Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: bCyNToG5mdybP/dKxC/B+6KDAcECiK/b5e7ESVAwMI0=
Subject key identifier: ED:4B:18:0A:49:62:81:C7:2B:57:AA:EF:31:EA:85:DD:BC:EE:78:79
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 019D9BBF372D5007DD4A09685CCDFA4E1E6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 1389
Signing time: Fri 17 Apr 2026 14:01:33 +0000
Manifest this update: Fri 17 Apr 2026 14:01:33 +0000
Manifest next update: Sat 18 Apr 2026 14:01:33 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: DriqXVoed5dLV1zfoo4G9dSQoQxvMXKI26aU3XbVi68=)
2: t2nvtC07fwfG4DJZdYyApeiuOoI.roa (hash: Y4IHvCKtqY3mhfa2IhWhMpbzNg7eswOXZP8ib5pSXR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 14:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:bf:37:2d:50:07:dd:4a:09:68:5c:cd:fa:4e:1e:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Apr 17 14:01:33 2026 GMT
Not After : Apr 18 14:01:33 2026 GMT
Subject: CN=ed4b180a496281c72b57aaef31ea85ddbcee7879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:95:5c:af:0e:d3:54:08:df:af:89:aa:5b:9d:
5b:65:9b:b1:cc:ae:1b:9f:76:55:b7:2c:9e:52:b7:
68:2c:8c:6b:12:10:20:e6:2c:33:d0:f1:57:78:74:
5e:53:f0:d4:de:e7:6d:10:ec:89:0f:3a:20:21:c7:
c2:8d:2f:c8:bc:1f:6d:dc:95:a4:f6:b5:0a:56:45:
02:2a:16:3d:d6:e4:ef:b4:e4:98:b3:ab:fa:9b:0c:
ed:58:8d:ff:07:3c:30:05:3f:b1:49:81:8d:3b:4a:
1f:10:ca:bb:66:d2:ce:e5:55:30:7b:ed:08:61:42:
ef:78:e0:54:db:74:68:3e:4b:0d:4d:a1:3f:ee:a0:
cd:c7:13:b4:5d:71:56:e6:6e:14:2c:7a:17:25:86:
31:3a:87:52:07:68:8d:2c:17:83:4d:e5:a8:95:76:
34:f4:0a:6b:d1:df:30:ee:06:e0:2d:20:ed:2e:0c:
86:4f:10:c8:f9:c1:2d:35:7e:df:8f:b3:89:27:19:
cc:dc:07:d1:9d:f6:e1:9c:d4:c4:50:04:66:bc:f9:
75:1c:68:2b:b8:49:4c:06:49:5e:3a:95:bc:cf:b2:
55:ce:01:d6:fd:67:77:3c:7b:5e:a1:b1:d1:08:23:
9b:ce:2a:17:42:7d:d5:37:ef:4f:1c:41:6b:ae:a5:
2e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:4B:18:0A:49:62:81:C7:2B:57:AA:EF:31:EA:85:DD:BC:EE:78:79
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:5d:41:92:6b:da:92:0e:c2:e5:9d:d4:c6:e4:a7:8c:0a:68:
98:0a:5f:cc:63:7a:45:6d:e1:03:16:b5:fe:3b:21:ad:0d:cf:
14:4a:3b:2e:ea:f4:93:45:55:30:32:f9:c3:94:fa:38:49:46:
f8:b3:f6:f5:e9:c3:93:c5:80:28:b6:34:b3:7b:3b:85:38:c7:
7b:3c:b8:13:10:7d:b4:2c:c0:07:d6:64:89:31:d4:0b:57:98:
79:3b:7a:5c:e0:12:38:19:97:7f:54:75:11:2d:86:e4:9e:fa:
fc:4c:29:ee:2b:91:05:b7:13:a1:00:33:07:5c:fe:95:0e:d9:
e0:73:fc:9d:a0:89:92:37:85:8f:7d:58:ee:29:7f:81:a3:25:
de:70:9f:4e:c7:6d:7b:98:3e:2c:6d:ba:98:9d:09:ef:cc:60:
5e:42:20:86:da:8c:63:72:65:30:ff:a2:20:e9:4b:3e:27:3d:
b3:c7:6a:a4:f3:a7:74:00:fa:ab:42:ed:9a:0d:25:70:2c:f1:
c8:25:ff:1b:cd:41:75:1f:bf:d7:c0:5e:77:b0:a9:f1:c5:42:
16:98:6f:38:46:a3:dc:33:b9:62:2b:3f:15:5e:3a:ed:05:f7:
c1:02:ff:e3:0d:c0:5c:67:37:a1:0b:95:96:66:3a:29:fa:5c:
b4:de:a5:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:02:53 2026 by rpki-client