Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: NBvhdD6j6p4kV6TQZzFvvq5hoZ02N7gxuio2ycB+8qQ=
Subject key identifier: CA:A8:B0:F1:C2:D3:BA:6F:4B:E7:7F:6C:38:93:50:05:C6:C5:F2:C2
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 01A0E2502137355F84A249A08217957D512B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 0A35
Signing time: Sun 27 Sep 2026 10:01:37 +0000
Manifest this update: Sun 27 Sep 2026 10:01:37 +0000
Manifest next update: Mon 28 Sep 2026 10:01:37 +0000
Files and hashes: 1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: rklwgmB3km3IMjnxiD127dFw7jzpFrBA2uyDdlqy94g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 10:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:50:21:37:35:5f:84:a2:49:a0:82:17:95:7d:51:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Sep 27 10:01:37 2026 GMT
Not After : Sep 28 10:01:37 2026 GMT
Subject: CN=caa8b0f1c2d3ba6f4be77f6c38935005c6c5f2c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:42:1c:73:fd:f0:96:81:35:fa:21:77:85:
8c:11:23:bf:1c:b9:1c:c3:9f:3d:f0:75:1f:4e:54:
3a:e9:05:b8:f9:84:b2:e3:ad:4b:32:71:1b:ef:41:
a5:92:28:f5:8d:cf:1b:84:2f:e5:cf:43:19:42:27:
3d:57:62:d6:ce:06:e6:ae:ea:81:b2:17:36:75:0a:
46:1c:b0:ec:df:4e:b1:42:fd:37:d8:51:ea:9c:ae:
a1:e9:d3:26:10:54:88:df:7b:7b:31:8d:16:eb:bc:
31:3a:52:81:7a:96:42:8c:7a:d9:97:e4:0a:db:0d:
e0:67:c8:b1:13:e8:89:0a:d4:9a:55:f5:2f:16:02:
12:53:cd:f6:cf:08:c3:1d:a0:6b:36:16:86:aa:87:
bf:43:18:99:b2:c0:07:90:77:3e:33:51:c9:0f:b3:
0c:00:f6:f1:51:06:0a:8d:10:b5:3b:a3:44:ab:e8:
d0:97:f7:c0:a3:09:05:2a:aa:f6:df:24:b9:5c:ed:
21:cd:6a:04:11:97:9f:e4:6a:e4:f0:17:14:42:0f:
a1:cf:91:a3:8a:58:4c:84:7f:2d:de:43:d3:e7:fb:
99:fa:10:b3:cb:5d:28:a6:ce:02:cd:c5:bc:dd:b2:
0d:0b:95:b0:f3:6d:51:2f:72:bd:66:09:5c:59:05:
38:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:A8:B0:F1:C2:D3:BA:6F:4B:E7:7F:6C:38:93:50:05:C6:C5:F2:C2
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:3d:89:9f:5b:34:42:33:89:7b:fa:36:b9:ea:a8:3b:43:c3:
2e:16:1e:0e:d8:a3:5c:f1:92:dd:4e:48:16:c6:c6:20:40:a2:
01:a8:c6:6f:db:5d:45:01:e3:ea:11:35:98:23:16:d7:56:bb:
44:06:fd:51:df:40:40:4d:da:41:06:4d:60:03:cf:72:6d:c4:
9e:58:57:5f:c9:81:9f:8e:8b:6f:77:b0:7c:1e:d5:fb:07:9c:
da:51:89:83:92:ea:98:19:f3:00:98:a2:8f:85:73:9d:ec:f7:
f0:f4:d3:e0:0d:01:1f:3f:66:43:b7:7c:78:75:4a:e8:de:38:
bc:fc:10:61:10:2a:71:c9:d7:e5:6d:b6:92:5d:95:ed:5f:c0:
c3:7c:80:6a:e3:30:9e:ce:12:0a:fd:e2:58:2e:bb:12:4a:b2:
3a:4a:9a:e5:6a:83:00:d5:e8:c0:e6:15:f0:73:fc:1d:c2:a3:
66:f1:33:24:13:7b:15:c2:65:fb:b3:ae:1a:d7:34:c7:8e:02:
b2:85:89:ea:6e:05:ef:f0:b8:ed:4d:a8:c6:68:4e:40:87:a8:
25:26:06:c3:1a:34:96:a9:34:c7:ea:7d:93:4a:dd:8e:71:5b:
89:12:76:3d:13:48:29:9c:41:5c:b4:33:35:d7:34:4d:d0:46:
c8:e8:75:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:32:51 2026 by rpki-client