Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: NTzEE82lRUs823Ze8lr+9MFIHpOgyhqozJYCzoAbxyY=
Subject key identifier: A2:74:44:21:4E:94:23:53:48:5F:7B:B0:48:61:30:35:AA:B2:B9:9C
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 01A0CB5922B5A8536B1942B9C74B3438E72A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: 029A
Signing time: Tue 22 Sep 2026 23:00:11 +0000
Manifest this update: Tue 22 Sep 2026 23:00:11 +0000
Manifest next update: Wed 23 Sep 2026 23:00:11 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: DN6cHnnchIN8DBOxH1r4Wo9qWmxIKGgErKLExDb8iDQ=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cb:59:22:b5:a8:53:6b:19:42:b9:c7:4b:34:38:e7:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Sep 22 23:00:11 2026 GMT
Not After : Sep 23 23:00:11 2026 GMT
Subject: CN=a27444214e942353485f7bb048613035aab2b99c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ee:43:4c:49:6f:07:8c:f3:e7:ee:d8:82:59:
a3:89:f8:d0:20:9f:bb:ee:a4:5b:09:bc:6f:28:36:
c7:70:38:74:eb:a4:c7:69:39:b6:f5:4d:3f:17:f7:
07:31:2e:bb:29:1c:24:f4:13:90:af:b3:c5:cf:3f:
5e:9b:55:1f:93:ba:4d:0a:35:a6:e0:08:96:f6:c6:
a0:5b:53:58:06:ba:39:ad:23:44:4c:92:8a:51:a5:
19:e7:08:65:59:33:63:bc:84:13:3f:dd:fe:18:fe:
84:b6:b3:40:f5:67:3b:fd:c0:c1:c1:ff:6d:b7:2a:
5c:2f:16:92:ad:1d:b5:4a:00:b1:f5:2c:8b:24:24:
f7:cb:77:d1:6c:44:ce:32:b4:b5:f6:79:58:28:61:
44:8c:1a:fb:d2:f5:08:23:9a:67:93:f5:21:53:35:
a9:32:7c:7f:78:3d:56:ab:20:15:77:a9:20:ae:0c:
a1:7e:43:33:cf:e9:8f:d0:c9:01:0c:26:07:13:46:
2a:c4:5d:a6:e1:06:56:8b:93:11:bb:55:93:c2:c0:
5d:55:9d:88:a6:21:ef:57:6e:e2:8c:2e:94:db:3b:
d4:df:8b:d2:04:38:95:a3:6d:86:41:3f:dc:dc:22:
f9:3b:0b:8e:71:ab:7e:b8:f5:52:c9:a8:17:ac:0a:
7d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:74:44:21:4E:94:23:53:48:5F:7B:B0:48:61:30:35:AA:B2:B9:9C
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:09:78:49:c9:e0:d7:02:54:f6:e4:79:d4:63:e7:59:07:48:
a4:bd:58:47:da:8d:f7:2a:25:16:a3:77:c7:aa:97:b7:78:71:
25:ca:a0:79:b6:a5:fc:19:64:13:4c:e2:14:ba:e6:78:9f:9b:
5d:65:e9:23:59:2b:24:cf:be:83:a2:ee:71:9e:c6:37:23:ab:
27:7d:d8:ca:56:00:c6:e8:f3:0e:1a:06:5b:78:97:32:87:4c:
9c:b0:08:ac:bb:1a:0a:27:e6:33:d7:92:cc:cc:d6:14:a5:00:
4f:32:52:34:13:9e:05:c3:50:5d:f8:1a:e8:2b:f2:37:3b:80:
69:21:07:f1:93:d9:25:23:85:b9:56:1c:f4:df:36:e7:e4:c2:
b2:b0:88:80:27:ea:e7:42:d6:cd:f0:c5:84:fd:16:88:51:c3:
1d:9a:83:63:b4:da:f0:46:9d:24:24:85:58:4f:78:16:13:40:
99:ed:96:05:94:cf:a9:1d:5a:b3:e0:6a:84:ad:5c:61:2a:0b:
9b:a3:46:0e:99:25:61:91:22:8c:a1:10:7b:b7:6b:48:4a:43:
9c:82:91:68:ba:87:fc:29:c0:e0:e2:2f:1c:b1:0c:27:88:17:
68:18:7c:76:d4:d3:42:c5:4e:06:10:5a:37:3e:5d:23:46:22:
47:2b:41:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 02:51:48 2026 by rpki-client