Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: DPAKDGrw9/fqbzMDWvuDFRC9avVS6n8hFU3wPaUT2jA=
Subject key identifier: B6:C6:E6:7D:D9:23:27:64:B0:61:B1:8A:F3:D5:B4:C8:11:83:2A:01
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 019CADFE04A36D2A8B881EAF410D0E3E9DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0E4F
Signing time: Mon 02 Mar 2026 10:00:31 +0000
Manifest this update: Mon 02 Mar 2026 10:00:31 +0000
Manifest next update: Tue 03 Mar 2026 10:00:31 +0000
Files and hashes: 1: ARvHC35mwQKQSHNS1J2UcxIOXhk.roa (hash: I+P0+0NUkpAeizIJ4ocanrSBj4ovLyBDmtkFNJ1PWfg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: OeT09nUDxxa4Thv8nLky0jN85MEBR1LbcDNXtZw+HBQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:04:a3:6d:2a:8b:88:1e:af:41:0d:0e:3e:9d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Mar 2 10:00:31 2026 GMT
Not After : Mar 3 10:00:31 2026 GMT
Subject: CN=b6c6e67dd9232764b061b18af3d5b4c811832a01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:6e:eb:b6:4f:fa:33:02:8c:00:33:d9:72:2e:
22:db:0b:32:6f:60:d0:79:db:41:20:09:6f:bf:57:
54:c4:8c:03:f4:4e:cf:4b:04:cf:41:1c:3b:56:5c:
1e:30:05:a2:26:a7:88:c9:60:e5:8c:e6:1f:0d:63:
c0:89:0a:94:d8:1f:58:07:f0:a1:5d:9a:ef:cb:57:
67:98:2a:6b:24:e3:4c:6c:00:44:ea:a5:0d:64:78:
ea:23:8b:fd:32:c0:c1:1f:9a:e1:40:f6:46:aa:41:
58:a1:6f:f9:57:ba:1c:45:e7:36:25:f3:d7:cc:95:
d5:d6:86:fd:0b:79:47:fd:14:6b:8e:ac:d2:6b:14:
92:3c:33:7e:f8:a5:b8:f1:8f:c7:34:a5:bf:0a:e5:
e8:ec:d2:fb:f1:3b:3d:a5:9c:2b:5d:87:f4:67:79:
a7:7c:d6:47:f9:f5:38:15:cd:ea:44:d6:98:de:68:
4c:56:f6:84:23:3e:36:ac:ae:39:ec:e1:bc:fb:86:
e8:41:a9:53:bc:c6:16:3d:f6:7d:95:20:a4:06:0e:
cc:55:46:49:7b:6a:51:c6:24:62:f3:30:11:16:e7:
8d:9b:29:ef:ea:38:38:50:fd:4f:2c:7a:c7:6d:4e:
c8:6f:bc:65:e2:45:ba:ba:e9:34:f1:0b:7a:3f:1b:
3e:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:E6:7D:D9:23:27:64:B0:61:B1:8A:F3:D5:B4:C8:11:83:2A:01
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:79:3e:af:b6:b3:43:28:a3:89:5f:c3:1e:92:f7:d0:e8:83:
85:f6:e4:5f:49:d9:ec:ac:04:95:c9:45:e1:6a:cf:dc:8b:e3:
4e:40:26:a0:33:ee:cf:f1:07:a8:8b:e2:a3:b9:78:03:e5:26:
6f:d5:68:7c:2c:4c:3b:f9:d2:4b:88:af:51:17:93:c2:d6:c5:
04:0d:2a:d9:e7:7a:25:6d:d1:6b:14:a9:fc:02:0e:a4:7f:76:
ee:b7:9b:58:24:20:1b:b8:e5:9c:bb:b9:8f:50:3a:45:ee:ea:
5a:29:ab:51:7a:62:c4:41:5f:25:99:e4:c8:62:ec:6f:28:d2:
87:89:f2:77:67:aa:98:26:f0:76:21:e0:e7:bc:31:41:69:77:
17:78:a8:c1:87:a6:69:d6:0d:7c:24:25:bf:97:56:74:6b:fb:
36:21:e0:7e:42:62:0e:e0:5e:bc:43:35:0b:2f:57:02:51:3a:
d8:1d:05:9e:fa:5c:b5:57:78:90:ff:12:af:6a:79:e9:5f:61:
11:63:98:09:27:73:13:28:cd:bc:da:6f:eb:2c:cf:c3:a1:9d:
e7:06:1d:d4:c6:d4:b4:bd:c7:4e:5f:b2:f1:e0:46:fe:a9:87:
7b:31:66:83:98:a8:d6:d9:03:b6:3a:82:24:d1:87:bf:74:6e:
e2:78:9b:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/gSjbSqLiB6vQQ0OPp2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNWZmM2RlMTBhMzFiYmY1NzAxYzBiZGIyNmM2NTA4MDE3
ZGEyY2EwHhcNMjYwMzAyMTAwMDMxWhcNMjYwMzAzMTAwMDMxWjAzMTEwLwYDVQQD
EyhiNmM2ZTY3ZGQ5MjMyNzY0YjA2MWIxOGFmM2Q1YjRjODExODMyYTAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl27rtk/6MwKMADPZci4i2wsyb2DQ
edtBIAlvv1dUxIwD9E7PSwTPQRw7VlweMAWiJqeIyWDljOYfDWPAiQqU2B9YB/Ch
XZrvy1dnmCprJONMbABE6qUNZHjqI4v9MsDBH5rhQPZGqkFYoW/5V7ocRec2JfPX
zJXV1ob9C3lH/RRrjqzSaxSSPDN++KW48Y/HNKW/CuXo7NL78Ts9pZwrXYf0Z3mn
fNZH+fU4Fc3qRNaY3mhMVvaEIz42rK457OG8+4boQalTvMYWPfZ9lSCkBg7MVUZJ
e2pRxiRi8zARFueNmynv6jg4UP1PLHrHbU7Ib7xl4kW6uuk08Qt6Pxs+iQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLbG5n3ZIydksGGxivPVtMgRgyoBMB8GA1UdIwQY
MBaAFJ9f894Qoxu/VwHAvbJsZQgBfaLKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUt
NTcwMWQwMWMxZTg3LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi80Y2FlMTAtMzdhNS00MGVmLTg5ZDUtNTcwMWQwMWMxZTg3
LzEvbjFfejNoQ2pHNzlYQWNDOXNteGxDQUY5b3NvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKXk+r7az
QyijiV/DHpL30OiDhfbkX0nZ7KwElclF4WrP3IvjTkAmoDPuz/EHqIvio7l4A+Um
b9VofCxMO/nSS4ivUReTwtbFBA0q2ed6JW3RaxSp/AIOpH927rebWCQgG7jlnLu5
j1A6Re7qWimrUXpixEFfJZnkyGLsbyjSh4nyd2eqmCbwdiHg57wxQWl3F3iowYem
adYNfCQlv5dWdGv7NiHgfkJiDuBevEM1Cy9XAlE62B0FnvpctVd4kP8Sr2p56V9h
EWOYCSdzEyjNvNpv6yzPw6Gd5wYd1MbUtL3HTl+y8eBG/qmHezFmg5io1tkDtjqC
JNGHv3Ru4nibHg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:53:34 2026 by rpki-client