Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
File: n2fgyFot61Rm6r3JCEYViph3hKI.mft (raw, json)
Hash identifier: PYjCDFvZr8SofytHgF+t5dhaz2mm8+HiFxIW9g8Q4UQ=
Subject key identifier: AD:6F:AD:64:59:91:C2:83:8A:AF:96:91:C6:30:BC:E4:B2:7E:89:4D
Authority key identifier: 9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
Certificate issuer: /CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Certificate serial: 019CACB51DEF0888A36E9C5C773755B17A9A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
Manifest number: 160A
Signing time: Mon 02 Mar 2026 04:01:16 +0000
Manifest this update: Mon 02 Mar 2026 04:01:16 +0000
Manifest next update: Tue 03 Mar 2026 04:01:16 +0000
Files and hashes: 1: n2fgyFot61Rm6r3JCEYViph3hKI.crl (hash: qr2a/WexNqidtEYTB0nia41DueD6JGdvRT6kqh7Wr/s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:1d:ef:08:88:a3:6e:9c:5c:77:37:55:b1:7a:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f67e0c85a2deb5466eabdc90846158a987784a2
Validity
Not Before: Mar 2 04:01:16 2026 GMT
Not After : Mar 3 04:01:16 2026 GMT
Subject: CN=ad6fad645991c2838aaf9691c630bce4b27e894d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:6c:52:39:eb:a0:f8:0e:a2:0c:45:fd:bb:ca:
84:8a:52:82:e8:a8:94:9a:e3:c3:a2:84:c9:f8:1d:
44:e7:6a:87:92:de:b1:64:af:1a:7e:e4:c2:94:2a:
7c:6e:e6:18:16:75:03:2c:ac:c0:da:13:bd:ec:f4:
82:43:53:39:cb:6c:31:98:9a:02:1a:4a:72:a9:fd:
a1:4a:9d:c6:9b:dd:e6:ad:8a:2e:c4:e1:a8:ac:0c:
d5:bf:9f:41:e4:c4:fe:71:fd:43:b9:e7:83:bf:21:
0e:f2:55:0c:51:65:0b:cb:5a:ce:1b:3f:69:63:c0:
5c:5c:97:64:2a:82:cb:75:87:a7:93:11:a9:81:77:
78:f7:ff:bb:1c:1a:9d:16:7f:97:58:63:bd:1d:0a:
52:ec:8b:3f:3e:ce:df:2e:a3:1b:a5:48:ff:54:8d:
08:fe:0a:89:73:9d:d9:b6:4d:d4:86:c9:48:34:ab:
71:22:a1:ce:ba:a4:8d:83:dd:82:9b:54:fd:99:ba:
1a:6d:4f:10:03:b5:c8:61:1d:4f:9f:f8:73:52:6d:
77:da:64:5c:2b:ad:23:eb:69:31:4c:d7:c1:5f:35:
94:c1:0a:88:8d:b9:f1:70:bc:c7:68:2d:f5:fc:9f:
38:cc:b3:7e:46:f7:c1:37:9b:3d:53:16:2f:07:dc:
1a:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:6F:AD:64:59:91:C2:83:8A:AF:96:91:C6:30:BC:E4:B2:7E:89:4D
X509v3 Authority Key Identifier:
keyid:9F:67:E0:C8:5A:2D:EB:54:66:EA:BD:C9:08:46:15:8A:98:77:84:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2fgyFot61Rm6r3JCEYViph3hKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/fb4c2b-ebd2-46b2-bcd0-84db39403768/1/n2fgyFot61Rm6r3JCEYViph3hKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:36:b9:02:c1:cd:dd:2d:90:f3:f4:23:7f:ad:0a:6c:77:14:
c6:97:af:4b:8b:04:fb:5f:9c:7e:f2:e3:dd:8e:0d:22:e5:ca:
63:d8:d7:d6:d6:3c:0e:e3:c4:69:fa:2f:df:cf:a8:99:ab:6c:
e9:e9:6f:df:e5:ef:aa:13:77:b3:95:73:6d:2a:6d:6d:42:a9:
cb:fc:8a:d0:4e:fb:90:77:7b:64:f5:ff:aa:25:4e:d0:6c:92:
68:2f:8d:f2:41:c9:47:77:be:b9:55:3f:7e:98:79:8a:73:16:
42:e3:9c:1f:08:26:b2:62:41:5e:43:62:b0:3f:f4:25:6a:d1:
ef:1d:8d:df:3f:5d:05:b1:0e:f0:89:dd:1e:52:ea:ea:85:22:
fb:23:e0:af:99:d6:ce:a1:f0:af:9c:bf:44:8f:de:b3:a2:d9:
6d:f8:71:58:24:50:c5:b1:2e:e8:ce:38:44:3c:8f:eb:0f:0b:
7f:37:70:91:b9:90:75:91:a2:67:61:d8:4b:86:13:5d:b5:98:
e6:7e:12:c1:d9:d3:9d:13:37:76:06:8e:57:47:8d:1e:b2:2d:
9f:68:8f:a0:33:8f:44:76:83:41:3a:ff:11:ce:6e:dd:9f:e9:
31:9a:3d:89:b6:a3:05:bf:91:73:d8:0f:df:ce:61:13:8f:0f:
6a:8b:f5:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:00:39 2026 by rpki-client