Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: CycLJYLMp+tjylGBbbFlFqiZ9daef9SfQrN5Fx3MksU=
Subject key identifier: 37:A3:C3:3D:09:7C:FD:6A:71:03:C8:4F:23:B6:55:3D:2F:A4:19:BA
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019D29974A3F3AA1C28E220F7667B0975DC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 083F
Signing time: Thu 26 Mar 2026 10:01:13 +0000
Manifest this update: Thu 26 Mar 2026 10:01:13 +0000
Manifest next update: Fri 27 Mar 2026 10:01:13 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: ACOBJmYFjn6F5S3SitkKXDe2pHvhBu/CEQuGiB5M7DQ=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 10:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:4a:3f:3a:a1:c2:8e:22:0f:76:67:b0:97:5d:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Mar 26 10:01:13 2026 GMT
Not After : Mar 27 10:01:13 2026 GMT
Subject: CN=37a3c33d097cfd6a7103c84f23b6553d2fa419ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:a7:44:7f:63:10:50:f0:e4:f8:37:18:8e:4c:
c1:d5:51:2e:33:2e:d3:7c:62:55:d9:0a:61:c7:21:
7d:97:d3:7f:8f:d7:dd:12:23:81:44:5a:9c:7c:05:
9c:08:ea:df:54:df:84:77:0e:e3:c4:a5:c5:a9:ca:
84:0e:e3:e9:31:3b:fa:0a:0a:4d:74:cf:35:57:db:
ac:d6:f4:93:b5:f2:f4:82:bc:8e:63:73:ce:bb:24:
29:18:74:9a:61:a7:6d:45:30:29:ef:3e:c7:74:06:
56:3c:39:41:cf:83:4f:1e:5b:fc:0b:a3:b7:88:7a:
a9:1e:2b:70:65:9e:23:45:f5:3e:d4:7a:75:e8:ca:
51:31:4d:60:87:b4:4c:c4:c0:91:cc:f7:1f:9f:61:
a8:10:a0:59:85:b5:1d:67:d5:81:28:f2:f0:29:ad:
2b:71:ef:88:5e:18:49:7c:81:16:46:42:2a:d2:2f:
58:ca:a3:c3:be:06:6e:86:da:ec:30:48:ed:9d:f7:
94:46:a4:84:12:04:8d:a9:52:bd:63:49:24:10:f1:
89:31:92:a9:5d:e3:62:02:b1:d7:8e:25:69:e7:4b:
56:4b:30:82:d4:3b:ea:03:1e:a1:d4:67:7c:ae:92:
7d:58:8e:57:15:90:3b:f5:67:46:20:07:a9:6b:e6:
49:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:A3:C3:3D:09:7C:FD:6A:71:03:C8:4F:23:B6:55:3D:2F:A4:19:BA
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:f5:f4:6a:b0:3a:53:51:13:f9:38:50:36:98:52:a0:53:d6:
40:8a:5c:32:4f:6a:49:1c:4d:f9:d1:c8:0b:e5:9b:e6:57:27:
44:ea:a3:96:45:37:f3:6a:f1:f6:33:7d:40:a0:b6:52:28:de:
a4:4b:1f:a2:75:5f:68:10:7c:77:2a:0f:a4:1f:ec:3a:53:c6:
50:bb:93:67:9c:03:04:b7:c1:22:d2:4a:69:cb:aa:31:1c:a5:
3f:35:c6:d9:ac:96:3d:ad:f1:8e:f9:bf:ac:07:2c:2d:e2:bc:
45:a5:17:55:1c:b5:bd:45:8a:b9:54:d6:29:43:01:75:54:35:
e9:17:8d:b9:d7:3f:a0:54:20:24:be:57:74:a0:7b:8a:3d:80:
fa:4f:b5:0e:ce:17:9d:98:34:81:5a:08:d5:cd:c3:07:22:f4:
1a:b5:5f:82:40:31:78:5d:5c:01:fb:4e:bb:3e:68:f8:55:49:
d7:1b:d8:a6:3c:e6:85:06:f4:16:53:c7:dc:98:22:84:3c:e9:
ca:cc:31:ba:9a:ec:bd:c3:da:61:fe:e5:aa:59:23:08:e4:03:
45:2c:90:46:44:3a:84:f0:a9:92:ce:cf:6d:79:8c:87:b3:8d:
ac:ae:b7:2b:cf:b9:1e:ce:8d:be:f0:35:3c:f1:e8:c5:c8:ba:
18:93:d6:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:26:47 2026 by rpki-client