Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
File: n6eFncOdRzYULPHiKcisS-YjuQM.mft (raw, json)
Hash identifier: /NRz4vQ2R331loEqBUgizva69JqlY72+u5b77guyaN0=
Subject key identifier: 41:8E:1B:6A:49:74:89:08:C7:FA:76:E7:3C:4E:59:83:19:27:D1:98
Authority key identifier: 9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
Certificate issuer: /CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Certificate serial: 01A0D048B9A24EE44B41738027B961A6C615
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
Manifest number: 1708
Signing time: Wed 23 Sep 2026 22:00:22 +0000
Manifest this update: Wed 23 Sep 2026 22:00:22 +0000
Manifest next update: Thu 24 Sep 2026 22:00:22 +0000
Files and hashes: 1: YdLZYGNBx5ifVhvHrE-Wi4s5Pq8.roa (hash: UhcnEKVQY6GztLAChvJDoRhnDCVtXiX/WS/jkKhjOg0=)
2: n6eFncOdRzYULPHiKcisS-YjuQM.crl (hash: mACQnKsGb18p1nIUy3dQhwBWJGobTWoRcLIvU05y5rk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:b9:a2:4e:e4:4b:41:73:80:27:b9:61:a6:c6:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fa7859dc39d4736142cf1e229c8ac4be623b903
Validity
Not Before: Sep 23 22:00:22 2026 GMT
Not After : Sep 24 22:00:22 2026 GMT
Subject: CN=418e1b6a49748908c7fa76e73c4e59831927d198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:c8:c4:21:cd:e8:1f:84:21:72:3c:65:a3:6e:
01:23:45:20:30:3d:8e:ca:32:65:33:8e:a8:1e:ed:
b5:a2:a6:a7:6e:10:cb:82:0d:84:bc:bb:9b:27:29:
22:68:dc:e2:35:16:01:b0:fc:6f:6a:87:13:08:03:
18:1e:5b:89:21:c6:f7:ac:f6:16:b0:bb:30:02:7b:
ee:c8:d2:7f:37:59:55:d2:0e:0b:22:9c:ce:e2:47:
c0:45:57:34:aa:45:52:de:cd:33:92:b1:34:84:16:
86:60:a0:4c:b6:23:8e:28:c4:bd:8f:74:84:36:3e:
63:13:02:62:d9:03:2d:7f:5b:71:e3:59:b2:0e:64:
cb:ee:cf:2b:8b:11:1c:c1:bc:c8:37:13:42:73:27:
ac:d9:b3:72:d5:5d:87:96:d4:ab:45:67:b7:42:f4:
bd:d4:f3:40:4a:ea:cc:49:51:64:3d:37:c5:44:6b:
ba:1c:43:84:3c:1d:d3:33:3b:2a:b6:5b:9b:2e:6c:
9e:ec:13:17:04:ab:c2:34:f8:b4:72:84:58:73:3b:
dc:e7:4b:49:df:3a:af:9f:28:29:df:9b:ad:f4:6d:
d9:a2:dc:74:92:86:28:ca:63:7e:27:45:12:15:36:
3a:4e:46:ba:9d:96:fb:0c:dc:b8:51:ff:e9:b3:87:
2a:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8E:1B:6A:49:74:89:08:C7:FA:76:E7:3C:4E:59:83:19:27:D1:98
X509v3 Authority Key Identifier:
keyid:9F:A7:85:9D:C3:9D:47:36:14:2C:F1:E2:29:C8:AC:4B:E6:23:B9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n6eFncOdRzYULPHiKcisS-YjuQM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/069008-2e4f-4323-b6a2-e8d6c2f071df/1/n6eFncOdRzYULPHiKcisS-YjuQM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:95:30:2e:c7:b2:89:de:cc:35:73:f8:06:43:ea:fb:6f:de:
50:c4:ec:06:fb:04:b9:76:8c:f2:83:6f:0e:d6:b0:2c:30:e1:
f1:57:b4:49:a8:0f:4d:c0:e4:87:b5:54:79:b8:80:bc:62:08:
67:6a:6c:87:39:aa:a1:64:66:d1:e9:e0:47:a8:eb:65:39:a7:
af:f0:4b:37:ea:37:6f:ab:c7:87:4a:50:53:f8:d0:52:f0:84:
e4:6e:7c:25:05:bf:c7:9f:7d:c6:45:d7:2c:c0:ce:75:ba:f7:
fc:50:3d:b3:82:9b:97:9c:89:0b:d5:ce:6a:78:40:74:f1:a5:
b1:1c:ef:ac:cd:0d:40:06:ab:d3:f4:2f:f8:85:8f:68:ca:f7:
b6:d7:58:62:fe:4a:d9:ce:5a:a9:b1:f2:d3:65:c6:b1:4c:f1:
3d:ca:de:c9:2e:91:08:74:74:59:30:33:c4:b4:57:94:c6:79:
1a:95:fc:be:c5:a6:d4:52:87:87:4f:78:38:65:53:ef:df:f8:
74:22:bb:e4:7c:f1:c9:26:b5:18:3f:23:1f:dc:51:34:8c:d6:
4b:5f:14:3a:a8:e0:24:ac:f4:1d:54:02:df:c5:e2:d7:50:32:
e7:cb:2a:e4:ea:74:a3:1f:3c:99:c5:e5:e4:9e:76:1b:50:9a:
2f:ff:b5:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:50:10 2026 by rpki-client