Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier: 7c5wSH12yEjzUxPLk/C3sQdxaqZuM6jY17I8lS/lIM4=
Subject key identifier: 19:49:98:1A:F5:13:A4:F6:9B:EC:E1:D3:4E:FD:2D:5F:A5:A6:CD:30
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial: 019CAD5975EC71B4E9AAD33A602DD9E7CC16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number: 1221
Signing time: Mon 02 Mar 2026 07:00:47 +0000
Manifest this update: Mon 02 Mar 2026 07:00:47 +0000
Manifest next update: Tue 03 Mar 2026 07:00:47 +0000
Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: rNKZo1hNZWEv9+klySBaBLz+MUAoaN8S0OLYFJLxh+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:75:ec:71:b4:e9:aa:d3:3a:60:2d:d9:e7:cc:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Validity
Not Before: Mar 2 07:00:47 2026 GMT
Not After : Mar 3 07:00:47 2026 GMT
Subject: CN=1949981af513a4f69bece1d34efd2d5fa5a6cd30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:0c:43:a1:ee:53:0f:61:5b:64:14:79:b4:70:
2b:f7:32:5d:0a:31:95:a3:67:39:22:da:82:f4:ba:
2a:0a:52:b8:11:9e:45:c9:3b:52:af:6c:25:7e:2d:
b3:50:89:54:56:eb:21:ca:c0:fa:c0:ce:85:5c:5d:
3c:36:f3:a9:b2:a8:2d:14:bb:84:d5:b5:36:ae:bb:
f1:95:16:c6:e2:47:cb:27:77:84:2e:3b:ae:13:c4:
1d:a3:3a:5e:14:90:31:dd:f3:db:1b:f0:af:ad:63:
86:56:32:f3:62:d4:90:d8:e6:6f:bd:52:a2:37:38:
81:77:85:2d:60:fb:fd:de:4f:a2:b6:12:75:d4:e3:
27:a8:39:39:83:3b:4a:b4:03:fd:b4:b3:6e:d6:4b:
47:ed:06:c3:36:63:14:ab:f0:1b:4d:9a:65:a7:97:
15:1a:20:48:7a:6f:93:5a:5b:c3:10:5e:ae:bb:5e:
9e:c2:5f:f4:df:60:48:b9:15:0b:f8:54:97:8a:93:
6f:9e:02:80:dd:e5:2f:77:91:dd:33:26:e0:ea:af:
86:51:ba:1f:34:6e:bf:38:0a:c3:d2:d9:83:61:a8:
f3:46:a7:06:5b:3f:00:12:b0:fd:43:25:79:61:d7:
4c:ab:45:06:19:62:e5:39:7b:23:1a:6a:a8:f2:8a:
7c:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:49:98:1A:F5:13:A4:F6:9B:EC:E1:D3:4E:FD:2D:5F:A5:A6:CD:30
X509v3 Authority Key Identifier:
keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:85:4b:08:8e:8d:d4:6c:e7:1c:cf:3e:86:ef:d6:f4:be:06:
23:e1:6a:27:2a:9d:8e:bd:bd:8a:d0:13:2d:18:43:fb:24:16:
a8:2a:f6:f7:95:a1:e0:41:1a:11:de:1d:db:61:e9:d6:f5:98:
a5:da:00:15:20:be:35:f7:4c:eb:aa:49:dd:72:7b:8f:a0:fb:
5d:9b:8e:46:cc:21:07:c5:e0:06:1b:cf:2a:c4:52:e7:de:75:
4c:ea:86:8f:b4:8c:7c:16:e4:bf:90:53:6a:7f:46:34:4c:c8:
e0:fc:de:c1:fc:aa:e2:d2:0e:98:81:2d:4c:20:d9:49:86:43:
2d:5d:07:66:df:ba:d2:c4:97:03:aa:95:78:58:4b:f6:5f:88:
90:19:3d:c7:f9:31:a4:b4:34:65:b3:06:c6:2f:9d:e5:94:57:
d6:21:cc:f3:2e:ee:10:7a:1e:16:8e:d8:91:5b:d5:13:23:a8:
74:12:cc:4a:b8:e0:55:1d:1e:97:d1:e9:2a:3b:60:c8:b8:a9:
70:01:b5:22:2e:e2:ab:dd:a1:28:cf:9a:21:0e:e8:23:b7:83:
f4:d3:d2:83:b2:a2:d6:48:25:b5:9a:d8:4f:d4:8c:49:ef:c0:
6c:4a:1e:f5:bf:2e:c2:c7:f1:90:a0:4d:99:14:bd:d6:26:8c:
e1:93:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:42:49 2026 by rpki-client