Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: hgHuHSbAHFVfsxfj1sJvsVMx7c/CbYlDX+WK+iPp6+k=
Subject key identifier: 97:3E:CF:4C:7F:3F:CD:81:5F:10:FC:50:03:F5:63:CC:B3:D6:4C:68
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 019DA3E6C75044E13BACC130141A1B5090E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 168A
Signing time: Sun 19 Apr 2026 04:01:43 +0000
Manifest this update: Sun 19 Apr 2026 04:01:43 +0000
Manifest next update: Mon 20 Apr 2026 04:01:43 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: 8Tk2w2FrTf/f+Dpsvn6i7OmWKeqRghSN7MKgAxrBPLg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e6:c7:50:44:e1:3b:ac:c1:30:14:1a:1b:50:90:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Apr 19 04:01:43 2026 GMT
Not After : Apr 20 04:01:43 2026 GMT
Subject: CN=973ecf4c7f3fcd815f10fc5003f563ccb3d64c68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6c:7c:0d:68:34:11:f4:98:9e:f8:aa:3f:99:
3b:a4:64:16:db:1b:01:2e:79:7c:4d:76:b1:52:31:
52:ed:18:2c:a4:df:97:b1:6b:6f:78:a1:ce:c1:20:
e5:e9:a0:9c:06:cb:8a:7e:bc:4c:d1:02:a1:c1:3c:
70:d2:6b:92:9f:0a:6c:9c:5e:1b:2a:5c:a6:4c:d4:
cc:75:1c:67:a7:99:06:05:35:39:91:25:2f:f3:d5:
7c:d2:77:28:35:f2:4f:e6:1d:e0:c3:c7:88:90:a2:
8d:88:70:7d:1c:52:2e:e0:b1:ef:2d:00:86:46:ec:
e4:30:b3:f0:bf:76:4b:46:25:36:f3:43:0b:0e:11:
55:08:49:61:e6:e4:a1:93:c6:3b:d7:cd:4e:8a:dd:
16:4d:1d:06:cd:12:77:d4:bc:82:e2:55:94:80:14:
75:05:a3:ad:cf:ce:a3:3e:ff:1d:0d:9b:03:66:28:
c8:5d:6f:8e:64:42:e5:f9:70:4f:97:fa:88:47:de:
ce:37:91:54:9c:8a:60:e0:0a:3e:52:9c:19:ea:93:
cd:9d:4f:20:79:26:64:ae:d3:9d:98:4f:bf:0a:80:
c2:69:0d:14:e6:e7:bc:7c:de:d9:aa:3b:fa:73:03:
27:b4:5c:06:85:6a:51:e1:4a:52:fb:a2:e5:df:09:
8b:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:3E:CF:4C:7F:3F:CD:81:5F:10:FC:50:03:F5:63:CC:B3:D6:4C:68
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:b2:87:57:21:dd:2c:da:8b:d1:40:bc:ad:37:b6:46:a5:52:
d7:79:d6:86:4e:26:68:12:37:87:96:0a:8b:35:03:16:2b:78:
a9:f1:b1:12:d1:c8:3c:be:9e:8b:34:34:b8:1e:6d:4c:b3:e6:
1f:44:95:8f:bc:77:c6:99:1c:ed:71:96:20:07:bc:2e:ad:81:
ef:34:f8:88:f2:af:21:0b:1d:a7:d4:b3:95:d0:23:db:a1:e1:
32:68:14:5c:fb:af:97:7e:11:75:4d:c7:c7:75:3f:fa:bd:ad:
f7:4c:45:9b:75:8e:27:9b:93:c0:8e:0e:a2:28:d4:06:43:39:
8b:03:80:0a:5f:dc:88:12:7f:ca:c9:4e:7c:94:53:1f:43:31:
5e:83:79:1d:1e:15:a0:35:23:fc:9a:51:5c:37:2a:2d:bb:16:
1c:38:93:4d:93:ed:db:82:5d:56:ba:d1:5e:b4:af:a3:1c:f5:
ea:f1:51:35:e2:54:72:24:cc:ad:e0:7c:32:25:ea:55:e0:83:
88:34:47:eb:24:55:64:43:c9:db:c5:d8:51:66:0f:71:a2:9c:
40:3e:82:6f:ac:3c:a0:5a:5d:52:7f:96:ab:b9:57:f7:ec:be:
1d:92:01:d2:4b:ee:f9:37:68:b1:cf:5c:97:82:5c:13:c3:13:
6e:d6:7f:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:11:06 2026 by rpki-client