Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
File: n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft (raw, json)
Hash identifier: xAEd9if1Xmii0sDNpoUuOHVkPbqiPNwWMehuwI0pazU=
Subject key identifier: 27:00:C1:4C:8D:5A:EB:04:84:EC:85:5E:61:49:AB:F6:5F:B6:71:C5
Authority key identifier: 9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
Certificate issuer: /CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Certificate serial: 019D98F4A39C13E1EC926E9F48B6F2A1F235
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
Manifest number: 0840
Signing time: Fri 17 Apr 2026 01:01:02 +0000
Manifest this update: Fri 17 Apr 2026 01:01:02 +0000
Manifest next update: Sat 18 Apr 2026 01:01:02 +0000
Files and hashes: 1: n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl (hash: p/Ub3kvC7b12jpJSlcLb7v1f1w597VKNeZmEZRtASNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:a3:9c:13:e1:ec:92:6e:9f:48:b6:f2:a1:f2:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fe16101e421d21cdb5e5b05a2e289dfb773f4c9
Validity
Not Before: Apr 17 01:01:02 2026 GMT
Not After : Apr 18 01:01:02 2026 GMT
Subject: CN=2700c14c8d5aeb0484ec855e6149abf65fb671c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3b:fe:e7:d2:51:aa:01:19:8c:d0:9c:81:5b:
f9:2e:3c:65:b5:c8:31:40:ee:97:67:6c:1d:d0:7c:
58:d1:1c:e7:35:02:cf:51:b3:f3:dd:42:bb:59:a8:
0c:b5:75:32:d1:12:3c:4d:67:c3:05:69:eb:fd:73:
00:df:1a:3e:cf:c3:8c:69:b8:d9:72:a6:bb:c5:92:
a2:6a:54:a2:46:e2:0b:4c:dd:74:44:5b:bc:dd:26:
be:98:35:eb:fa:91:bb:65:8d:91:81:4c:54:20:6e:
2d:c8:f0:65:c6:66:b2:b8:f4:d5:70:7d:f0:0e:aa:
80:3c:e9:d1:d4:59:a4:e6:15:05:18:91:1a:c9:3c:
72:00:1f:61:93:fd:e6:75:e5:4c:ae:de:af:b9:8e:
79:a7:a7:ce:ea:44:56:85:77:43:ec:55:6d:e5:0d:
6d:ae:9f:8c:67:c4:ef:ca:bd:fa:4a:b1:76:52:d9:
c1:80:ab:b3:3b:ef:5d:9e:47:6c:d0:c0:78:37:b7:
bc:42:60:f1:08:d6:40:c3:24:bb:fc:e3:bb:ab:ec:
f6:51:25:66:51:56:1d:81:6b:37:f8:19:4e:48:09:
a8:88:40:d3:a9:ff:aa:f1:98:ed:17:77:8c:92:95:
91:db:f8:43:db:c5:e1:e9:0f:b9:47:97:4a:81:e0:
03:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:00:C1:4C:8D:5A:EB:04:84:EC:85:5E:61:49:AB:F6:5F:B6:71:C5
X509v3 Authority Key Identifier:
keyid:9F:E1:61:01:E4:21:D2:1C:DB:5E:5B:05:A2:E2:89:DF:B7:73:F4:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n-FhAeQh0hzbXlsFouKJ37dz9Mk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/156eeb-8019-4d60-8ead-e9711f576b4e/1/n-FhAeQh0hzbXlsFouKJ37dz9Mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:34:2c:a2:e8:a9:30:c4:65:c9:d9:6d:b9:57:46:84:db:4a:
af:fc:7e:d8:1c:21:9a:bd:3f:9b:f7:f5:74:f8:ab:34:62:e0:
52:ed:9d:e0:76:92:7b:af:b6:78:23:1c:eb:23:fa:81:55:c4:
29:96:19:94:1d:ca:5b:25:44:05:b3:af:76:d6:62:68:46:f0:
50:7c:ab:bb:52:21:aa:5e:a8:cd:6a:54:b4:e1:53:ec:05:76:
3d:16:f8:0e:10:c0:53:01:88:50:fc:aa:8d:32:d0:89:80:6a:
63:a3:59:7a:1d:23:2d:73:59:2a:88:6d:2a:5d:bb:3e:ab:aa:
4e:91:90:86:85:78:74:e1:e5:97:02:03:d0:f9:4c:c9:06:b5:
41:49:3c:5b:11:fc:d6:96:73:06:fa:ef:51:e5:91:5f:50:8c:
00:e9:0d:40:fd:25:9a:76:cb:d2:20:a8:fc:d2:2f:5e:27:ff:
5b:ea:3c:96:e1:88:bb:e0:13:37:06:97:61:35:b5:55:80:e3:
6b:af:d2:8b:b6:4a:9c:92:3c:fa:bc:64:3c:fe:4b:ba:cf:94:
6e:e4:2f:6c:f6:4b:5e:e1:03:c6:84:8c:9c:2b:ca:0c:88:ab:
27:e8:77:69:9e:56:95:be:75:eb:14:c8:1b:45:b5:22:d5:c5:
f5:a2:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:52:24 2026 by rpki-client