Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: UWBDlLGRbG9mIU0XB7zW/YnlXHLUKRcUezKsBoMLxb8=
Subject key identifier: F5:DA:AA:C0:55:82:48:8A:71:BF:07:C5:7A:79:9C:70:A9:6A:BA:F4
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 01A0D5707129774A3A1C2B3268C6D1F2A998
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 17BA
Signing time: Thu 24 Sep 2026 22:01:51 +0000
Manifest this update: Thu 24 Sep 2026 22:01:51 +0000
Manifest next update: Fri 25 Sep 2026 22:01:51 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: HfS2nEpa0WjQJCzjvZC9rPonMXmBmg7M/pU6MWh0ZG0=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 22:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d5:70:71:29:77:4a:3a:1c:2b:32:68:c6:d1:f2:a9:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Sep 24 22:01:51 2026 GMT
Not After : Sep 25 22:01:51 2026 GMT
Subject: CN=f5daaac05582488a71bf07c57a799c70a96abaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:85:05:3b:29:a4:1e:d3:82:3a:07:22:1d:60:
93:74:8a:77:d8:51:f2:1c:af:68:44:b1:43:67:92:
ab:c7:42:39:56:e2:27:dc:68:6b:67:12:25:f9:ea:
0d:03:78:4a:23:4a:3e:75:7c:f7:90:d7:28:58:19:
a1:cb:5b:6f:b6:e3:af:fb:85:9b:3f:92:6a:a6:9a:
b2:7e:5d:a3:a2:0e:98:bc:0a:65:ae:60:30:76:ab:
8b:55:9a:51:7e:79:b5:f3:40:31:6c:52:78:ba:b4:
3e:85:bc:0b:6a:fa:fd:8c:66:89:87:49:94:08:1a:
44:04:8e:fa:90:77:52:04:6a:5b:46:53:dd:5e:09:
a6:9c:e9:f5:66:26:41:a4:51:70:d2:de:99:6d:98:
6a:a4:f8:79:e6:d5:b8:6e:a9:fc:b6:b8:95:98:5a:
b3:6e:78:ff:a9:7c:8a:a2:5a:09:c9:79:80:75:fb:
f6:1c:63:f1:4c:9e:ad:5d:89:27:97:c7:d0:5b:ef:
b8:78:20:3c:74:78:a4:0e:09:95:b3:6e:98:e7:d1:
b2:0a:c7:8b:07:c5:88:43:48:0b:8e:f5:99:8d:6d:
34:fb:11:19:eb:3d:45:bd:f8:ab:02:67:b0:9f:d9:
42:0f:11:5e:ba:46:92:70:26:89:3c:25:d6:49:7b:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:DA:AA:C0:55:82:48:8A:71:BF:07:C5:7A:79:9C:70:A9:6A:BA:F4
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:22:cb:e3:4a:6b:4d:fb:e6:1f:1c:9f:0a:43:36:05:10:80:
8d:75:36:6e:7a:33:97:b3:11:f5:d3:73:14:f4:e8:f3:09:92:
40:e6:5b:ac:52:ac:93:52:5e:32:46:05:22:85:da:05:2e:e2:
f6:14:9c:90:67:b1:39:17:bd:f2:6e:bf:59:a3:9e:c1:16:8e:
7f:79:32:a1:6a:20:7d:43:c0:a5:54:e1:f9:1a:60:4a:c5:7a:
e5:74:6d:9d:1d:f5:92:a9:43:62:bc:c4:b9:a6:8c:58:c2:9c:
d3:e7:99:29:89:30:e8:b4:a9:ee:ee:1d:ba:3e:cd:06:43:b6:
64:f7:be:15:4e:8e:f5:de:1f:3e:4d:1d:00:69:5c:cf:4a:d3:
07:97:c1:c8:a2:f8:f9:7d:60:75:ba:3c:c2:29:91:7f:9e:4b:
d2:7b:cc:38:f9:c3:10:fb:ae:3d:1e:f6:7d:fe:46:8c:29:d6:
95:5c:a6:c9:a6:5e:f2:72:eb:5b:e2:32:8c:a7:a3:bb:73:d8:
50:29:69:c8:94:6e:69:36:64:e5:95:7d:89:eb:e9:92:02:dd:
4d:1a:e9:c5:56:7b:57:cb:45:e2:a6:08:64:80:9d:a3:b0:cd:
a4:d1:7d:17:05:29:08:57:70:50:da:d1:62:fe:b3:e4:27:98:
ef:e7:f6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 11:00:50 2026 by rpki-client