Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: izXFHdG/54TpZYjJQ8gp7/DZYSUnb8pGWL9Vd9NPMmY=
Subject key identifier: C9:41:9E:04:06:A5:2E:B6:A3:A2:9A:E7:50:5B:0C:97:CC:94:52:57
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019F90FF1C261D328479CCDA9156F2A769A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 1712
Signing time: Thu 23 Jul 2026 22:01:05 +0000
Manifest this update: Thu 23 Jul 2026 22:01:05 +0000
Manifest next update: Fri 24 Jul 2026 22:01:05 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: xgiFYp8YR8D71dq7gVtqKJbzY1hYDmNuTlZdA4722yw=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:ff:1c:26:1d:32:84:79:cc:da:91:56:f2:a7:69:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Jul 23 22:01:05 2026 GMT
Not After : Jul 24 22:01:05 2026 GMT
Subject: CN=c9419e0406a52eb6a3a29ae7505b0c97cc945257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:aa:e8:3d:93:43:94:22:6c:7b:5d:46:c5:67:
cf:74:d7:49:e2:23:61:c1:db:f6:f3:77:05:b1:76:
c5:dc:c0:29:35:80:48:9f:dc:fa:69:ed:a7:20:a2:
8b:72:e6:3d:91:70:c4:94:b0:f2:c0:35:e7:b0:b3:
1b:3d:b7:d9:b6:5d:f1:6c:57:d3:71:60:58:e8:a9:
3f:4a:19:3f:18:8e:13:18:2d:20:5b:1a:46:e8:33:
3e:5b:80:cb:c7:95:91:48:3d:3e:f0:13:12:e3:39:
2b:91:e5:c2:3d:89:47:d7:df:04:25:dc:68:b2:f4:
d5:0d:89:af:81:1a:12:06:72:4b:d5:6e:7e:77:2d:
fc:f6:65:f7:84:d0:6b:0f:c9:8a:3e:65:dd:1c:15:
da:1e:85:4f:b9:f1:0f:20:f7:91:93:70:28:34:f8:
4f:af:ff:e8:1f:5b:4c:68:ac:e2:2c:e0:73:c2:a0:
ab:91:46:99:a9:34:f4:2a:64:3f:a6:41:8b:43:82:
a8:b9:e4:31:f6:fb:21:eb:60:a1:2a:39:d4:6d:80:
ab:05:7e:e4:88:85:17:ac:65:a4:01:20:01:88:67:
73:33:2c:b2:1b:48:8f:61:ca:b6:2f:38:19:3a:90:
25:fb:e2:0a:c1:a4:58:19:cb:48:07:6d:05:ef:2d:
eb:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:41:9E:04:06:A5:2E:B6:A3:A2:9A:E7:50:5B:0C:97:CC:94:52:57
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:ef:54:0d:a7:62:83:cc:ba:9c:ac:12:ef:16:7e:66:80:33:
ae:51:62:8a:b9:94:44:b8:31:0e:02:f6:8b:62:b1:38:8b:2b:
c7:0b:d8:2a:0e:e7:ff:02:ce:cb:f4:54:87:3a:e0:a5:00:3f:
d1:e0:4f:a7:a9:39:7f:9b:c5:b3:f2:b4:75:17:5c:a7:f2:bc:
4b:15:95:51:f2:a8:18:1b:59:62:82:e3:3d:34:ab:3b:6c:cf:
c7:c5:03:5f:56:6d:6b:49:58:61:c1:71:ca:21:e7:b8:f0:ce:
60:52:72:80:5d:02:d3:77:7b:d6:50:bf:89:9f:98:2f:91:b8:
31:9f:f9:21:96:bf:9c:18:48:2d:0b:1a:97:df:e2:89:bc:65:
4d:96:25:42:67:8b:7d:99:86:7c:7c:56:44:93:92:8a:48:1a:
69:78:01:5e:ef:be:53:80:6f:a3:72:f5:ad:01:bc:5d:b1:06:
f4:0a:c5:b2:0e:00:84:11:e5:5d:ac:dc:98:1f:b9:05:66:ae:
95:7c:4d:4a:68:9f:c4:72:9b:28:0a:64:cb:c7:9c:61:b5:e3:
5c:2e:86:71:b0:d5:30:93:a2:dc:60:d3:92:06:e0:d2:41:9f:
99:6e:08:be:a5:c1:08:81:f6:39:76:96:77:40:c3:d3:94:27:
f5:81:77:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 08:18:18 2026 by rpki-client