Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier: nXKau3hrUZfZ5YxpL8lXJkTLAURbY08q325QoZrBmGU=
Subject key identifier: B4:85:C1:69:85:9C:44:A2:5C:84:3B:89:6D:21:02:BB:8D:CB:73:63
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 019D27A88668B6FF51C92B06F7E486E3D1E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number: 1523
Signing time: Thu 26 Mar 2026 01:00:48 +0000
Manifest this update: Thu 26 Mar 2026 01:00:48 +0000
Manifest next update: Fri 27 Mar 2026 01:00:48 +0000
Files and hashes: 1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=)
2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: byqFQqFdlw74w4itQm9TxJLJ76d+MaAYQBNiGu1YP8U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:86:68:b6:ff:51:c9:2b:06:f7:e4:86:e3:d1:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Mar 26 01:00:48 2026 GMT
Not After : Mar 27 01:00:48 2026 GMT
Subject: CN=b485c169859c44a25c843b896d2102bb8dcb7363
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c9:44:11:14:76:b9:1a:d6:1a:da:19:8a:3c:
67:c2:07:c5:0c:c0:14:29:c4:0e:0a:2e:ce:26:0d:
16:fd:e8:db:28:31:95:32:2e:e0:a2:0b:47:cf:65:
5d:4e:7c:1b:5d:45:8b:2d:88:7f:e7:12:34:f6:9e:
4c:52:80:e1:7b:2e:7b:6c:75:2f:65:a9:90:b6:0f:
74:57:2f:71:9a:42:03:47:74:4f:2e:ee:61:f2:8a:
46:1f:b2:05:5c:fc:87:6d:6a:6d:ee:7c:c2:cf:4b:
8f:7f:e5:97:08:65:94:9b:0c:a9:90:bf:77:af:75:
0b:3e:d4:d5:20:59:52:5c:57:41:ca:8d:80:43:df:
30:f2:d5:30:3f:ab:d7:bc:f1:c0:8f:23:81:8d:ce:
18:01:e3:c6:91:78:66:06:3a:c7:f9:a9:e2:9a:6b:
f6:0f:ff:64:b4:f3:01:7a:0f:af:44:dc:51:50:7a:
dc:cd:a6:dc:bd:3a:f8:cf:f8:34:81:27:68:ee:18:
5b:6e:0a:4b:d8:a6:5a:75:e8:0b:80:e6:e6:0c:f9:
d0:9d:e9:fe:29:75:89:83:4b:6d:65:0f:ab:2f:92:
98:ee:53:70:52:0f:ac:d1:04:fd:2f:af:ae:66:e4:
33:d3:18:e1:5d:50:e9:bf:9a:5d:c7:71:25:3f:72:
24:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:85:C1:69:85:9C:44:A2:5C:84:3B:89:6D:21:02:BB:8D:CB:73:63
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:ac:4b:be:70:a5:db:b2:71:59:38:6b:61:68:20:63:87:da:
5f:9b:83:e9:78:be:17:5d:d9:46:36:08:07:84:9a:22:53:ad:
35:be:22:6e:a1:7a:16:dc:15:97:26:77:34:9c:c9:0b:77:66:
af:78:5d:25:ec:a3:63:27:c4:fa:25:9c:c6:5c:99:2e:ea:0e:
bb:ee:c8:7b:de:4e:3c:b9:4d:16:ea:ee:9e:7e:10:68:cd:a9:
a5:89:ea:92:d5:fb:79:16:1c:d6:e7:0b:dc:36:c3:4f:58:ef:
cd:1c:c4:73:a8:6d:18:aa:e7:0a:ac:97:89:ca:11:e9:5e:cb:
81:9a:a2:95:c1:b5:a7:3f:c3:d8:87:3b:80:55:4e:ed:e7:ba:
1b:2f:bf:87:b6:96:57:3c:b0:d9:3d:63:90:d7:a7:8b:94:3c:
d7:7e:c3:63:6b:71:19:26:db:2d:3a:1b:9e:08:0a:58:bb:40:
ef:75:d6:e8:77:10:e3:6e:e8:9f:4f:02:d2:dd:e1:29:55:b3:
88:0f:22:ae:b6:56:ef:fa:4f:0d:58:29:fe:47:eb:06:64:c6:
7e:96:55:9e:a8:78:97:fe:16:02:22:25:42:25:51:ff:54:ce:
49:18:ef:fc:d2:46:14:a1:63:fd:36:65:62:dc:bb:cf:ea:10:
4a:90:68:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:28:46 2026 by rpki-client