Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: Gqm+UTCzA7FjErujr+aIwq8EOqpaEHdusE7K633UExw=
Subject key identifier: E9:06:98:A9:B6:59:F3:35:25:90:C8:74:98:66:CA:F6:26:C3:0F:67
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019CA833345E4AD5E230A583D4DCD372E646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 1079
Signing time: Sun 01 Mar 2026 07:00:53 +0000
Manifest this update: Sun 01 Mar 2026 07:00:53 +0000
Manifest next update: Mon 02 Mar 2026 07:00:53 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: n17c0/G3nhsDQ+pIuC7/DM6+lLy26BWBADo4V4yBeSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a8:33:34:5e:4a:d5:e2:30:a5:83:d4:dc:d3:72:e6:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Mar 1 07:00:53 2026 GMT
Not After : Mar 2 07:00:53 2026 GMT
Subject: CN=e90698a9b659f3352590c8749866caf626c30f67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:8b:f9:8d:9e:ca:56:50:9c:50:21:8f:ad:9a:
83:c8:58:a0:46:ac:dd:27:fe:dc:47:17:7c:59:2a:
7c:26:e1:6f:24:98:56:62:ad:47:ac:cf:d2:e3:49:
ec:26:de:b5:01:71:94:7d:21:af:74:29:55:8a:62:
4e:4f:94:54:4d:a9:3c:b7:4b:f0:c4:bc:7a:4b:52:
ed:fa:63:b3:0e:1e:16:5e:9d:38:80:5b:6a:fb:f7:
7c:31:ba:a8:7f:3e:2d:fc:d5:45:b2:f9:97:c6:9b:
fc:d0:86:40:eb:4a:75:f8:c3:1a:4d:42:05:d5:d9:
40:6c:b4:52:f8:f3:b8:eb:b8:16:9b:f6:a2:b4:36:
e1:43:f4:2a:1c:e8:d4:bb:54:70:14:9e:66:ca:0b:
8d:c7:b0:e0:be:ca:56:1f:a3:be:04:41:05:60:f8:
46:46:69:6f:98:a7:05:f3:1f:86:da:e7:40:c3:2a:
9e:81:e0:12:1c:67:c9:c1:bc:41:3a:b5:cc:0f:a3:
e1:1a:18:29:ec:6a:a9:9d:3c:10:27:17:43:47:1b:
68:9d:7d:d1:c4:04:01:74:a4:e5:20:d7:0a:78:d0:
6f:db:c7:b1:66:ee:d2:22:06:51:1d:e5:46:43:91:
01:84:9f:95:f7:2c:65:fa:4c:30:45:a5:aa:e8:cb:
14:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:06:98:A9:B6:59:F3:35:25:90:C8:74:98:66:CA:F6:26:C3:0F:67
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:b4:b6:26:6d:dc:2e:ad:db:01:06:0c:5d:0c:af:29:37:12:
cb:a1:1f:84:7b:c3:97:94:48:3e:65:3f:e2:bd:87:b8:fa:f9:
6e:c0:ff:f9:3a:d5:17:bb:3e:a8:80:79:9a:50:53:60:6e:7b:
22:89:7d:2e:c8:17:cb:ac:61:e3:39:85:8b:92:69:0d:c4:87:
43:a7:ad:db:00:a3:56:c7:e3:f4:8a:ad:fd:d7:dc:8e:77:ef:
55:ee:03:0d:5c:a4:e4:3c:21:d8:c0:34:df:ea:bb:30:2c:9c:
8e:57:1d:77:bb:46:06:4e:f9:de:64:2b:f0:21:54:7e:ff:ad:
3d:e4:15:05:1c:70:e8:7e:54:23:fb:86:6e:b8:ea:23:67:59:
29:51:9d:c4:7b:3e:e8:7f:98:eb:91:43:fd:54:df:a6:ee:14:
e2:d8:a1:fa:38:c2:3f:4f:47:b2:cd:52:2a:93:34:8a:4a:88:
94:02:24:44:dd:0e:a8:32:74:d4:6d:f1:69:fe:ea:40:2e:df:
bf:98:0f:65:d2:4d:af:de:89:01:a0:05:12:ba:99:7d:26:49:
72:13:04:c4:9d:14:4a:61:43:b8:76:32:cc:49:57:bd:b3:6f:
be:60:22:55:62:bc:10:c3:8b:09:6f:87:ad:fd:ac:0c:f7:2a:
38:d4:d5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 16:31:15 2026 by rpki-client