Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: zE6VxB387C5V4l8m01yTe0q+DIG09+B8BqgSUcRwtck=
Subject key identifier: 1A:DB:A4:F9:7D:8F:FD:28:A5:A9:57:F7:A7:31:65:E5:30:5C:7E:F7
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 019CAB3472FF2EBBB952E4532B07434B4DF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0C54
Signing time: Sun 01 Mar 2026 21:01:07 +0000
Manifest this update: Sun 01 Mar 2026 21:01:07 +0000
Manifest next update: Mon 02 Mar 2026 21:01:07 +0000
Files and hashes: 1: 0hVeTF2nAdH91iTO48OxEkht79k.roa (hash: nzFagvuCRYhuTPVfckXmQ2+P0jcP0uf+Gm7rafFIPmc=)
2: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: N0M9pev9sQ2Z7Eho8be9vUO5x8HMKXDxvV4mR7i89cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:72:ff:2e:bb:b9:52:e4:53:2b:07:43:4b:4d:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Mar 1 21:01:07 2026 GMT
Not After : Mar 2 21:01:07 2026 GMT
Subject: CN=1adba4f97d8ffd28a5a957f7a73165e5305c7ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:9e:99:c9:04:08:83:57:fe:77:c1:d5:7c:a3:
c6:03:83:8e:da:d3:d3:d9:95:df:b2:39:f7:74:9d:
05:6b:26:0e:cc:32:27:99:aa:9a:f6:57:bf:8f:92:
39:a7:cc:39:7e:d3:6a:95:07:44:a4:6b:86:6f:1f:
2d:79:b0:e8:7a:75:03:1c:2c:eb:1e:81:0d:51:8c:
be:8c:48:42:52:e2:ff:b1:ee:b2:a2:8c:50:d6:de:
9b:ba:65:f1:58:76:b2:11:bf:0e:77:7b:dc:8d:5e:
1e:a9:49:1f:62:85:eb:af:7c:2e:f1:96:ed:7f:67:
73:e0:68:d3:dd:f7:e0:93:9e:a7:56:af:26:37:de:
89:cb:15:b6:4b:38:58:ea:89:45:4a:46:77:de:47:
ab:67:35:57:31:10:8b:0a:f7:3c:54:bd:9e:dd:49:
8c:8e:76:c2:30:f8:d5:2f:56:c8:e1:63:27:97:96:
36:ac:54:11:26:d4:7a:c2:d2:4d:50:19:5a:bf:d9:
33:13:0c:89:3f:41:12:0c:8c:ca:90:32:a2:6f:21:
b7:af:e9:b2:62:13:e8:49:02:b6:9f:e7:70:38:19:
bb:9e:00:ec:a0:aa:56:71:13:44:8f:63:81:bf:a4:
f7:81:84:ac:67:48:d2:cf:92:e0:26:8e:64:00:5e:
ff:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:DB:A4:F9:7D:8F:FD:28:A5:A9:57:F7:A7:31:65:E5:30:5C:7E:F7
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
86:23:3d:d8:b3:0e:9c:94:09:a1:b3:3a:ff:fa:2a:5e:08:83:
a8:24:08:cb:e2:43:d8:72:5c:44:0f:01:6d:e6:74:fd:6b:2d:
cf:9d:2f:89:7b:48:49:ec:e4:b3:f4:4f:7b:c7:26:60:69:8b:
55:ff:ec:b7:59:51:11:50:be:2b:c5:1c:f3:05:54:0e:c9:91:
b6:57:36:fd:e3:59:cc:9a:12:5d:74:e2:a9:ad:4a:62:4d:5c:
c5:0d:42:dd:ba:77:65:ba:db:96:f8:ff:b5:81:ca:8b:80:8c:
60:f4:1e:ea:aa:1d:44:78:2c:de:22:74:a8:14:ec:0e:1d:7e:
3b:26:43:bd:fa:eb:8a:f7:4f:fa:14:9f:a6:2b:8a:32:77:cb:
06:c7:fd:10:1f:0f:03:ed:6e:3e:7f:4e:c5:44:bb:18:ee:d3:
f7:07:7c:ce:34:ad:f5:ef:7e:46:34:bc:3b:b0:ca:9b:10:bb:
82:39:13:b8:b4:0d:19:72:74:78:f2:32:54:3f:06:c5:d7:8b:
fc:b4:73:84:7b:e4:26:b7:84:aa:e3:3d:13:e9:49:e9:a4:be:
09:1a:c0:a7:41:87:71:8e:5e:c7:c9:7e:fb:34:10:5b:cf:9f:
24:0d:86:c3:4e:58:55:20:62:e4:3b:e0:fe:7e:d5:b4:12:46:
59:c2:ae:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:58:46 2026 by rpki-client