Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
File: N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft (raw, json)
Hash identifier: FeBvXrbAoq68WIwV+IjNnbvugqXaao49g/ky2LURrBg=
Subject key identifier: F3:B6:88:78:8D:8F:EE:6C:7F:32:3A:72:87:1E:52:62:31:45:87:25
Authority key identifier: 37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
Certificate issuer: /CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Certificate serial: 019D32633A1CB61817C8A33EA6664861F55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
Manifest number: 0D96
Signing time: Sat 28 Mar 2026 03:00:56 +0000
Manifest this update: Sat 28 Mar 2026 03:00:56 +0000
Manifest next update: Sun 29 Mar 2026 03:00:56 +0000
Files and hashes: 1: N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl (hash: oRJT/a+GRJ0t0r3HzsXcw8+CV4kuwW6WgLnpxDANA+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 00:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:32:63:3a:1c:b6:18:17:c8:a3:3e:a6:66:48:61:f5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3771bd6e2dda5fa3057c4bc283faf713a915a5d9
Validity
Not Before: Mar 28 03:00:56 2026 GMT
Not After : Mar 29 03:00:56 2026 GMT
Subject: CN=f3b688788d8fee6c7f323a72871e526231458725
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:56:7a:1a:03:ea:40:10:ef:e9:80:e2:79:17:
6c:af:99:9c:fc:8d:be:7a:a9:3e:09:cc:17:9c:84:
5c:59:86:e3:13:1c:1b:98:67:4e:9d:54:b1:65:95:
5c:9b:95:cd:22:b6:2c:d5:fd:42:ed:38:39:3a:a5:
a5:0d:27:ae:64:8f:12:d9:38:a2:2a:b8:36:6e:4c:
b0:8a:91:e5:4a:3a:1e:7a:d8:05:7f:5f:af:a5:d2:
f7:9f:e1:bc:f6:a5:0e:8b:64:8d:1d:0f:2e:e2:2a:
e5:95:13:1b:87:f9:76:5c:ad:d6:b9:18:8e:fa:5d:
d8:3a:90:8d:c3:ba:ed:32:af:f9:f7:15:96:fc:3d:
d5:b3:b0:31:75:13:97:70:6b:ae:c6:4f:e9:75:0d:
8f:5e:6a:a2:18:8d:40:75:72:9f:d1:70:b8:36:cf:
3a:fc:64:2c:6d:97:f8:25:e3:8f:43:b9:ab:67:e3:
63:4b:2f:c2:d4:76:c6:b4:9b:b9:05:08:de:1e:5c:
2b:cc:74:da:82:77:4f:cc:4e:61:b4:fd:96:66:e8:
d5:2e:d6:e3:25:a2:5f:91:13:79:66:ac:99:9a:e0:
50:7a:fd:db:3a:da:d1:f3:9a:d2:d5:ad:ed:69:4f:
2f:da:8b:7d:57:b8:39:2e:0c:6e:ca:f7:bb:f6:7b:
ed:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:B6:88:78:8D:8F:EE:6C:7F:32:3A:72:87:1E:52:62:31:45:87:25
X509v3 Authority Key Identifier:
keyid:37:71:BD:6E:2D:DA:5F:A3:05:7C:4B:C2:83:FA:F7:13:A9:15:A5:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3G9bi3aX6MFfEvCg_r3E6kVpdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/86f93b-cd9d-4e82-bef0-9dcf6b3c0797/1/N3G9bi3aX6MFfEvCg_r3E6kVpdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:01:31:64:86:03:3b:2b:f9:dc:a2:7d:89:39:a9:34:a6:37:
73:1c:fa:27:92:19:93:4f:90:a3:e0:cf:bb:f8:2d:6d:c1:48:
f2:60:1a:fd:15:0c:4c:d1:f5:f2:39:44:34:9f:6a:51:65:02:
18:b5:e1:65:fc:7b:80:87:29:68:91:24:af:eb:92:83:4e:c7:
29:d9:00:9a:1e:3d:36:b8:34:20:83:98:d9:ff:64:d3:ee:5b:
92:45:ed:2f:ae:5c:d6:7a:17:48:4d:2b:8c:56:22:9f:72:00:
34:b4:6a:d0:1a:e9:40:5d:ff:e5:8c:12:f1:b7:9c:22:70:0d:
e2:1c:ce:93:fc:a1:81:4f:7f:91:88:7f:cc:fc:a5:06:65:79:
93:52:c2:18:24:44:70:2c:6f:50:f9:ff:8a:69:ad:86:43:0a:
50:a9:c5:42:96:0e:8f:ca:20:26:f7:5e:fb:2b:b7:1f:06:9c:
3f:d2:80:c7:e4:2f:b8:c8:42:a3:7a:2c:79:ef:77:b5:29:9a:
2e:ca:ee:ba:30:0d:a7:f0:dc:7d:39:20:00:0a:93:71:80:78:
96:3a:70:9e:f3:0d:3e:3d:22:eb:5e:03:2f:02:eb:30:8b:bf:
e0:1a:6d:59:0d:66:11:48:3a:3a:da:05:88:ba:4d:7f:2c:83:
c6:88:85:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:39:26 2026 by rpki-client