Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
File: n3Qy9pnL0kmy48nFW976-DmGtEI.mft (raw, json)
Hash identifier: GeVkRPd9vNGTmJBe7tNieNEZNCR8EwcjAq3eQfCwAOk=
Subject key identifier: 8B:42:30:BD:E2:00:66:87:AD:65:25:85:17:24:41:37:B9:6A:71:3A
Authority key identifier: 9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
Certificate issuer: /CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Certificate serial: 019CAC47005256975CADDC36418A594FD2A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
Manifest number: 130D
Signing time: Mon 02 Mar 2026 02:01:00 +0000
Manifest this update: Mon 02 Mar 2026 02:01:00 +0000
Manifest next update: Tue 03 Mar 2026 02:01:00 +0000
Files and hashes: 1: n3Qy9pnL0kmy48nFW976-DmGtEI.crl (hash: fIS1wZr1d1YEWpUjrS+FWP72rKsxXRRjPziUIeCy3Bw=)
2: t2nvtC07fwfG4DJZdYyApeiuOoI.roa (hash: Y4IHvCKtqY3mhfa2IhWhMpbzNg7eswOXZP8ib5pSXR4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:47:00:52:56:97:5c:ad:dc:36:41:8a:59:4f:d2:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7432f699cbd249b2e3c9c55bdefaf83986b442
Validity
Not Before: Mar 2 02:01:00 2026 GMT
Not After : Mar 3 02:01:00 2026 GMT
Subject: CN=8b4230bde2006687ad65258517244137b96a713a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a3:4f:ea:22:ca:aa:00:24:ff:2d:0e:9e:21:
13:e3:16:80:89:e5:86:cd:51:78:02:a7:92:06:1a:
80:e8:67:6a:fe:9d:94:fa:50:53:88:47:56:8d:e3:
4c:e0:0b:36:08:1f:52:a8:6f:dd:4a:78:29:83:54:
c7:6b:1d:a3:a7:11:d8:4b:d5:fb:4a:3c:08:1d:0b:
7e:79:3a:b6:ac:44:8c:f3:03:d4:84:41:2c:70:a3:
b2:a1:d7:0c:00:f1:46:57:d4:a9:e8:2e:1b:e8:e7:
84:09:6e:a8:5f:2d:78:b2:51:b2:49:c9:69:b8:d5:
5e:1c:39:b0:88:bb:f0:53:68:43:18:d2:83:4a:80:
dc:69:5d:89:d4:25:f1:20:06:fc:ca:73:3c:b7:63:
54:77:6d:fd:12:8b:48:dd:53:98:bf:e9:34:cd:d7:
28:94:49:29:98:ad:e6:d4:9b:04:5a:01:a3:c7:da:
b0:f6:a0:e4:b1:c4:00:b7:e0:42:fe:f2:48:25:d3:
7c:78:ca:8b:6c:e8:67:e4:af:2f:1f:25:a4:cf:2b:
5f:ab:59:fc:4f:ea:ae:eb:1e:ed:7f:79:f8:45:49:
a0:37:25:b1:42:c6:72:e8:21:f4:f9:f7:5a:7e:fc:
08:2f:73:7a:17:15:35:2e:65:b5:4b:ba:66:da:6b:
2a:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:42:30:BD:E2:00:66:87:AD:65:25:85:17:24:41:37:B9:6A:71:3A
X509v3 Authority Key Identifier:
keyid:9F:74:32:F6:99:CB:D2:49:B2:E3:C9:C5:5B:DE:FA:F8:39:86:B4:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3Qy9pnL0kmy48nFW976-DmGtEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/0cf187-ecb3-4b42-91e4-6addfcb18f99/1/n3Qy9pnL0kmy48nFW976-DmGtEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:34:07:cc:e5:15:98:a8:d9:84:06:f5:cf:ab:16:e5:37:45:
9f:74:76:eb:ad:80:38:b6:75:44:74:60:e6:ae:8d:f5:f2:46:
eb:20:9d:8d:f5:97:60:fb:14:7d:36:97:dd:88:a3:0f:6f:15:
56:74:fc:26:85:45:cd:2d:ad:8f:54:09:bc:e5:45:db:3d:bc:
46:35:2b:5f:a1:29:d8:df:c3:39:95:bd:fb:2a:6e:cc:90:47:
df:4c:77:24:94:d6:93:66:15:fb:04:d6:b4:17:95:b8:c4:82:
8d:bf:0b:f5:68:42:e0:b8:2f:62:6c:7f:29:86:7e:81:4c:d2:
a6:9b:fd:0e:d3:fa:ad:73:81:9b:1d:e2:1e:dd:b2:15:d9:fc:
a1:1f:1e:71:ab:10:e3:ac:12:d1:d8:9e:cb:46:de:65:60:55:
a2:d2:c9:35:e2:7a:ee:0b:52:b7:f8:84:e6:c8:4d:23:d1:be:
17:4f:cd:a2:40:fc:a0:76:c4:20:bc:5e:73:2a:c9:ae:f6:c4:
cd:cd:7d:82:e1:1a:4c:78:6a:22:90:35:35:d6:45:2f:d8:4d:
fc:90:57:8f:a7:9d:d8:ef:35:b9:df:87:be:d2:c5:93:49:d7:
82:19:ee:c5:1c:c8:21:d8:f8:59:2d:12:6c:88:8c:78:a1:11:
63:40:ba:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRwBSVpdcrdw2QYpZT9KiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNzQzMmY2OTljYmQyNDliMmUzYzljNTViZGVmYWY4Mzk4
NmI0NDIwHhcNMjYwMzAyMDIwMTAwWhcNMjYwMzAzMDIwMTAwWjAzMTEwLwYDVQQD
Eyg4YjQyMzBiZGUyMDA2Njg3YWQ2NTI1ODUxNzI0NDEzN2I5NmE3MTNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuaNP6iLKqgAk/y0OniET4xaAieWG
zVF4AqeSBhqA6Gdq/p2U+lBTiEdWjeNM4As2CB9SqG/dSngpg1THax2jpxHYS9X7
SjwIHQt+eTq2rESM8wPUhEEscKOyodcMAPFGV9Sp6C4b6OeECW6oXy14slGySclp
uNVeHDmwiLvwU2hDGNKDSoDcaV2J1CXxIAb8ynM8t2NUd239EotI3VOYv+k0zdco
lEkpmK3m1JsEWgGjx9qw9qDkscQAt+BC/vJIJdN8eMqLbOhn5K8vHyWkzytfq1n8
T+qu6x7tf3n4RUmgNyWxQsZy6CH0+fdafvwIL3N6FxU1LmW1S7pm2msqmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFItCML3iAGaHrWUlhRckQTe5anE6MB8GA1UdIwQY
MBaAFJ90MvaZy9JJsuPJxVve+vg5hrRCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQt
NmFkZGZjYjE4Zjk5LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi8wY2YxODctZWNiMy00YjQyLTkxZTQtNmFkZGZjYjE4Zjk5
LzEvbjNReTlwbkwwa215NDhuRlc5NzYtRG1HdEVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgDQHzOUV
mKjZhAb1z6sW5TdFn3R2662AOLZ1RHRg5q6N9fJG6yCdjfWXYPsUfTaX3YijD28V
VnT8JoVFzS2tj1QJvOVF2z28RjUrX6Ep2N/DOZW9+ypuzJBH30x3JJTWk2YV+wTW
tBeVuMSCjb8L9WhC4LgvYmx/KYZ+gUzSppv9DtP6rXOBmx3iHt2yFdn8oR8ecasQ
46wS0diey0beZWBVotLJNeJ67gtSt/iE5shNI9G+F0/NokD8oHbEILxecyrJrvbE
zc19guEaTHhqIpA1NdZFL9hN/JBXj6ed2O81ud+HvtLFk0nXghnuxRzIIdj4WS0S
bIiMeKERY0C6MA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:39:42 2026 by rpki-client