Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: /PxooqJjyX7xZF5W3YwOHSVe8aNEGmDEk9aM3hfSAQ8=
Subject key identifier: E3:94:F4:11:42:CD:79:02:20:C2:C3:1E:78:83:AA:DE:7A:B5:8D:9C
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019D27046C330E5C0898AE9797EA741312CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 15D2
Signing time: Wed 25 Mar 2026 22:01:34 +0000
Manifest this update: Wed 25 Mar 2026 22:01:34 +0000
Manifest next update: Thu 26 Mar 2026 22:01:34 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: yfnwQXE4O+sBUW87Vd/IKzqQXPiTLsMf8w/qvfMdcXE=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:6c:33:0e:5c:08:98:ae:97:97:ea:74:13:12:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Mar 25 22:01:34 2026 GMT
Not After : Mar 26 22:01:34 2026 GMT
Subject: CN=e394f41142cd790220c2c31e7883aade7ab58d9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:48:2c:1e:ee:c7:54:fc:67:03:6e:d9:6c:2d:
67:2d:8c:40:32:52:7d:22:c3:51:ea:ee:18:7a:c0:
b3:79:20:bb:c9:07:1f:07:ea:37:12:dc:dc:e8:62:
de:a9:2d:1c:97:eb:82:ca:19:db:56:bc:44:c9:c9:
69:e1:51:b6:d3:a7:18:70:a1:19:10:36:99:83:52:
51:7b:fd:e5:45:dc:ae:d1:56:70:1b:aa:b1:28:46:
75:fc:1c:f3:b3:4e:0a:18:51:62:ce:b7:7c:0c:66:
ea:9b:5b:b1:21:c5:36:d4:db:bd:6d:8f:12:14:f7:
c9:14:08:8f:bb:e1:78:63:00:21:be:e0:d1:f0:c7:
6e:cb:2e:26:a0:22:53:6d:67:95:0c:ad:10:41:3a:
b3:33:1c:8a:70:0e:bf:f5:2c:a4:1b:ab:23:e9:5d:
7a:1b:dc:80:3a:59:ad:f7:50:5f:94:52:03:2a:eb:
cf:aa:89:00:c0:85:b6:88:92:ec:74:ad:d1:6f:ea:
97:49:30:df:1d:e1:0d:24:85:ba:00:5e:69:4d:33:
cc:65:e6:8f:39:fc:df:0b:bf:b7:8a:7b:aa:4f:ea:
73:2e:6b:05:e1:46:80:97:2f:b2:ec:14:6b:f0:37:
3b:a8:42:00:03:de:8c:85:20:9c:c6:a9:26:d7:ae:
2a:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:94:F4:11:42:CD:79:02:20:C2:C3:1E:78:83:AA:DE:7A:B5:8D:9C
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:60:23:1a:ec:35:67:5d:76:88:4e:71:ae:05:2d:01:7f:b6:
50:08:af:8e:c9:b7:2a:f8:bf:f4:2d:e2:1f:ba:78:3f:8a:7c:
cd:c3:91:4c:94:aa:45:68:96:c3:6e:d5:07:54:b9:24:e1:37:
da:26:ea:2c:e5:2a:83:db:65:ce:00:18:d1:06:62:d5:42:50:
30:d4:59:e0:5f:7b:7b:ae:e0:40:9f:e5:26:f0:24:0c:1a:ea:
2b:60:eb:77:c0:6c:8f:2b:b0:87:a4:d0:f4:8b:6c:56:94:45:
2e:a9:24:fe:2f:67:87:38:a5:f9:9e:77:e2:48:aa:e0:b5:3a:
89:57:37:ed:8c:17:40:ae:a5:f8:f2:1e:75:bf:e1:99:17:c8:
87:7a:69:c5:cf:21:97:35:8c:53:af:18:da:19:a6:ed:f6:52:
bb:8f:ed:94:6b:d3:97:40:a7:e1:06:5a:46:ef:d6:00:a2:d3:
20:03:d7:d5:6a:e3:9f:f8:ac:73:df:bc:70:db:de:3b:43:d1:
f2:2a:5d:e1:a5:38:57:23:04:13:71:4e:4a:ef:81:68:1b:9e:
73:24:66:44:e4:53:2c:99:10:2c:37:5c:a0:a8:16:76:7f:d8:
77:49:25:9e:8e:fe:42:41:7c:7c:78:eb:c5:06:59:59:2d:f5:
d9:dd:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:21:21 2026 by rpki-client