Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft
File: n43ba5j65Xcxmbx0zEVyCClPrJ8.mft (raw, json)
Hash identifier: uN2zk4nEy3Pdei4h0IjV0FTghixA8EFBL8cOO8Ce76A=
Subject key identifier: 20:D4:20:FD:46:C9:80:6B:A4:34:6A:E5:35:86:ED:3D:9F:B8:11:C7
Authority key identifier: 9F:8D:DB:6B:98:FA:E5:77:31:99:BC:74:CC:45:72:08:29:4F:AC:9F
Certificate issuer: /CN=9f8ddb6b98fae5773199bc74cc457208294fac9f
Certificate serial: 019CA869EDBDC306814C79F3FCF302DAE572
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n43ba5j65Xcxmbx0zEVyCClPrJ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft
Manifest number: 63
Signing time: Sun 01 Mar 2026 08:00:40 +0000
Manifest this update: Sun 01 Mar 2026 08:00:40 +0000
Manifest next update: Mon 02 Mar 2026 08:00:40 +0000
Files and hashes: 1: KYdro_-TYjUYOYn2jmTsWTjiNQE.asa (hash: hrVQ2S7yh+jiK5CKVHCZO/hAag7/f3dpnVjjDvyd46s=)
2: n43ba5j65Xcxmbx0zEVyCClPrJ8.crl (hash: ufwwy+3MbqdJBcPRNmXY2/weZyZ3l+H13+K0xWLxjUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n43ba5j65Xcxmbx0zEVyCClPrJ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:69:ed:bd:c3:06:81:4c:79:f3:fc:f3:02:da:e5:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f8ddb6b98fae5773199bc74cc457208294fac9f
Validity
Not Before: Mar 1 08:00:40 2026 GMT
Not After : Mar 2 08:00:40 2026 GMT
Subject: CN=20d420fd46c9806ba4346ae53586ed3d9fb811c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:67:bb:87:d4:09:f5:5c:77:ba:87:22:89:37:
6d:7e:e3:ec:30:b7:ff:39:52:c2:49:46:d1:4a:d6:
d0:0b:31:fa:52:5f:28:e2:cf:33:f0:2a:14:e7:38:
a9:d9:15:e2:59:37:49:1c:48:0e:17:d5:76:cf:58:
15:25:5e:cc:20:0a:9a:6b:d9:21:59:2c:86:5d:63:
31:9c:31:6c:85:af:05:f0:46:74:c3:d7:0a:09:7f:
73:e7:24:3e:fa:34:df:65:1c:fe:73:48:bb:08:b3:
07:5a:47:94:f5:e2:3b:89:0d:bc:6e:3d:d5:27:9a:
b3:af:cc:31:80:76:ab:b1:2e:31:45:b5:6b:e5:e3:
63:3e:18:72:b2:6e:06:36:21:01:eb:a6:70:9b:e7:
37:47:09:af:db:9e:63:5c:75:3a:c2:d8:09:f6:7f:
07:d9:bf:68:37:51:92:9c:85:ff:e0:37:52:bd:7f:
bf:ce:25:3a:2f:83:ca:68:12:7a:3a:88:a0:12:60:
ed:96:6d:23:02:2b:d3:0e:98:33:fd:ad:cc:16:82:
ca:b4:fc:c8:de:7d:4e:99:50:6b:97:eb:c4:ff:70:
3b:dc:17:ee:fb:42:ea:ca:94:54:35:d6:b6:dd:6c:
bf:2f:c6:f2:f9:11:dc:3d:36:93:c4:fb:7a:42:c5:
2d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:D4:20:FD:46:C9:80:6B:A4:34:6A:E5:35:86:ED:3D:9F:B8:11:C7
X509v3 Authority Key Identifier:
keyid:9F:8D:DB:6B:98:FA:E5:77:31:99:BC:74:CC:45:72:08:29:4F:AC:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n43ba5j65Xcxmbx0zEVyCClPrJ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/9fb45b-3e90-4ac7-bfe6-94c519e98561/1/n43ba5j65Xcxmbx0zEVyCClPrJ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:6e:b4:3d:fa:73:79:3f:bf:df:0e:76:f3:ca:d7:d0:73:09:
96:4c:5e:0e:e8:f8:51:3f:e1:89:90:5d:37:cf:1b:91:0b:d6:
da:ef:64:41:12:9e:d4:4a:49:57:d7:ce:1d:98:30:2e:62:10:
95:53:d6:23:57:af:06:dc:65:6a:f9:54:35:cb:a4:c9:9a:7a:
57:00:85:c2:b3:65:68:86:50:5c:b2:1e:d9:8d:58:a1:33:65:
fc:3f:f3:3f:dc:74:60:31:28:26:92:a5:8c:01:84:17:a6:56:
ac:c8:f2:fc:37:26:fc:c4:a1:cc:00:7e:79:83:de:27:eb:a7:
b4:58:42:6a:99:17:0c:20:8e:67:58:c9:04:7b:e0:79:6e:aa:
d2:8e:cf:69:d1:1a:b9:4c:63:44:8b:ad:83:6b:41:18:be:95:
02:23:0a:62:45:35:7e:0b:88:ef:ea:8c:c4:5b:1e:e4:6a:7c:
96:76:19:a4:4e:f3:4b:7b:80:c4:93:c8:3e:6d:18:41:03:cf:
01:d8:26:07:b9:73:5c:1e:2a:5f:da:b2:a5:5c:64:dc:7e:66:
66:48:dd:80:f6:fc:02:75:c4:b5:a4:b8:b3:39:91:c6:20:29:
e1:33:a4:72:31:e9:09:99:1f:c5:ff:12:17:3b:38:05:1e:a0:
3d:a5:f8:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:42:32 2026 by rpki-client