
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
File: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft (raw, json)
Hash identifier: n0Hp+/r969a797DYoCX8y/wu8TMQ+uzaGwBFu7Ko3Q0=
Subject key identifier: C2:F0:2C:2F:78:9E:31:FC:22:9B:F9:5F:AF:5E:70:71:50:E9:49:35
Authority key identifier: 9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
Certificate issuer: /CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Certificate serial: 019CAAFD7EE13AF1E970C0C81BFDEB69D7FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
Manifest number: 05EA
Signing time: Sun 01 Mar 2026 20:01:05 +0000
Manifest this update: Sun 01 Mar 2026 20:01:05 +0000
Manifest next update: Mon 02 Mar 2026 20:01:05 +0000
Files and hashes: 1: n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl (hash: dJglfFuxKlDnBxnYHdOsb4iYF2/8MPJ/c2amYQ/Rwmg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:7e:e1:3a:f1:e9:70:c0:c8:1b:fd:eb:69:d7:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe1b3360177a00bc3dc5743e0263284604f9b74
Validity
Not Before: Mar 1 20:01:05 2026 GMT
Not After : Mar 2 20:01:05 2026 GMT
Subject: CN=c2f02c2f789e31fc229bf95faf5e707150e94935
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:a9:ee:59:d3:0a:ec:3d:92:7b:b3:92:c6:
b3:9e:16:9a:7d:56:34:a3:7a:94:4d:ae:1e:3c:a2:
4b:03:e5:ab:2a:3d:36:72:8e:8c:0a:4e:ed:83:63:
16:f4:7e:06:a2:cf:92:ab:ac:e5:15:f4:0d:be:aa:
f0:73:63:a8:7d:28:9e:fd:a8:5a:a9:19:ca:13:bc:
5c:93:7d:0a:a8:b5:d4:13:c7:08:b3:40:1e:5d:fe:
d3:da:5b:2d:85:45:ae:54:cf:02:8a:f6:fd:0a:69:
95:8d:75:c9:11:19:62:04:15:02:b8:9c:ab:32:69:
35:50:22:db:c8:25:88:d2:79:b8:a4:12:b2:52:31:
b7:c9:6a:97:7d:c1:a3:c7:46:ce:8c:e0:06:f7:bd:
46:68:56:a3:52:54:65:74:f7:42:4f:af:fa:58:80:
3a:4e:2d:de:4d:57:40:ff:6d:41:b8:86:c4:c8:56:
8b:db:79:e2:9d:d7:6e:87:7b:32:f6:69:ad:89:23:
2d:eb:0c:dc:ca:40:03:5e:4f:82:03:14:c2:56:51:
1e:8a:b1:c1:88:70:d5:05:15:51:75:f2:cb:a6:c1:
e3:d4:74:6e:eb:81:67:14:67:74:f9:fc:3d:95:81:
42:98:fc:3d:8e:b7:2c:3b:98:2d:7f:a2:ce:8f:c2:
a0:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:F0:2C:2F:78:9E:31:FC:22:9B:F9:5F:AF:5E:70:71:50:E9:49:35
X509v3 Authority Key Identifier:
keyid:9F:E1:B3:36:01:77:A0:0B:C3:DC:57:43:E0:26:32:84:60:4F:9B:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/e9fb61-b566-4f36-95c9-f975ea4e3674/1/n-GzNgF3oAvD3FdD4CYyhGBPm3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:d6:66:a2:5d:b3:d4:92:d0:01:83:dc:0c:a3:42:58:d0:27:
be:ba:a0:8e:ea:05:9b:c8:d0:c5:62:9f:65:61:5c:a0:e5:ca:
03:d2:98:fa:1b:56:0d:9e:94:a5:c5:79:9a:2f:09:32:ef:74:
83:7f:28:11:a0:c7:32:71:9f:30:58:07:d7:0f:c0:6f:89:f0:
1e:5f:60:be:d9:ad:64:c0:a5:9e:b2:c7:7a:64:e6:d6:23:5b:
6b:c0:b5:46:16:1a:07:48:d7:41:bf:38:6d:f3:5d:8c:ce:35:
0e:48:02:d9:4e:f5:dc:80:d5:c4:78:e6:bb:00:f4:30:d8:a8:
31:4d:bc:cf:45:27:84:19:16:95:1a:df:1b:54:99:57:59:69:
41:8a:b0:09:c3:5e:c2:21:48:c5:fb:ff:e0:c5:f8:7e:4f:90:
f6:86:70:68:0a:d4:95:c2:6b:ad:24:29:8c:64:0c:c7:e1:23:
2b:7f:48:16:63:a6:93:3e:57:45:53:f4:b7:43:f0:d0:55:5a:
06:16:cc:0e:1d:e2:66:96:8c:78:5c:cd:c2:71:61:5f:91:16:
d1:42:6b:bc:ce:28:62:a8:85:e5:10:a8:67:27:5c:23:b4:54:
4a:91:db:29:fe:d4:13:9c:a3:63:fb:ab:db:81:89:f4:be:45:
23:f9:f8:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:56:35 2026 by rpki-client