Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: TytsjYyug7eOHdrktldLa1XspjEoUZMsMPPHrf5Gf1c=
Subject key identifier: 29:6B:DA:DF:94:56:D4:EE:A3:53:15:6F:EF:03:E9:78:BE:EF:C2:44
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019D25BA916A8ABD0EB73222FA75E9B799CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 100C
Signing time: Wed 25 Mar 2026 16:01:17 +0000
Manifest this update: Wed 25 Mar 2026 16:01:17 +0000
Manifest next update: Thu 26 Mar 2026 16:01:17 +0000
Files and hashes: 1: 2AG4E7qAt_4fZev1XlJEGets8GQ.roa (hash: pOb52T7TL8V2yMfYjqzg4zNYa3sfzX3jMEvSLA8/EMM=)
2: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: bemCnosEO3WT/0bGITPTva4SgxZSF5H4G40P1V87GUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:91:6a:8a:bd:0e:b7:32:22:fa:75:e9:b7:99:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Mar 25 16:01:17 2026 GMT
Not After : Mar 26 16:01:17 2026 GMT
Subject: CN=296bdadf9456d4eea353156fef03e978beefc244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d0:8e:37:09:bd:70:2e:10:3b:d2:d4:3a:d3:
5c:12:25:0e:d4:2c:dd:c7:64:f8:97:42:6c:2c:dc:
9b:4c:f4:e9:ef:ba:cc:9f:9b:6c:7f:65:c6:ed:c3:
09:cb:8c:58:12:6f:9b:01:18:e4:cb:f6:9b:07:ab:
da:22:7a:f0:63:66:34:2b:eb:af:59:1e:a0:12:65:
cc:9f:c5:88:ff:fd:03:61:3d:5a:0e:6d:2f:b9:3b:
5f:0e:71:b8:0c:2b:6b:5c:93:83:45:8d:71:0f:2a:
43:36:22:17:0e:8d:37:4c:83:29:c2:05:7e:27:45:
a2:20:63:c0:a1:1e:77:03:20:1f:14:e2:d5:9c:d0:
00:86:b1:79:d6:6a:c8:da:92:6c:f2:b7:30:c0:93:
f9:74:ce:ea:a4:37:42:59:91:36:d3:bf:63:85:a0:
2b:06:82:1a:6c:5f:c0:91:b7:61:7a:f3:a7:c1:bf:
50:2c:9e:ee:60:51:cc:02:41:7c:5f:07:f6:f7:5f:
79:bf:51:09:30:15:32:9c:46:9c:08:4e:4e:ff:44:
14:27:00:91:ba:37:b8:47:f6:2a:de:b6:6c:bb:97:
5b:dd:a9:6b:6b:6c:e0:a9:bb:f4:9a:6d:23:04:19:
ed:6c:a8:98:a1:a4:7d:5a:ae:04:43:97:1c:0e:17:
c0:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6B:DA:DF:94:56:D4:EE:A3:53:15:6F:EF:03:E9:78:BE:EF:C2:44
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:b3:4c:d8:dd:9d:39:a3:2c:a1:13:92:82:ee:83:3d:d1:2b:
0d:b6:a7:75:d9:a2:d6:17:f4:f1:44:5f:be:a3:1c:39:d8:02:
04:d5:4b:54:e0:a9:c8:ea:c3:bb:24:52:6d:88:d6:88:39:d3:
8f:39:20:e0:9b:dd:b5:51:f2:ed:39:11:71:9d:f9:e8:37:40:
99:9a:4c:91:6b:1e:7c:16:b4:c4:47:67:57:9c:dc:03:c6:ec:
74:54:74:c3:ba:e2:3c:4e:fc:57:f6:22:62:5e:fe:b5:10:2f:
9e:af:b7:fa:f2:d4:5d:1e:1a:63:05:7e:f5:2a:ae:6f:c7:3b:
25:ff:1d:ca:97:4d:f9:e6:02:2d:a1:ad:78:87:62:5d:b8:5b:
c5:b0:81:f8:41:a9:5d:73:42:fb:f9:88:67:5b:77:f7:f6:69:
67:11:87:1b:fe:73:a9:3d:8c:88:dc:ea:10:26:bc:34:bc:25:
9d:7d:34:87:18:b6:c2:92:5d:0b:02:50:86:3e:18:f7:0e:d7:
0a:03:8c:d0:27:34:6d:55:0d:db:4e:3f:a7:81:41:1b:b2:b8:
8c:99:19:75:1c:cc:c0:b7:04:45:76:3c:0b:65:0b:58:61:1d:
e1:a4:e7:f7:a2:91:a0:17:3b:bf:5e:5a:ee:8e:b5:bc:d5:9f:
74:8b:7c:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0lupFqir0OtzIi+nXpt5nPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3N2JkMTBmN2Q5MDZjMTMxYzhjOWUyZmM3MzE2NDE2ZGY0
YWUyMjQwHhcNMjYwMzI1MTYwMTE3WhcNMjYwMzI2MTYwMTE3WjAzMTEwLwYDVQQD
EygyOTZiZGFkZjk0NTZkNGVlYTM1MzE1NmZlZjAzZTk3OGJlZWZjMjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4dCONwm9cC4QO9LUOtNcEiUO1Czd
x2T4l0JsLNybTPTp77rMn5tsf2XG7cMJy4xYEm+bARjky/abB6vaInrwY2Y0K+uv
WR6gEmXMn8WI//0DYT1aDm0vuTtfDnG4DCtrXJODRY1xDypDNiIXDo03TIMpwgV+
J0WiIGPAoR53AyAfFOLVnNAAhrF51mrI2pJs8rcwwJP5dM7qpDdCWZE2079jhaAr
BoIabF/AkbdhevOnwb9QLJ7uYFHMAkF8Xwf29195v1EJMBUynEacCE5O/0QUJwCR
uje4R/Yq3rZsu5db3alra2zgqbv0mm0jBBntbKiYoaR9Wq4EQ5ccDhfA/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClr2t+UVtTuo1MVb+8D6Xi+78JEMB8GA1UdIwQY
MBaAFDd70Q99kGwTHIyeL8cxZBbfSuIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzct
NWE5YWM3ZjM5MDIzLzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzctNWE5YWM3ZjM5MDIz
LzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW7NM2N2d
OaMsoROSgu6DPdErDbanddmi1hf08URfvqMcOdgCBNVLVOCpyOrDuyRSbYjWiDnT
jzkg4JvdtVHy7TkRcZ356DdAmZpMkWsefBa0xEdnV5zcA8bsdFR0w7riPE78V/Yi
Yl7+tRAvnq+3+vLUXR4aYwV+9Squb8c7Jf8dypdN+eYCLaGteIdiXbhbxbCB+EGp
XXNC+/mIZ1t39/ZpZxGHG/5zqT2MiNzqECa8NLwlnX00hxi2wpJdCwJQhj4Y9w7X
CgOM0Cc0bVUN204/p4FBG7K4jJkZdRzMwLcERXY8C2ULWGEd4aTn96KRoBc7v15a
7o61vNWfdIt80Q==
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:49:36 2026 by rpki-client