0:32:67:B2:2C:A1
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 019D9A3F02F5A642601C80F6F60AE45F18DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 142C
Signing time: Fri 17 Apr 2026 07:01:53 +0000
Manifest this update: Fri 17 Apr 2026 07:01:53 +0000
Manifest next update: Sat 18 Apr 2026 07:01:53 +0000
Files and hashes: 1: jrXfTMtV6H8gigUiywKcsYuAQWc.roa (hash: mgcQY3R0XYxNLA95issP8LL8M3tboWLY7IU4hd9EG4w=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: lWQ3wHAbo+3V5hndK14Vjn5LEvKqUch6KnrPWr8pk4o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3f:02:f5:a6:42:60:1c:80:f6:f6:0a:e4:5f:18:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Apr 17 07:01:53 2026 GMT
Not After : Apr 18 07:01:53 2026 GMT
Subject: CN=8e47b32ed2a66a5486bd28abd241e03267b22ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:bb:c3:44:31:73:74:e2:f3:78:43:be:2f:9a:
97:00:7e:d1:a0:17:ff:24:fa:88:3e:49:88:73:de:
1d:be:75:d2:f2:f9:62:a1:ff:cb:6d:20:c9:7e:eb:
99:ff:5e:ff:29:c5:4e:61:02:53:6e:43:e7:af:9b:
8b:c3:ab:89:c7:96:cd:7a:ea:7d:18:3d:0a:26:9a:
bb:d5:b5:1b:eb:f1:bb:74:3e:51:62:98:cf:94:ce:
c2:48:06:24:83:ee:f2:dd:91:57:8d:32:a3:15:f2:
cf:04:9e:d1:a7:f5:ef:19:fc:ec:4c:e0:b4:68:bb:
0a:fa:d9:4e:c4:48:1c:de:6d:a4:39:4a:6b:5d:9a:
e8:9e:80:98:3b:19:bf:2d:e6:d2:17:3f:46:60:63:
ed:50:88:a1:64:4c:5b:12:40:3b:9c:84:14:76:f0:
fa:01:30:14:72:e0:3d:26:7d:aa:8b:89:ef:d4:f6:
f1:04:dc:16:ec:4f:9b:08:8a:85:b3:16:6c:da:66:
f8:98:0d:1e:29:a7:a6:7e:c9:e1:cd:a1:b6:ae:10:
32:46:a3:93:ca:1f:10:a8:75:af:9d:4b:67:31:ca:
60:a1:10:6b:9e:1e:64:5e:dc:7c:f6:a3:e6:b7:bb:
46:56:d0:73:ff:0e:57:4f:90:c7:16:58:06:c3:94:
2d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:47:B3:2E:D2:A6:6A:54:86:BD:28:AB:D2:41:E0:32:67:B2:2C:A1
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:c3:a7:39:ac:3b:99:3b:27:44:86:6e:2e:fd:63:8a:74:ce:
a8:ab:4d:19:7b:4c:61:a5:94:9d:c9:6e:9b:31:91:39:d5:52:
15:95:1b:3e:f7:dc:14:86:9f:06:c1:1e:7c:c7:e0:7d:82:b8:
8f:7d:09:15:3b:2d:01:58:b0:e3:9e:d4:b6:be:c2:13:71:f9:
90:88:d6:7d:06:88:34:32:f4:9c:ce:ef:09:45:32:c2:59:ed:
ac:85:15:93:ca:57:97:03:1e:2a:db:22:cb:48:75:06:ad:e7:
7f:ad:b0:3f:f6:bf:26:56:66:7e:8d:55:4a:c8:bb:09:66:a4:
11:9b:aa:b5:4a:1a:17:54:31:88:f3:c8:1c:4f:a7:ff:32:12:
b5:61:55:5b:e7:ff:a6:8f:4a:7e:30:d2:89:97:8c:06:b5:26:
0f:c5:16:79:9c:31:cf:b6:2f:96:b0:c7:ff:fd:48:a6:98:b5:
ee:c8:c2:cc:75:bf:67:a0:7f:17:dc:d0:01:8f:18:e5:34:b6:
8f:37:fa:76:54:e3:71:f7:ba:df:bd:f1:38:a6:9b:6d:73:30:
f7:1d:42:4b:de:63:b0:29:fb:90:3f:36:bf:96:3c:c6:7b:35:
2d:2b:26:b2:fa:0d:c3:31:4d:28:0e:22:e1:c1:60:b9:7e:5f:
a6:44:ee:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:21 2026 by rpki-client