Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: W78V7JrnHiCWtRHtrqq59xTeb9ioIrOHqh0u3Ea/tDw=
Subject key identifier: B9:00:0A:D2:44:CD:50:89:53:90:AC:CD:8F:CA:05:91:E1:88:AA:7C
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 019D2996E83CF89F93FDB6FE00B4CEF451C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 0A1B
Signing time: Thu 26 Mar 2026 10:00:48 +0000
Manifest this update: Thu 26 Mar 2026 10:00:48 +0000
Manifest next update: Fri 27 Mar 2026 10:00:48 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: 4tNewPkJ6NzqgnlECU/T+m1FNa4kbHW+iveJ1ikpfME=)
2: TCXCSy8OTt2z48kEbdsf0Ii50x4.roa (hash: ABalj2aODIZMqx3xajCEDvRzB5V6E/YYH2xej8zDQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:96:e8:3c:f8:9f:93:fd:b6:fe:00:b4:ce:f4:51:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Mar 26 10:00:48 2026 GMT
Not After : Mar 27 10:00:48 2026 GMT
Subject: CN=b9000ad244cd50895390accd8fca0591e188aa7c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:f7:73:a3:ca:64:1c:5e:92:32:5e:0c:db:6a:
81:99:40:5e:02:b8:bb:b0:a9:5c:12:87:0c:9e:84:
67:8e:ad:66:1f:2d:7f:22:32:e6:9f:a2:2f:52:61:
fe:27:46:d4:af:0c:f7:9b:09:ee:29:eb:50:b2:84:
6b:99:c8:a6:7e:32:0b:b8:26:e8:85:18:0c:ec:d3:
24:0a:82:f6:c9:a4:b5:c1:f8:b3:3d:cb:51:81:34:
3f:3e:c3:88:45:70:6b:fc:6b:c7:b1:a3:ef:5b:3c:
c8:97:04:f8:5a:dc:15:d0:35:f6:d0:1f:05:ca:0d:
f8:94:e2:2f:ed:d3:da:4a:97:3f:a1:ee:0a:89:3c:
48:e4:6d:8b:f5:d9:c8:26:89:11:a4:08:9b:69:4d:
59:1e:22:72:66:e1:b5:57:e1:0d:3f:db:7e:a5:38:
2e:4e:8c:3a:9f:f9:f4:22:77:2f:51:a4:38:0d:a9:
d5:e8:f6:d0:c8:be:7d:c1:c7:96:0b:52:c8:ab:fd:
42:72:92:87:b1:ae:06:08:18:99:f2:28:1a:3b:cd:
03:46:42:77:74:41:03:d9:6f:22:c4:ea:11:bc:31:
4c:f4:63:63:0c:6a:51:ed:5f:a3:64:c4:3b:fb:b0:
87:57:ed:ab:e3:69:53:69:60:fa:fe:d0:27:c8:af:
6d:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:00:0A:D2:44:CD:50:89:53:90:AC:CD:8F:CA:05:91:E1:88:AA:7C
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:ab:09:a9:b6:51:e3:74:07:2b:70:9c:d1:28:0c:a8:27:ae:
81:df:01:76:cf:ab:d0:79:c7:04:a1:9a:d7:cc:22:bd:ba:7c:
c9:6c:7a:8a:08:08:f0:1a:e7:2d:0b:5d:e5:c7:87:e2:41:2e:
e8:82:04:5c:7d:5a:0d:5e:05:0d:35:cd:72:fc:af:e1:c4:a1:
89:61:e4:bb:da:6c:ca:16:ac:80:52:7b:d8:61:15:93:04:02:
9b:04:c4:ce:ba:d7:f6:ca:88:9c:cf:bc:db:cc:88:28:a7:83:
92:03:92:43:59:7b:5a:5a:1c:0d:f7:0f:63:2f:7f:1f:b4:0e:
30:ad:df:c0:85:d0:1b:45:42:70:f8:07:12:a2:74:a7:43:0b:
41:83:32:67:82:4f:5d:0d:f2:b9:49:59:bd:e1:e2:c1:77:0f:
e5:3b:c1:b1:0e:10:65:26:24:fe:41:a0:1d:6b:7b:c9:ea:27:
0a:9a:e3:4e:08:1e:51:46:3d:e1:7a:7b:a2:76:9c:14:17:fc:
fa:93:0a:19:42:23:7a:fd:cb:a4:a6:de:72:0b:9f:32:c3:83:
b3:fb:3c:63:83:ba:07:3d:08:1d:39:72:6f:f3:5b:fc:57:12:
ba:46:ee:29:73:bc:08:3c:57:96:e9:e0:60:24:f0:be:65:94:
de:28:cd:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:38:31 2026 by rpki-client