Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
File: n0XrWiiMaO1g29m4fk6CBsqckz8.mft (raw, json)
Hash identifier: UPSrIS3e5oe0eQJK5m33J/TiGo0oYyL3lhNeB8/2VlU=
Subject key identifier: 39:94:B3:0B:0A:71:B6:81:0E:1D:24:D8:53:1E:81:1E:B0:C9:85:23
Authority key identifier: 9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
Certificate issuer: /CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Certificate serial: 019D9AE2F6C2F8C9341500E0795F0CED62B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
Manifest number: 129C
Signing time: Fri 17 Apr 2026 10:00:58 +0000
Manifest this update: Fri 17 Apr 2026 10:00:58 +0000
Manifest next update: Sat 18 Apr 2026 10:00:58 +0000
Files and hashes: 1: n0XrWiiMaO1g29m4fk6CBsqckz8.crl (hash: UnUlNKW4pob8USoqYc1l6JtNOD1jeNq588M7BmQgJAo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:e2:f6:c2:f8:c9:34:15:00:e0:79:5f:0c:ed:62:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f45eb5a288c68ed60dbd9b87e4e8206ca9c933f
Validity
Not Before: Apr 17 10:00:58 2026 GMT
Not After : Apr 18 10:00:58 2026 GMT
Subject: CN=3994b30b0a71b6810e1d24d8531e811eb0c98523
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:e5:79:9f:af:37:a9:d2:ae:67:40:91:d8:4a:
2c:e0:0b:43:f7:4b:08:25:0f:6d:49:fa:46:fa:3a:
59:00:d7:80:19:07:07:a9:b6:7c:ad:a4:08:92:fe:
58:d1:1e:79:0f:07:59:9a:32:40:ad:4c:5b:92:5d:
e5:e7:78:dc:c5:ef:c6:8f:5b:f9:1a:1b:2d:d1:01:
ae:79:24:d6:ce:49:a9:7f:fa:cd:81:df:69:1a:33:
5f:27:c7:4e:4a:46:ff:92:8b:db:23:3a:e8:2c:07:
1a:a2:2e:6a:df:e1:60:dd:4a:bc:fa:96:1c:de:d1:
8a:13:5d:e4:96:48:bc:d0:10:65:6e:b7:e4:50:ee:
fa:09:4e:b8:d0:9b:93:0f:58:54:29:a5:3a:d4:5f:
9a:9d:84:8f:48:bc:1b:ca:fc:0c:ea:6b:95:c7:bf:
cd:c7:1a:2c:34:c2:3c:5d:dd:84:80:d4:a4:d3:c3:
3f:56:f8:8f:0f:d4:d1:c2:cb:d2:f6:44:c7:7f:96:
d7:d7:a0:26:11:36:31:d2:02:e2:ad:d9:40:fa:f0:
8d:a3:0e:c6:96:ed:9f:8f:ac:56:93:86:c1:28:e2:
62:ae:5b:0b:41:75:64:d1:02:b5:59:d7:8f:be:d3:
b0:62:53:88:4a:53:e8:3b:03:f5:e2:71:f2:22:38:
4c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:94:B3:0B:0A:71:B6:81:0E:1D:24:D8:53:1E:81:1E:B0:C9:85:23
X509v3 Authority Key Identifier:
keyid:9F:45:EB:5A:28:8C:68:ED:60:DB:D9:B8:7E:4E:82:06:CA:9C:93:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n0XrWiiMaO1g29m4fk6CBsqckz8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/e42336-eb77-4540-be41-55fd6dc1a1d8/1/n0XrWiiMaO1g29m4fk6CBsqckz8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ab:eb:e6:45:ab:17:4c:7c:21:ae:2d:fc:4a:69:2a:3d:8c:
cd:15:83:9d:58:7c:a1:fa:bf:b3:56:b1:1f:55:05:2b:b8:4f:
8e:23:ff:dd:9f:e8:c3:46:c0:82:fb:60:c6:02:90:46:2f:2f:
21:6e:0a:42:7b:15:a9:f5:1a:6b:d2:6c:94:ff:2b:40:34:47:
51:a9:15:4c:12:77:e0:cb:5f:de:5e:6f:0d:7c:cd:10:eb:72:
35:6c:f5:f8:33:b0:19:f8:45:74:93:86:fa:c6:1f:01:d2:f0:
36:3d:c2:b2:c8:e6:aa:9e:d7:37:7e:7e:de:f0:a8:1d:45:c5:
0f:1d:95:b6:7c:55:68:74:4a:4f:9e:91:b3:c2:4c:07:66:23:
f3:fa:7a:84:65:34:5d:57:a0:0c:02:18:03:74:bd:fb:85:de:
a2:e4:5b:dd:1e:c1:7c:c7:a2:a7:5d:57:f0:b6:0d:73:e0:85:
24:75:a3:fe:50:3e:85:30:87:2e:d3:a1:8d:6a:e7:53:6b:a9:
50:1d:c8:a0:b8:66:4a:e1:dc:64:82:da:02:fd:03:9b:06:33:
15:ab:c4:16:8a:61:a6:e6:23:31:7d:fe:c8:c6:a0:b3:01:32:
5d:05:c3:b5:f8:ad:d9:6e:25:96:49:37:72:b3:b0:d9:b3:65:
0c:fb:04:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:00:57 2026 by rpki-client