Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier: ERAe8mnHEYp1oNECHgIYzq5zCDIeTZmTQncToocib1c=
Subject key identifier: D4:83:79:B1:2A:63:CB:F9:06:52:0D:A3:2C:D6:9B:61:F1:74:D5:A4
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 019CAA21C774DAA6C66486F2FF025D22E0AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number: 14E2
Signing time: Sun 01 Mar 2026 16:01:06 +0000
Manifest this update: Sun 01 Mar 2026 16:01:06 +0000
Manifest next update: Mon 02 Mar 2026 16:01:06 +0000
Files and hashes: 1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=)
2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: AteMxVD+ugnQRY82ucxLvNhDLCg3iYQEWYLk5aWJgQ0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:c7:74:da:a6:c6:64:86:f2:ff:02:5d:22:e0:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Mar 1 16:01:06 2026 GMT
Not After : Mar 2 16:01:06 2026 GMT
Subject: CN=d48379b12a63cbf906520da32cd69b61f174d5a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:cb:66:e7:25:b7:d1:62:54:0e:06:b5:e6:9e:
b3:04:9a:a1:de:be:af:90:8b:aa:da:5f:83:c6:82:
e6:5c:f5:fd:9c:c5:50:b2:5a:0f:a4:b8:f7:9d:80:
11:79:c1:30:2a:6b:0b:bf:68:69:de:16:5b:4e:dc:
e3:6e:56:f5:30:27:0b:61:c8:18:eb:9b:f8:c9:8e:
71:64:6d:60:f7:71:4b:70:ea:ee:03:54:b9:59:65:
76:d4:e5:49:99:7a:2e:9c:7f:39:ec:e6:53:81:0f:
5d:69:70:ae:4c:08:6d:4f:e8:d2:a5:1b:9a:90:68:
a7:66:84:75:04:09:e6:21:51:a9:c7:e1:3f:3b:f6:
f7:ff:a4:d7:4b:e5:46:63:45:f6:14:be:38:3a:d3:
fb:78:d5:be:19:bb:bc:af:34:e8:4e:97:ff:ca:1c:
92:05:c2:d7:1b:39:27:f7:13:18:61:98:5a:39:c2:
8a:e7:62:e4:6c:7e:f5:53:7c:24:d0:b3:c9:e9:b5:
25:92:4a:ea:28:d4:ac:6b:8a:c7:84:7e:7a:9f:70:
de:1d:0f:b2:95:44:97:e9:b9:1e:89:59:66:e7:41:
df:c0:14:82:a6:c8:18:d3:47:b9:18:fa:f2:46:8c:
21:6c:7c:e4:ac:2f:b2:05:60:f0:b3:03:30:fc:dc:
fb:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:83:79:B1:2A:63:CB:F9:06:52:0D:A3:2C:D6:9B:61:F1:74:D5:A4
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:b2:fc:4e:57:af:f4:11:35:f3:d4:1e:92:dd:e2:14:0b:51:
b9:cf:52:4f:44:fc:f2:46:bd:98:fd:97:e7:ec:4d:04:32:6e:
f5:44:0c:6d:aa:48:de:f6:a2:07:16:7e:3c:96:35:af:3f:da:
4e:3c:2c:4f:48:a4:2d:93:ef:52:56:3e:ca:63:06:cc:26:9a:
23:be:8a:d4:53:bc:77:32:9d:c5:1f:c6:8f:b8:b7:b7:f4:71:
8e:5a:40:56:99:97:2b:97:47:f4:8e:d7:da:f0:d3:38:62:11:
7d:c4:06:2e:7c:76:03:ac:9f:16:77:36:52:e0:f9:04:32:ed:
83:5d:ac:c4:b0:77:10:04:b2:4a:4a:37:1e:db:3f:77:39:04:
8a:0d:e8:9b:0b:7c:c3:0b:48:98:b0:15:f1:a7:0e:fc:f8:b5:
a6:1a:e1:34:43:73:d4:b2:a1:45:7a:84:b5:45:05:ff:fa:c5:
7d:26:58:61:1c:d4:6d:1f:26:8b:2e:c6:42:35:f3:c0:dd:5d:
fc:27:96:9a:e8:8f:69:a7:2e:33:4e:54:7a:3b:5c:46:be:1b:
4c:59:ac:f2:8d:45:39:88:e9:55:b3:8f:8c:bd:fa:34:8a:8f:
40:52:74:3a:28:f8:25:7a:0c:58:dd:d7:f3:f5:60:f8:33:1c:
82:a7:0e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:45 2026 by rpki-client