Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
File: n73cYxPvxLZyp-KzKuPESE_l9jA.mft (raw, json)
Hash identifier: PJ0SjF13GM791y3Q2ByDyi6DFeoNtWR4upTDmJZOW64=
Subject key identifier: 08:82:A6:FF:98:DE:7C:F8:46:BE:C4:7F:6D:EC:DF:FD:F6:4D:92:A3
Authority key identifier: 9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
Certificate issuer: /CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Certificate serial: 019CAAC6900709A6DA13325C9B36584CAA60
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
Manifest number: 13B0
Signing time: Sun 01 Mar 2026 19:01:05 +0000
Manifest this update: Sun 01 Mar 2026 19:01:05 +0000
Manifest next update: Mon 02 Mar 2026 19:01:05 +0000
Files and hashes: 1: jrXfTMtV6H8gigUiywKcsYuAQWc.roa (hash: mgcQY3R0XYxNLA95issP8LL8M3tboWLY7IU4hd9EG4w=)
2: n73cYxPvxLZyp-KzKuPESE_l9jA.crl (hash: zXYw8zr5vd4t9VUbV0DZbSXZ34yX6AT7sjr3HcaXhvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:90:07:09:a6:da:13:32:5c:9b:36:58:4c:aa:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fbddc6313efc4b672a7e2b32ae3c4484fe5f630
Validity
Not Before: Mar 1 19:01:05 2026 GMT
Not After : Mar 2 19:01:05 2026 GMT
Subject: CN=0882a6ff98de7cf846bec47f6decdffdf64d92a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:cf:30:50:ed:82:36:79:26:0d:62:47:e9:14:
ee:6e:a3:79:2b:ae:58:81:9f:b3:ca:fd:db:d3:11:
2e:6e:a6:5a:38:6a:8e:98:df:d9:f0:a3:a9:dd:68:
10:62:e5:c7:47:71:9f:65:93:a0:bd:8a:95:f9:2d:
fa:92:f9:4b:8f:ef:b1:c2:6e:82:d5:55:c4:9a:3d:
7d:23:e1:45:6f:ce:9e:d4:91:d8:dc:f3:c6:d4:23:
00:79:3a:33:ed:08:ab:1e:2a:e9:2c:7e:4f:91:57:
e5:f4:d3:0c:2b:53:ed:c9:85:4e:d2:bc:bb:20:f7:
04:8c:34:e5:ca:0e:00:59:36:5e:fb:fc:34:76:93:
6c:7b:e6:23:f5:51:8f:6e:40:62:84:b5:f7:36:0e:
d3:d4:af:ce:a8:c7:87:0f:47:39:73:15:2c:08:39:
91:1e:36:73:ef:58:d7:cb:39:a5:a4:35:1a:66:83:
c8:26:1c:e4:b6:bd:8f:d2:ed:af:24:74:2f:fc:c4:
84:2b:5a:84:92:46:1f:c5:d8:05:e7:63:24:79:cd:
a2:4a:52:e3:c5:d5:5d:99:87:28:41:ae:72:5a:4a:
8e:31:d6:c5:21:49:e7:8a:7e:ac:c1:80:58:fc:51:
77:db:ac:fe:95:57:70:c2:e2:e0:70:13:2d:2a:3b:
93:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:82:A6:FF:98:DE:7C:F8:46:BE:C4:7F:6D:EC:DF:FD:F6:4D:92:A3
X509v3 Authority Key Identifier:
keyid:9F:BD:DC:63:13:EF:C4:B6:72:A7:E2:B3:2A:E3:C4:48:4F:E5:F6:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n73cYxPvxLZyp-KzKuPESE_l9jA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/3e069a-3421-40ab-9e0c-45cc2dd6e491/1/n73cYxPvxLZyp-KzKuPESE_l9jA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:72:f8:fc:f2:01:38:83:58:c5:2c:df:4c:4e:fc:13:aa:4a:
c0:b4:76:8e:41:15:8b:9f:2f:bc:1d:b9:d0:19:d5:88:c5:2f:
87:b7:68:fb:e5:a1:ad:05:45:c9:00:b1:ce:a4:b5:19:8d:15:
64:71:b1:4a:19:45:d8:55:4f:5b:fb:c8:6d:a6:48:50:ce:11:
c4:20:c2:69:14:e9:54:63:30:b3:8c:f5:a5:db:03:ba:28:50:
4f:15:53:a0:80:72:74:9f:b2:94:fb:04:9f:b4:e3:30:82:c1:
e8:92:0f:fc:04:20:42:95:45:17:ca:84:cf:98:f9:cb:e9:ef:
87:7d:7d:5d:c6:ea:fb:7a:97:19:c5:ff:f1:99:a2:2c:4f:24:
9f:ce:6d:d0:ba:e6:84:b1:98:d3:a8:55:bf:9c:94:d8:52:02:
39:f5:bd:bb:91:df:0a:d0:80:d5:71:8a:4e:6e:32:b1:20:5f:
50:69:a7:f3:00:4d:41:31:a1:07:84:b1:89:24:cf:2c:03:dd:
34:1d:46:21:41:db:cd:5c:4a:4a:3f:a7:61:04:8e:97:2f:e5:
fe:d6:5e:80:55:88:19:25:bd:3e:6d:44:81:4b:ec:c9:9d:54:
0d:02:e4:06:f7:e2:79:2a:5b:17:4b:b6:b8:5f:3b:65:c1:cb:
6d:cd:71:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:51 2026 by rpki-client