Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier: MOJ9/Tez757Z85ou4iOJiwZJp5Se5sVWYBbt8y8jqAc=
Subject key identifier: 8F:7A:CA:80:5F:C6:AE:79:4D:99:D2:7E:18:8A:77:67:CA:B1:29:12
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial: 019D9A74B14C041D395874BFEA4FB808F1A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number: 0666
Signing time: Fri 17 Apr 2026 08:00:31 +0000
Manifest this update: Fri 17 Apr 2026 08:00:31 +0000
Manifest next update: Sat 18 Apr 2026 08:00:31 +0000
Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: zgrIdNyRJ9/NTqHUbCBLWHpjnkmbJJCsNVVyl4oTD+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:b1:4c:04:1d:39:58:74:bf:ea:4f:b8:08:f1:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Validity
Not Before: Apr 17 08:00:31 2026 GMT
Not After : Apr 18 08:00:31 2026 GMT
Subject: CN=8f7aca805fc6ae794d99d27e188a7767cab12912
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:63:19:e4:3d:54:3a:ea:01:85:be:96:1e:19:
6a:67:98:4f:f6:78:43:33:ae:d7:01:76:f5:eb:57:
1a:28:4e:4d:e7:3f:3a:04:c2:2d:4e:6a:4c:da:27:
aa:c0:91:fe:50:89:ac:5d:53:fd:61:51:2c:f1:27:
c2:ec:d4:3c:c4:de:48:85:d9:ac:e4:f8:56:85:5b:
3c:38:35:63:e3:0c:80:fc:15:c7:5c:b8:c3:c5:ed:
c3:a3:0d:34:1e:ce:cf:6d:f7:6c:d2:90:a1:6d:8d:
c0:e1:09:ec:07:30:f1:4e:38:a7:ce:ce:3f:27:07:
dc:91:fc:ab:81:d0:17:b4:6d:4b:63:0b:18:7d:c2:
94:54:64:02:7f:93:ee:83:e0:51:f4:8c:eb:3c:2b:
ff:4e:54:a5:16:84:40:f4:94:d8:8c:56:e6:62:f7:
5a:f5:8e:be:f6:c7:6c:9d:b9:20:bf:60:80:0e:6a:
26:f3:cd:e3:8a:7b:b7:c3:16:ee:73:6a:09:f6:5e:
37:fa:c2:f6:6e:76:e5:b0:7e:49:4e:06:fd:b1:bf:
dc:ad:ea:29:1d:7d:1c:f8:51:cb:d9:6b:4f:78:0a:
f4:0e:76:06:f0:4b:71:25:8e:d3:22:32:4c:1c:97:
6b:e4:bb:47:bb:90:8d:d3:44:a6:a7:81:a4:a2:fa:
dd:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:7A:CA:80:5F:C6:AE:79:4D:99:D2:7E:18:8A:77:67:CA:B1:29:12
X509v3 Authority Key Identifier:
keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:0e:ef:d9:79:17:4f:5c:1e:32:e9:ca:d9:4c:fa:bd:6a:f2:
ab:e5:92:56:41:24:5a:54:c2:a5:a2:88:82:51:11:9d:eb:76:
a0:d7:42:cf:47:92:ca:ee:e1:b5:d5:a7:48:7f:aa:05:ed:a3:
a9:1a:f2:9b:ce:e0:06:31:b8:e9:49:30:4a:e3:c5:a4:fd:77:
52:7e:05:c4:c9:35:eb:55:1c:00:2e:2b:8f:d0:b1:b1:99:fc:
00:33:3a:88:8c:91:c7:ff:3f:bf:cc:d1:a5:62:cc:02:d2:2c:
94:f4:63:54:dd:8d:b3:a8:ee:3b:76:65:24:46:15:10:b1:e0:
65:3a:88:13:20:0d:df:d3:f4:86:16:77:48:37:09:9d:a3:db:
86:95:47:76:19:44:60:25:c8:c3:25:1a:4a:b1:d1:42:bf:ff:
67:2e:69:a7:92:10:47:4d:ce:82:5d:6c:9b:e6:02:47:67:27:
c1:70:93:da:4e:e5:28:98:37:be:0b:b5:24:d1:6b:12:70:cf:
aa:19:36:bb:c2:ae:88:cb:98:23:b7:f7:43:2e:37:cb:4f:6a:
ec:96:ae:e0:db:4c:7d:22:64:d7:30:55:1a:51:31:a1:a2:d2:
c1:0d:77:6a:3e:05:7b:84:58:a5:a3:7e:5c:d6:d1:67:fe:a3:
50:ab:36:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:24:47 2026 by rpki-client