Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
File: n1_z3hCjG79XAcC9smxlCAF9oso.mft (raw, json)
Hash identifier: f7OdjN2ZYTbff9JQGhdw4HmaMD5GQNtSCfAqtv5BOSs=
Subject key identifier: A8:DC:BF:04:6A:EB:60:9B:FE:62:48:69:6B:77:A3:0C:A2:37:D3:73
Authority key identifier: 9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
Certificate issuer: /CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Certificate serial: 019D9B87B5142371E1253081695AD93F4166
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
Manifest number: 0ECA
Signing time: Fri 17 Apr 2026 13:00:55 +0000
Manifest this update: Fri 17 Apr 2026 13:00:55 +0000
Manifest next update: Sat 18 Apr 2026 13:00:55 +0000
Files and hashes: 1: ARvHC35mwQKQSHNS1J2UcxIOXhk.roa (hash: I+P0+0NUkpAeizIJ4ocanrSBj4ovLyBDmtkFNJ1PWfg=)
2: n1_z3hCjG79XAcC9smxlCAF9oso.crl (hash: Q/l3Zw5dBrlDQNBdAGg+KMwVYnyF2oVISCBzIz1jSKU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:b5:14:23:71:e1:25:30:81:69:5a:d9:3f:41:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5ff3de10a31bbf5701c0bdb26c6508017da2ca
Validity
Not Before: Apr 17 13:00:55 2026 GMT
Not After : Apr 18 13:00:55 2026 GMT
Subject: CN=a8dcbf046aeb609bfe6248696b77a30ca237d373
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:3f:b9:96:88:34:1f:17:de:f8:fd:69:47:6e:
1d:9c:eb:4a:03:66:0f:80:0f:41:f3:54:8c:47:3c:
3f:32:dc:46:58:e1:6a:e8:b1:2a:bb:0e:9b:4d:21:
a7:1e:1e:d7:10:a3:60:8d:db:76:20:cd:f7:d1:fc:
f1:55:7b:6c:bb:bd:f5:8a:2d:8c:ed:5d:26:87:16:
0a:d7:bf:2f:97:b2:ac:a4:18:41:83:98:c9:52:8f:
90:15:43:3f:90:d2:2b:cc:9f:ed:09:d4:69:05:a7:
d9:a3:7a:9f:59:4d:93:64:d5:40:32:ac:23:68:06:
9d:59:a8:5c:a0:3e:f6:bc:8a:d6:88:56:c2:da:88:
32:c1:5e:f2:ac:47:4f:07:74:8f:1e:2f:59:69:93:
c6:fb:8b:83:3b:0e:cf:48:bf:93:17:b2:8d:a2:56:
0f:52:0b:84:36:08:a0:69:2e:f2:0c:da:b8:6b:39:
73:70:7b:3b:e1:5b:3c:f4:df:ce:69:67:5e:34:f7:
1d:e2:b7:a7:a1:2a:17:4a:cc:66:d7:36:fb:7c:02:
f1:ea:0b:85:86:dc:ff:f9:e0:c1:c0:bd:ef:24:35:
ce:f0:dd:d0:86:2b:cf:61:a4:e5:b6:11:16:22:f5:
5d:78:3c:9d:cf:96:18:ad:fe:5a:9d:de:c5:87:ec:
35:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:BF:04:6A:EB:60:9B:FE:62:48:69:6B:77:A3:0C:A2:37:D3:73
X509v3 Authority Key Identifier:
keyid:9F:5F:F3:DE:10:A3:1B:BF:57:01:C0:BD:B2:6C:65:08:01:7D:A2:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1_z3hCjG79XAcC9smxlCAF9oso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/4cae10-37a5-40ef-89d5-5701d01c1e87/1/n1_z3hCjG79XAcC9smxlCAF9oso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:55:b3:86:b3:55:5c:92:2f:54:78:7c:91:cd:27:91:38:8a:
18:4d:6b:c4:46:7f:79:f1:38:54:13:dc:12:95:87:9e:cf:36:
f8:0a:93:6d:08:db:ea:08:36:f2:ef:58:a8:07:5b:62:e0:55:
05:1f:29:f1:25:1a:8d:12:ed:ae:d9:ef:29:95:1a:12:89:e8:
f9:3c:31:4c:3e:ae:db:ae:e6:3f:33:3b:70:b7:9f:9b:6a:58:
af:e0:a1:82:52:50:65:2e:24:87:40:41:47:b2:ec:4e:ae:4a:
2c:a1:29:ad:44:fa:f5:7c:9a:8d:8d:51:37:70:1c:38:73:97:
e5:27:e2:b5:9e:77:b6:1b:5b:2f:4b:39:8e:44:cb:af:ce:2e:
f0:b4:ce:d5:a9:61:81:ed:36:ae:bf:2e:94:bf:1d:e7:38:df:
dc:ae:bb:f0:25:22:0c:1e:b7:ba:f8:79:f3:ca:1d:12:98:de:
de:46:75:a3:fe:0f:f6:8b:8e:80:73:96:bb:e9:98:d8:4a:45:
db:4a:3f:16:62:19:04:d7:09:56:3e:a3:e4:d6:ae:9b:42:20:
3e:04:13:2a:40:e9:9c:3d:54:d5:77:ee:dd:15:00:e8:1e:be:
9a:ba:b0:19:38:f8:72:2a:da:03:ad:8e:92:65:2c:34:64:4d:
a4:a6:ee:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:12:49 2026 by rpki-client