Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: 6TyCGxdd7d4B9XmWD2eNCxFPvGfAWRX+EHY3pi3O4SA=
Subject key identifier: 58:74:B6:E1:05:34:FE:38:31:0D:D3:50:A9:00:7C:4A:17:86:9F:9E
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 019D284E3338007FA2248D348CE03BA743EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 1888
Signing time: Thu 26 Mar 2026 04:01:46 +0000
Manifest this update: Thu 26 Mar 2026 04:01:46 +0000
Manifest next update: Fri 27 Mar 2026 04:01:46 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: PHCvYV/wiwGXsbfAMDGO6M1hSBwZhMVoQQ34EAhFqwk=)
2: nTe4XS35nHxQSCG2D80P-vLwCdc.roa (hash: VFddyo3u6Vm8UnAzJlN5YGNR/ZyZRBkt6xiG3mZLyRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 04:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4e:33:38:00:7f:a2:24:8d:34:8c:e0:3b:a7:43:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Mar 26 04:01:46 2026 GMT
Not After : Mar 27 04:01:46 2026 GMT
Subject: CN=5874b6e10534fe38310dd350a9007c4a17869f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:79:9c:c7:03:b9:75:ff:68:d2:1e:66:1c:1e:
80:59:cb:ac:b9:35:5b:b1:61:72:c4:42:01:20:46:
f5:57:29:a7:cb:fa:45:8d:ec:94:58:75:8a:b5:e4:
ee:c8:84:6b:cf:02:cf:38:16:1b:4d:f5:46:08:b9:
ae:69:08:af:7c:c6:13:1f:85:82:b6:8c:aa:d6:0d:
2b:65:f2:8a:6e:80:7c:2d:37:f1:67:8b:3b:53:9f:
c8:a9:08:82:05:fa:f0:91:d5:d4:38:6d:f8:d5:72:
1b:4a:20:ee:d8:59:aa:95:88:86:32:5e:ea:cf:d6:
4c:e3:74:61:4f:e6:16:30:ca:23:7d:8f:29:99:ca:
a1:37:4f:ad:a6:d7:e7:c0:23:0e:0d:aa:61:37:55:
d7:27:af:94:0b:ef:40:f2:29:c7:89:c0:9a:02:21:
ed:4e:83:21:cf:2a:a1:42:cb:40:a7:03:2e:05:60:
95:47:a9:6e:9b:e0:55:89:e5:08:03:9a:1a:fd:d7:
8d:e6:c1:d7:7a:fa:0d:13:79:42:df:e8:31:41:55:
81:b7:32:8d:e6:3c:92:8d:75:42:06:79:07:de:58:
24:dd:45:fc:ae:e7:e7:5e:87:d2:57:17:11:32:f7:
03:ca:ae:da:11:a5:dd:6b:35:7d:6f:5b:fc:b4:59:
5c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:74:B6:E1:05:34:FE:38:31:0D:D3:50:A9:00:7C:4A:17:86:9F:9E
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:10:20:fd:4b:81:6f:8d:0d:16:68:0a:cf:59:17:f2:07:a2:
9e:1b:e8:00:dc:6a:f9:45:ac:6e:c6:82:91:27:cf:87:cf:c1:
fb:0f:a4:86:d8:da:1c:ff:2d:fc:b5:67:27:0d:5e:84:a5:a3:
76:fb:aa:f9:45:f5:94:01:5e:6c:09:23:38:24:73:d8:98:66:
3c:a8:4b:5c:fb:34:c3:07:a3:fc:a6:b4:0f:1e:12:8f:d9:aa:
84:f9:7b:1e:8c:c8:b7:1b:e1:3f:83:c3:9c:92:f8:42:fd:1e:
20:6a:81:92:2e:f5:2f:f9:8b:c1:4b:a3:b7:e9:9a:c6:1e:7e:
ca:d7:7e:88:f8:ce:32:fe:e2:82:b1:36:d0:16:95:38:b8:20:
4c:19:54:83:4e:13:34:a7:fa:9c:5d:a9:c1:5a:10:e9:68:86:
bc:3c:10:26:10:ee:ba:4c:17:30:77:46:61:40:96:56:0b:d6:
84:79:53:d6:ab:a8:60:43:42:50:e7:62:f8:a7:4b:cc:d4:b2:
50:0f:0f:3d:b2:f2:7a:44:0a:00:fa:ba:35:5e:6d:92:bb:b9:
49:d7:80:de:c0:d3:2e:95:41:e9:42:ea:5f:c9:53:76:12:c5:
f6:64:be:38:56:23:13:7e:1d:0b:71:8a:17:9f:16:36:8b:da:
b6:3a:37:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:38:08 2026 by rpki-client