Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
File: N6lZHUhfwNCQKom-hBijuxJ1BqU.mft (raw, json)
Hash identifier: 8ekdf4Bo3NznWCo1gydhbpuSRxWIW5mNp3jBw1o1v3I=
Subject key identifier: 61:DB:D9:6B:06:19:67:8F:CE:42:F6:E6:91:C7:F8:8F:92:42:DE:30
Authority key identifier: 37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
Certificate issuer: /CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Certificate serial: 019D33E44E90EB4F6C7DC98FD5961B586FE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
Manifest number: 086B
Signing time: Sat 28 Mar 2026 10:01:33 +0000
Manifest this update: Sat 28 Mar 2026 10:01:33 +0000
Manifest next update: Sun 29 Mar 2026 10:01:33 +0000
Files and hashes: 1: N6lZHUhfwNCQKom-hBijuxJ1BqU.crl (hash: 1fpo9D5jENlNZM0AeoPTX+cmy86GkUKTHsn/MK/kp3M=)
2: nw0s_ZdcgrwGlu8u_HrQqTco1sU.roa (hash: 5Wuom3Rjt43oB3Jg8yCoeJE3CjK9j1RDXnp2z20aTL0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 04:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:33:e4:4e:90:eb:4f:6c:7d:c9:8f:d5:96:1b:58:6f:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a9591d485fc0d0902a89be8418a3bb127506a5
Validity
Not Before: Mar 28 10:01:33 2026 GMT
Not After : Mar 29 10:01:33 2026 GMT
Subject: CN=61dbd96b0619678fce42f6e691c7f88f9242de30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:04:ed:84:28:a5:fe:0c:8c:e5:48:db:52:37:
a0:e1:76:e6:fc:96:45:70:00:c7:d9:50:55:ac:38:
6b:56:99:00:7e:09:c3:94:8a:58:5d:d4:37:12:dd:
0d:07:3b:23:02:fc:ca:b5:84:41:a0:27:bf:0f:8c:
6f:eb:c4:00:db:c8:62:fa:14:34:21:5e:e9:19:e4:
29:c9:1c:f5:50:e0:de:9f:d5:f3:28:bc:02:38:aa:
b8:f4:2a:78:d5:22:43:14:f2:49:5a:60:2f:75:66:
b4:e6:5b:bc:a5:4b:62:22:5b:ec:55:d8:e3:b0:db:
9c:02:a1:0e:6c:1d:54:15:5d:82:c7:36:42:6e:ed:
89:bd:82:64:fc:60:cf:d2:f0:95:15:0e:d6:8b:b5:
c7:90:0e:80:24:8f:c6:66:6e:33:83:87:ec:12:6c:
5a:d3:d5:43:40:6b:fd:cb:df:03:b6:65:a8:29:16:
19:78:e4:a4:00:c6:0f:8f:7c:ae:b3:11:c9:56:11:
d1:f1:6d:a9:df:22:44:43:62:94:51:47:c9:35:f1:
93:4a:53:2c:46:d6:0e:85:c9:7c:f1:0d:46:02:29:
0b:46:b5:79:44:39:3c:5d:2a:39:cb:96:fa:29:52:
48:d8:3c:5b:75:a8:2f:28:10:bf:6f:70:30:df:13:
5b:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:DB:D9:6B:06:19:67:8F:CE:42:F6:E6:91:C7:F8:8F:92:42:DE:30
X509v3 Authority Key Identifier:
keyid:37:A9:59:1D:48:5F:C0:D0:90:2A:89:BE:84:18:A3:BB:12:75:06:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6lZHUhfwNCQKom-hBijuxJ1BqU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/9678f9-9dfe-4b39-a80b-c54af960ef18/1/N6lZHUhfwNCQKom-hBijuxJ1BqU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:cf:69:59:f0:d9:ed:8a:76:a8:63:c8:37:e8:9d:c5:46:16:
e0:37:bd:d0:3a:36:bb:05:fa:d6:f1:a2:12:df:61:35:ab:6b:
c3:d0:d4:89:22:1b:0f:01:ec:29:8b:35:59:98:0f:19:d1:2b:
61:0a:35:53:b7:34:88:33:91:46:1c:a9:90:30:04:2e:db:e9:
2f:56:56:c7:22:f3:99:e7:a0:75:d3:9f:d3:39:fa:7c:cc:d7:
e9:8b:30:fd:aa:c4:14:f4:29:4d:73:ea:c4:a7:03:69:64:69:
49:27:d4:da:c8:68:0f:44:0b:0e:3e:35:5a:ab:54:97:1a:ae:
af:4c:41:4c:55:f7:76:4a:90:14:23:ae:e5:4d:fd:c3:36:e5:
52:94:03:04:f6:9f:e2:f8:bf:0c:9b:2c:a3:b2:5d:ba:5b:e8:
e6:b8:ce:10:89:98:9d:9c:41:58:1b:53:80:06:1f:4e:e4:71:
ff:bd:72:bb:5f:e7:da:e3:d2:db:47:41:8f:36:36:24:08:6b:
e3:be:41:37:d6:84:76:ba:67:74:8c:2c:98:8d:f8:69:31:8b:
07:d7:5f:44:13:0a:fd:90:f1:49:65:20:61:18:eb:91:82:1a:
24:16:8d:58:a4:75:fe:ed:fb:6a:56:d9:2c:c9:a8:2d:76:d2:
4e:7b:eb:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:21:06 2026 by rpki-client