Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
File: n_yYQowkUcGu34r_wHKpWGjs7os.mft (raw, json)
Hash identifier: 7Sd4sCAwCYiX6GVjoPWLarjcuhwrVlbACDN+ibh1KOo=
Subject key identifier: 4B:12:CD:5A:5E:F1:8C:A0:28:68:A2:1A:90:9F:18:76:46:2F:3E:44
Authority key identifier: 9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
Certificate issuer: /CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Certificate serial: 019D25BA55F85F76505BA5052D06D72F9BD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
Manifest number: 10BA
Signing time: Wed 25 Mar 2026 16:01:01 +0000
Manifest this update: Wed 25 Mar 2026 16:01:01 +0000
Manifest next update: Thu 26 Mar 2026 16:01:01 +0000
Files and hashes: 1: jntRieyP2VIQKpXKITIhjdXw47w.asa (hash: ZFUM6Qa5l79ymewa0YebWQXQY9gRCs0DJZFzvQ58k9c=)
2: kK28w-fO3Eg4DfbsTspsI3-r7zw.roa (hash: RyhTX2UNnVnrX6wsq211l02R7fDlD/dkhEnR9+GqksQ=)
3: n_yYQowkUcGu34r_wHKpWGjs7os.crl (hash: 6OfnNEOIErwbBgUyAuUKU3fT6Wx9C21BrsO3ed5BVPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:55:f8:5f:76:50:5b:a5:05:2d:06:d7:2f:9b:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ffc98428c2451c1aedf8affc072a95868ecee8b
Validity
Not Before: Mar 25 16:01:01 2026 GMT
Not After : Mar 26 16:01:01 2026 GMT
Subject: CN=4b12cd5a5ef18ca02868a21a909f1876462f3e44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c8:f9:2f:2c:fb:2e:9c:8a:92:b3:ba:1c:00:
10:57:9b:25:da:31:29:4e:a9:97:ff:5b:9c:31:18:
c0:ef:7e:2d:5a:31:14:93:ff:df:11:f1:ee:71:65:
61:fb:10:e6:de:eb:5f:2b:76:e2:1a:8b:99:e9:a3:
c1:d3:19:87:3e:4a:ad:1c:f3:f3:85:b3:7f:43:13:
d4:19:78:2e:ac:59:3f:a5:c3:07:84:0e:9f:ab:97:
64:26:6d:c9:42:37:a2:38:f4:47:af:10:40:94:3b:
1e:20:37:26:9a:f4:56:57:09:a0:58:ec:c8:b1:b2:
5d:b9:fe:8d:40:eb:a3:aa:fc:6d:74:0c:04:3b:c1:
7a:6f:cf:a6:00:dc:3a:b2:e3:32:ba:2e:01:e2:f0:
d6:7d:96:23:1f:98:51:83:63:40:b8:76:f8:a3:e3:
cb:98:6d:8e:d6:63:e1:24:cf:e1:48:45:4f:53:7a:
0d:34:86:79:05:4f:7e:45:26:90:20:e7:06:bf:5d:
e6:8d:8e:3c:42:30:13:81:b6:f3:23:b7:30:9b:1a:
1c:08:e5:c5:72:8a:35:c1:70:b9:be:1a:22:b7:7a:
03:81:37:31:51:03:6e:ff:a0:f2:7e:dc:d0:05:bf:
a6:37:22:a9:69:25:60:20:07:fa:4b:46:8a:6c:66:
59:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:12:CD:5A:5E:F1:8C:A0:28:68:A2:1A:90:9F:18:76:46:2F:3E:44
X509v3 Authority Key Identifier:
keyid:9F:FC:98:42:8C:24:51:C1:AE:DF:8A:FF:C0:72:A9:58:68:EC:EE:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_yYQowkUcGu34r_wHKpWGjs7os.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/724328-09d3-4964-acc4-b96d2fbefebd/1/n_yYQowkUcGu34r_wHKpWGjs7os.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:7e:66:5e:0d:26:9a:73:c3:9e:c7:d7:c6:f7:2c:8d:a1:44:
02:fa:7d:1b:d5:89:07:f5:84:75:aa:4a:b4:e6:cf:a5:aa:70:
50:90:b9:49:88:b2:06:b1:4a:6b:8c:e5:9c:1a:62:a9:e3:4f:
32:a1:0b:84:21:27:30:bf:91:0c:2d:e3:43:c5:aa:b6:59:0d:
a3:70:e4:d9:1e:0e:4c:a3:97:7c:15:96:a7:6c:7b:af:29:08:
8e:0a:ab:6b:5f:6e:e0:a3:63:19:db:46:36:aa:8b:e6:6c:30:
1c:91:11:93:9a:15:13:f7:a7:17:16:e6:b9:11:e3:96:71:42:
39:f0:17:17:29:db:22:9e:6a:c5:bd:47:4c:81:a8:e7:26:d5:
d6:bc:3f:64:d8:96:90:1a:07:31:14:4b:5c:d4:23:04:49:47:
16:bc:7e:b3:1d:7c:cc:ef:ce:65:07:a4:0b:f3:ec:4c:38:7f:
f5:79:1a:a3:a5:42:d9:cb:50:5a:03:85:86:14:d4:68:9e:68:
ac:e3:61:1c:ca:a6:01:01:6a:f4:e8:a7:0a:eb:a9:dd:ef:1d:
4d:0e:31:89:3f:d5:7d:6b:c4:2a:b9:91:97:25:6d:cc:71:09:
f7:cd:99:fc:49:79:cb:d8:3e:42:03:b0:6a:be:70:68:6f:c7:
07:28:d5:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:42:11 2026 by rpki-client