Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: 7/0itmEIbKe9Ga2VkQi07JIVAIjjOTRMhiE2qszjsfQ=
Subject key identifier: A4:97:2F:F4:F3:37:E1:49:F5:D4:EE:31:3E:C6:84:76:00:5A:91:5F
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 019D28F2D4C4125430BA776588FEC512A519
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0DCB
Signing time: Thu 26 Mar 2026 07:01:35 +0000
Manifest this update: Thu 26 Mar 2026 07:01:35 +0000
Manifest next update: Fri 27 Mar 2026 07:01:35 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: i9l6WaCWUbYFo3NBs/vf5zqIVo/P3RVcxy7XbPv3etw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 07:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f2:d4:c4:12:54:30:ba:77:65:88:fe:c5:12:a5:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Mar 26 07:01:35 2026 GMT
Not After : Mar 27 07:01:35 2026 GMT
Subject: CN=a4972ff4f337e149f5d4ee313ec68476005a915f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:ad:b2:ee:1c:4a:d7:4b:71:cd:3a:69:46:29:
45:46:8f:55:13:42:b5:3c:82:45:74:14:d2:a4:14:
5a:42:d9:25:e0:27:a0:24:36:91:8e:b8:a6:f9:06:
14:93:b8:e5:27:81:0f:a0:14:1a:a9:63:7d:a0:8d:
4d:0a:f2:5b:1c:71:a0:49:bf:16:8f:ad:ec:98:be:
95:f1:0d:7a:bb:85:c9:17:58:f7:88:83:7f:7f:e2:
b9:79:3d:49:20:7d:4c:0e:67:81:2d:e4:b2:7d:d9:
8a:3a:7e:02:8b:a6:fe:ae:84:fd:58:75:24:3a:e8:
d4:d9:cd:0a:b4:9a:e1:9d:e2:60:b4:d6:a5:09:5a:
20:69:b2:d7:a4:22:ce:ed:57:5d:40:ec:10:ef:02:
b9:4b:fa:4f:06:09:8c:08:59:8e:b3:1a:f9:fb:b2:
e4:c3:a3:0b:52:0e:b7:9f:47:c8:49:51:de:35:e3:
1a:4f:9d:57:c5:43:a2:3a:07:f0:e0:25:ed:40:4f:
08:67:da:49:e8:d9:82:91:f3:0f:b9:67:b5:4b:8a:
8c:b2:a3:3f:a6:47:fd:ad:6b:d1:fc:22:1e:6a:40:
ee:fb:80:41:1b:76:ed:6c:b9:ec:4b:5b:82:07:bf:
7b:2c:44:50:ab:43:3e:2f:c8:d6:8a:d9:da:67:bb:
f5:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:97:2F:F4:F3:37:E1:49:F5:D4:EE:31:3E:C6:84:76:00:5A:91:5F
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2c:e6:26:7c:c5:41:bd:4b:9f:f5:fa:1f:4a:cb:0b:bd:87:
11:ae:26:59:2a:7a:19:55:f0:62:60:77:bb:07:78:35:4e:50:
50:fe:57:af:a9:c0:d1:3d:3b:bd:84:e8:96:f8:db:7f:03:36:
1a:8d:99:df:95:62:d0:1a:29:ab:6f:c3:44:32:99:85:c8:86:
31:1b:1c:b5:4a:91:95:ca:6a:83:6e:a1:81:8e:b9:8b:5f:88:
70:5c:1c:81:df:28:db:41:5a:e1:69:a9:7d:b4:cb:16:67:25:
c3:d0:a4:eb:a2:b3:98:44:a7:cb:52:98:63:79:a3:70:dc:63:
6c:2c:8c:56:f7:3b:72:11:b2:e9:4b:de:50:0b:50:79:79:5e:
b1:49:48:e8:6f:50:7e:40:4b:dd:90:62:06:aa:03:75:06:67:
60:32:86:91:81:65:1c:8a:c4:17:35:0e:6b:4b:b7:67:5d:05:
63:63:17:d9:86:2d:7e:a0:29:5f:f3:4c:82:0f:7c:5b:7b:8a:
da:e4:05:e7:b3:1a:e5:5a:9e:62:fe:46:0b:cd:ab:39:c5:07:
dd:fe:f1:01:41:5b:43:ce:f8:a8:05:ff:87:fe:7b:7e:c8:7e:
79:cc:d1:43:7e:07:4f:ea:44:bf:79:46:34:10:a5:cc:45:80:
5d:86:3b:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0o8tTEElQwundliP7FEqUZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjA3ZjUwOWU5NDdiMjY3Zjg3YmEwYWRlODllYzRkM2Fl
NTZhM2UwHhcNMjYwMzI2MDcwMTM1WhcNMjYwMzI3MDcwMTM1WjAzMTEwLwYDVQQD
EyhhNDk3MmZmNGYzMzdlMTQ5ZjVkNGVlMzEzZWM2ODQ3NjAwNWE5MTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6q2y7hxK10txzTppRilFRo9VE0K1
PIJFdBTSpBRaQtkl4CegJDaRjrim+QYUk7jlJ4EPoBQaqWN9oI1NCvJbHHGgSb8W
j63smL6V8Q16u4XJF1j3iIN/f+K5eT1JIH1MDmeBLeSyfdmKOn4Ci6b+roT9WHUk
OujU2c0KtJrhneJgtNalCVogabLXpCLO7VddQOwQ7wK5S/pPBgmMCFmOsxr5+7Lk
w6MLUg63n0fISVHeNeMaT51XxUOiOgfw4CXtQE8IZ9pJ6NmCkfMPuWe1S4qMsqM/
pkf9rWvR/CIeakDu+4BBG3btbLnsS1uCB797LERQq0M+L8jWitnaZ7v1QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKSXL/TzN+FJ9dTuMT7GhHYAWpFfMB8GA1UdIwQY
MBaAFJ/wf1CelHsmf4e6Ct6J7E065Wo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUt
ODk5OGFhYTdmMzE1LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUtODk5OGFhYTdmMzE1
LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCzmJnzF
Qb1Ln/X6H0rLC72HEa4mWSp6GVXwYmB3uwd4NU5QUP5Xr6nA0T07vYTolvjbfwM2
Go2Z35Vi0Bopq2/DRDKZhciGMRsctUqRlcpqg26hgY65i1+IcFwcgd8o20Fa4Wmp
fbTLFmclw9Ck66KzmESny1KYY3mjcNxjbCyMVvc7chGy6UveUAtQeXlesUlI6G9Q
fkBL3ZBiBqoDdQZnYDKGkYFlHIrEFzUOa0u3Z10FY2MX2YYtfqApX/NMgg98W3uK
2uQF57Ma5VqeYv5GC82rOcUH3f7xAUFbQ874qAX/h/57fsh+eczRQ34HT+pEv3lG
NBClzEWAXYY7rg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 13:02:58 2026 by rpki-client