Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: tP9guwDYd7QJLvbcbedDwDmUfN7ubh7q4PNGTuCddrg=
Subject key identifier: 1B:AF:D9:8D:0D:A2:B3:B7:D9:15:35:38:3B:27:FB:DB:49:70:EB:62
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 019D24DE7AF8544461278F2A152FB1BC9250
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: B6
Signing time: Wed 25 Mar 2026 12:00:53 +0000
Manifest this update: Wed 25 Mar 2026 12:00:53 +0000
Manifest next update: Thu 26 Mar 2026 12:00:53 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: ZTzUsc8qxxYEJscZlAyo00BMB/17PYVsxgYT6SPfj/g=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:24:de:7a:f8:54:44:61:27:8f:2a:15:2f:b1:bc:92:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Mar 25 12:00:53 2026 GMT
Not After : Mar 26 12:00:53 2026 GMT
Subject: CN=1bafd98d0da2b3b7d91535383b27fbdb4970eb62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:eb:fa:40:46:9c:18:0c:f5:87:51:15:c4:05:
18:01:a1:61:3c:85:c0:ce:e6:d4:07:da:28:18:ba:
77:fd:ef:ce:e8:44:65:88:7f:df:3d:ba:23:01:c6:
15:4e:fb:23:4e:ab:23:6f:ce:ea:db:a1:35:91:f0:
e8:23:7e:6b:38:9d:fa:86:4a:e5:f5:53:00:c1:98:
c4:d5:00:74:fa:75:78:3d:db:11:d9:2e:19:2f:8c:
a3:ac:e7:35:fa:7a:ac:ea:ad:69:45:4b:27:1a:af:
5d:75:c1:0b:eb:fe:9a:2d:72:7e:f9:e5:ca:50:c0:
de:4a:ea:14:d5:d7:24:71:9f:be:bf:a6:68:8b:00:
ef:51:4a:ca:c6:2a:a7:ae:31:dc:14:b5:61:d6:f9:
df:80:c8:a5:69:a7:81:64:91:3a:a0:a4:8b:e3:de:
0a:35:48:79:81:45:b1:b8:74:ed:c4:23:17:f5:33:
e2:8f:2f:fb:ec:d8:28:5c:63:65:22:cc:53:c2:d0:
36:f8:8d:b4:ee:15:b3:a4:8f:f6:b5:2e:32:12:13:
3a:1d:55:eb:7c:df:39:b6:67:57:54:fe:8e:e5:86:
e7:8e:89:bb:bb:4d:f9:89:e9:81:6a:cc:69:75:c4:
59:34:49:41:8d:04:be:6b:f7:3b:fd:66:54:de:38:
9f:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:AF:D9:8D:0D:A2:B3:B7:D9:15:35:38:3B:27:FB:DB:49:70:EB:62
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:6e:32:fe:26:33:b6:81:76:50:5d:1c:4c:6c:a2:11:29:ac:
10:77:bc:0a:03:7d:2f:7f:7d:ac:8d:74:4a:dd:23:1d:6e:5a:
18:3b:4c:de:cc:89:fd:83:d0:c9:f0:c3:53:69:09:31:1e:1b:
eb:50:ff:22:fe:1f:2b:6f:b5:6d:e0:75:78:d5:34:b0:d4:e3:
c7:5d:bf:22:59:02:35:db:a9:2c:1f:96:b3:6a:2b:2b:51:bd:
b2:e7:f2:24:99:d9:9a:67:7b:9b:89:f9:28:c1:34:8e:ff:4a:
6b:f2:51:c8:f7:c9:69:66:c0:d5:7f:c5:c9:7d:e7:a6:d4:3b:
df:0a:06:04:5c:84:7c:73:ce:da:bf:0e:a4:d1:1a:bb:52:fd:
c6:ef:9d:9d:fc:14:fe:29:12:e1:f3:2a:3c:cc:93:5b:a1:4d:
7c:c5:7e:df:b2:06:70:b0:61:0a:89:b6:bf:8d:ec:77:fb:c0:
e9:6a:c4:a6:41:8a:c1:84:f5:ed:f5:21:d1:34:5e:74:0b:7e:
fe:4d:03:3b:63:58:f0:bc:66:40:a3:2d:f1:74:74:ca:76:31:
f0:4b:b4:63:ee:ca:af:99:1c:54:29:41:a7:5e:99:5e:02:6e:
39:e5:53:0e:49:db:8c:16:38:50:42:a9:6d:42:a2:de:4b:9e:
22:24:fd:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 22:46:53 2026 by rpki-client