Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
File: n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft (raw, json)
Hash identifier: 4Kd7V9aT7UEdhJdzfHowMzjqNnvKOnW4srGI1dwkaYs=
Subject key identifier: 72:94:15:8A:84:4F:D4:A7:5D:97:F2:70:98:90:87:B1:FB:18:2D:8B
Authority key identifier: 9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
Certificate issuer: /CN=9f971109d2ea569b33e90a38e0302cff167bd035
Certificate serial: 019D24716AE902495727A33C73EB02EA06DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
Manifest number: 0D85
Signing time: Wed 25 Mar 2026 10:01:45 +0000
Manifest this update: Wed 25 Mar 2026 10:01:45 +0000
Manifest next update: Thu 26 Mar 2026 10:01:45 +0000
Files and hashes: 1: lNl0jR8IsOSJfFPxWudaK8qrJOQ.asa (hash: IX8Zv7qUtgpAAei5zm/E62pQBDNZVJrE1Mk34lY2Lrc=)
2: n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl (hash: SCxFOWHIdqxVTEWNFSLPBpbJiIBUXR96rrbvbEZ/Jn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 10:01:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:71:6a:e9:02:49:57:27:a3:3c:73:eb:02:ea:06:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f971109d2ea569b33e90a38e0302cff167bd035
Validity
Not Before: Mar 25 10:01:45 2026 GMT
Not After : Mar 26 10:01:45 2026 GMT
Subject: CN=7294158a844fd4a75d97f270989087b1fb182d8b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:ee:08:05:41:dd:44:cb:41:78:42:e3:56:77:
7d:8a:67:11:e6:cb:da:56:ab:38:a8:e4:2b:8b:2a:
90:a1:a5:80:b6:53:41:dd:d0:3e:c2:3f:f2:b3:4b:
61:36:ff:ec:c7:03:20:1d:c6:92:4d:75:50:91:d5:
c8:cd:41:a2:b3:0b:7e:a4:08:54:9e:76:fc:c3:05:
b8:ac:3d:76:20:54:7c:39:ca:ad:ae:46:42:14:9e:
a9:a6:aa:b6:5f:24:62:a6:37:a6:c4:6b:20:d0:93:
23:6e:5d:95:4f:57:57:e1:27:89:65:b8:7d:19:4a:
21:ed:73:e7:f0:0d:da:a1:ac:9d:66:85:8f:a4:b1:
63:85:b0:ad:1a:67:a1:1c:69:ac:a9:ad:ba:1c:ae:
4e:73:a2:00:64:44:54:40:e7:93:cc:0f:2b:58:f3:
67:ce:ee:ca:7b:83:bc:14:68:2a:3c:cd:84:d9:ca:
98:dd:24:8f:df:8e:16:af:ee:0a:fc:a5:15:f9:d0:
b7:bb:98:ad:27:80:84:42:91:29:00:61:31:86:c9:
df:d3:0c:54:3c:f6:ae:cf:ff:ed:2b:a0:95:c9:df:
16:84:fd:b7:c9:60:cb:c7:a2:69:6a:54:5c:dd:a6:
26:14:a3:68:9d:00:d0:b8:d1:65:1e:05:39:b7:d7:
4b:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:94:15:8A:84:4F:D4:A7:5D:97:F2:70:98:90:87:B1:FB:18:2D:8B
X509v3 Authority Key Identifier:
keyid:9F:97:11:09:D2:EA:56:9B:33:E9:0A:38:E0:30:2C:FF:16:7B:D0:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5cRCdLqVpsz6Qo44DAs_xZ70DU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/d74e10-3494-446f-a005-96b2242193f9/1/n5cRCdLqVpsz6Qo44DAs_xZ70DU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5f:3c:3b:3d:c5:5b:a7:a2:16:6c:52:86:1d:15:b1:c6:b6:
d1:70:fb:ac:c6:7a:a4:97:de:15:d5:55:6e:35:f1:14:85:4b:
99:ca:45:f3:84:b0:8a:ea:a4:96:5c:f6:80:96:ae:1d:78:b9:
52:44:b6:d6:9b:9d:4b:1d:27:aa:79:85:13:31:98:fd:7b:c4:
9a:00:24:29:6c:e0:12:20:1f:a3:e2:16:e2:bf:a3:ae:6c:47:
14:96:4f:96:7d:9b:17:7a:42:87:2b:f1:67:0e:28:62:c7:6b:
d8:a8:db:35:ce:39:93:00:46:57:7e:b3:89:09:a3:57:0e:db:
9d:d8:4e:e5:54:4c:9d:a5:17:db:ab:ce:17:fa:bc:ed:18:f5:
a8:7f:9a:bd:b6:ba:f1:dd:66:7a:68:09:11:00:2f:02:28:0f:
e3:43:33:85:8b:06:06:e0:94:70:5b:95:fc:ec:e1:44:7c:9a:
e6:47:6a:69:6b:f1:18:fd:06:ca:2e:06:a7:48:66:df:bf:83:
78:7d:14:4d:6f:7c:63:cd:19:2d:ff:12:aa:4c:69:2d:d3:40:
43:52:56:0f:ef:f1:db:b3:91:cf:06:a7:3e:ab:81:dd:ba:6c:
ed:c0:b1:42:c2:b7:56:c2:21:0f:41:4c:09:2b:6e:19:7a:18:
95:33:7c:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:19:28 2026 by rpki-client