Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
File: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft (raw, json)
Hash identifier: 327msBL06PQWZPqPp1KSxdyDzuyZbW8L6O5jN8HKZb4=
Subject key identifier: CD:9B:5B:B3:45:2E:68:81:FC:CB:3B:C4:54:96:4F:50:48:9C:10:41
Authority key identifier: 9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
Certificate issuer: /CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Certificate serial: 019E1CEB8B9E1B360FA5EAB44100C1FCA966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
Manifest number: 01AF
Signing time: Tue 12 May 2026 16:00:59 +0000
Manifest this update: Tue 12 May 2026 16:00:59 +0000
Manifest next update: Wed 13 May 2026 16:00:59 +0000
Files and hashes: 1: MDrbORic-T38FR83kdivFTffx_U.roa (hash: 0rj1HAHMfMHh1ezQi/n9W4biWte5hyp/X9lG/Kaw1f4=)
2: TayBP7whOn8uG-iZTgalyiKPGes.roa (hash: P7tnKReQ+Y3epX8ceT4jhZXneWQc4RVJRl4N9gsisuk=)
3: bJB2KlYnnSQctiMVw5LEcI6puPE.roa (hash: NI9BvmeAMx8yGHKi/OTTLd4uTBAvPT7/AwZXssX4nIQ=)
4: n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl (hash: 6n4mYF2SA7jOU/B2emf98C5mSqLg/yCuitvSxeood4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1c:eb:8b:9e:1b:36:0f:a5:ea:b4:41:00:c1:fc:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f7a47be773a8cad6d75980e739b7841ad4d9b91
Validity
Not Before: May 12 16:00:59 2026 GMT
Not After : May 13 16:00:59 2026 GMT
Subject: CN=cd9b5bb3452e6881fccb3bc454964f50489c1041
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:2a:4d:f0:9c:13:b3:2f:22:92:19:27:f9:02:
52:62:e2:da:91:0d:93:89:96:98:c0:f3:6a:35:50:
24:c0:58:dc:6d:a4:fb:8d:32:66:17:c9:4c:36:66:
ad:ea:73:d6:15:ef:8f:dd:20:4b:f8:09:3e:e4:69:
f9:18:46:1b:fb:eb:d6:37:a7:fe:c8:d0:f1:f6:ff:
46:c4:c4:2f:4c:24:79:b1:16:d8:67:19:16:3f:3a:
ca:1f:32:bb:d7:f3:37:b1:0d:f0:b6:6b:cc:46:7b:
30:fe:90:20:3a:82:a2:a9:b7:f1:17:a8:a6:4e:3e:
5a:97:ff:2f:3b:ff:69:36:c1:73:f2:84:97:e8:a5:
f1:86:4a:9c:85:67:ea:14:3f:0a:b7:6e:0a:99:e9:
13:fc:cd:32:41:90:be:84:ec:5f:39:24:2a:6a:e3:
9d:19:27:5d:c6:04:39:7d:ad:45:3b:77:b1:67:ab:
c9:d8:2f:41:f9:1d:3c:fe:f8:08:5c:28:8d:b2:b6:
5d:69:59:1a:11:46:3e:5a:50:f6:2e:ce:6a:6a:21:
21:d9:c0:ad:43:42:be:c0:8a:8e:7d:32:2e:92:59:
2a:94:2b:0f:9e:ee:21:bf:fe:a1:6b:58:0a:4b:37:
84:5e:6b:4e:be:ac:56:e8:d0:5c:b2:b4:b7:14:ab:
29:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:9B:5B:B3:45:2E:68:81:FC:CB:3B:C4:54:96:4F:50:48:9C:10:41
X509v3 Authority Key Identifier:
keyid:9F:7A:47:BE:77:3A:8C:AD:6D:75:98:0E:73:9B:78:41:AD:4D:9B:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/59a12c-cc7f-4271-831a-e7f2c07fc0f8/1/n3pHvnc6jK1tdZgOc5t4Qa1Nm5E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:58:f3:e6:1e:c1:5a:6e:c3:7b:1b:fa:10:8d:be:ae:d8:df:
2d:4c:f3:1e:2a:ea:6f:bf:8c:40:9a:f4:e2:c4:3c:15:8b:eb:
aa:ad:23:a0:c2:04:09:56:02:3a:31:d3:2b:fe:44:20:c4:3b:
db:9a:26:3e:55:32:db:22:c4:3e:b6:f4:11:b6:a7:6b:37:71:
4a:39:29:f4:8c:97:e0:61:57:40:25:70:48:39:8b:83:d2:e0:
69:31:0d:53:15:48:af:5c:98:66:de:7a:96:04:1c:e5:34:d9:
f8:a0:eb:88:ce:68:dc:7b:98:e1:95:75:78:49:83:4a:d4:23:
d6:f7:e4:14:0f:e4:a2:b4:a6:26:79:e1:70:1d:17:f8:2a:4c:
c4:a9:3a:07:01:f4:8e:0b:e6:cd:64:cb:d7:e0:2f:90:15:d6:
b6:67:9d:12:49:bf:09:ba:8b:2c:12:d3:76:5d:da:a2:02:6e:
0e:e0:9a:71:cc:44:80:a6:81:f9:2c:23:ce:8f:93:5a:f8:94:
4d:1a:c3:c2:39:9e:0a:0e:45:c9:9f:1a:8b:0f:d1:1e:b1:23:
c6:70:1c:5f:15:93:a8:50:fd:e9:ff:9d:f9:49:8a:82:66:8e:
64:b0:94:11:dd:21:f7:34:f4:b6:35:02:02:68:ab:a6:61:59:
15:37:82:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:10:00 2026 by rpki-client