Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
File: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft (raw, json)
Hash identifier: 5DlH+2XK0b7/za7IZrE/VzNuacpzh4wH86NysxH7VL4=
Subject key identifier: 8A:A3:9D:B9:45:EF:70:39:BA:5B:0E:6D:F3:8F:32:5B:23:7D:58:43
Authority key identifier: 9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
Certificate issuer: /CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Certificate serial: 019D9AAC02AF86DC667694004520F54807F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
Manifest number: 0CD0
Signing time: Fri 17 Apr 2026 09:00:57 +0000
Manifest this update: Fri 17 Apr 2026 09:00:57 +0000
Manifest next update: Sat 18 Apr 2026 09:00:57 +0000
Files and hashes: 1: 0hVeTF2nAdH91iTO48OxEkht79k.roa (hash: nzFagvuCRYhuTPVfckXmQ2+P0jcP0uf+Gm7rafFIPmc=)
2: n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl (hash: kYcBBIkTaMSWb0wLvkXYNO4DpiR4KIePQl42Dt0vqGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:02:af:86:dc:66:76:94:00:45:20:f5:48:07:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f72e3a0cd74900535b6a6f8ffc657d93a0907a6
Validity
Not Before: Apr 17 09:00:57 2026 GMT
Not After : Apr 18 09:00:57 2026 GMT
Subject: CN=8aa39db945ef7039ba5b0e6df38f325b237d5843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b0:ee:0b:45:fd:a1:ad:2a:88:fe:fa:60:52:
49:1c:0b:d3:4f:bb:cf:34:eb:22:4e:7d:45:a3:1e:
27:cf:e1:0b:e4:55:eb:06:f7:58:d5:96:26:b5:b1:
0c:c3:b6:d4:3a:58:d4:a5:20:62:98:86:e5:0a:29:
38:77:a7:be:e0:53:2f:d8:c9:1e:e2:7d:e4:52:13:
50:2e:a0:9f:22:ac:ef:b7:90:f7:77:27:1f:fa:8b:
59:29:84:ff:f7:41:70:e1:54:d7:03:f4:89:97:e1:
37:6b:43:82:42:c0:86:3c:7e:bb:90:e2:66:9d:4e:
66:42:c1:41:aa:66:ca:5f:af:73:ea:24:21:74:9f:
f0:a1:c5:88:eb:47:12:3a:e9:f1:ee:b4:aa:09:03:
06:6f:28:96:21:f7:19:87:d3:fa:a8:94:12:89:dc:
64:f7:01:7f:41:3a:07:0e:55:43:cd:ca:9b:52:7a:
df:66:ee:6f:82:fe:2c:ac:63:92:da:3d:8f:c8:a4:
4a:5d:68:0d:01:59:1e:c7:89:e8:3b:fb:4f:5e:9c:
6f:61:7e:0e:f7:5a:e8:94:a8:45:91:bb:c6:63:51:
be:1d:26:8b:33:0b:f9:2c:5b:6d:48:d2:a6:0a:4e:
db:f1:f2:4f:6b:58:19:52:5d:87:00:2e:46:e3:23:
38:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A3:9D:B9:45:EF:70:39:BA:5B:0E:6D:F3:8F:32:5B:23:7D:58:43
X509v3 Authority Key Identifier:
keyid:9F:72:E3:A0:CD:74:90:05:35:B6:A6:F8:FF:C6:57:D9:3A:09:07:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/644501-9d42-4816-89c9-10aca3313387/1/n3LjoM10kAU1tqb4_8ZX2ToJB6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:98:ed:52:14:af:00:4e:49:22:93:eb:2c:94:34:96:c7:4b:
e8:79:1b:71:8c:a7:ea:a8:7b:60:ad:9b:96:6d:50:52:2a:59:
60:ce:b7:f0:79:70:00:a4:92:10:15:64:6f:8b:23:f9:3f:8e:
73:51:a8:3d:ef:bc:44:14:5a:37:84:39:ad:71:33:1e:c8:2c:
e9:e8:7f:8a:bc:3e:08:52:4b:a5:3d:bf:81:6a:ac:64:8e:f7:
43:18:eb:56:7f:d9:15:73:15:09:aa:23:ee:1c:95:11:45:1b:
9f:7f:4c:7d:12:ff:d9:49:ec:f4:6b:d6:b8:18:aa:32:d6:0b:
80:da:8b:26:25:31:ad:4e:b5:a9:fd:2d:f1:81:f4:40:a8:15:
d9:87:80:fa:f1:91:16:eb:06:a4:05:64:b2:4d:39:0a:11:ba:
4c:35:62:01:64:9c:3f:0d:dd:14:ec:0a:76:d8:f4:97:89:68:
76:32:f0:c5:88:18:a2:1e:a3:0e:1e:21:97:9f:33:49:bb:ed:
59:9b:97:a3:1b:22:eb:d9:92:44:f5:64:46:58:78:2e:eb:3d:
33:18:a5:e4:12:5d:6e:2a:7c:1d:a7:66:34:46:2a:ec:0d:d1:
4a:27:55:f2:e7:dd:23:69:39:4e:d6:92:ff:fa:02:5a:a9:91:
83:08:de:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:54 2026 by rpki-client