Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier: oMxp2iT2dr7Qswds9ViWsmSy7lkLdX67MgkuFsq4gVQ=
Subject key identifier: DD:00:B3:16:32:65:68:1D:BC:31:05:6D:9F:4E:3D:B3:33:BC:60:1C
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial: 019D2A3B493DC8BF6FE84CD194B373CE977B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number: 1220
Signing time: Thu 26 Mar 2026 13:00:21 +0000
Manifest this update: Thu 26 Mar 2026 13:00:21 +0000
Manifest next update: Fri 27 Mar 2026 13:00:21 +0000
Files and hashes: 1: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: /kYw2Czt093d8Je1aZzFIzcP6QQdODj/sjDhOpnHwLQ=)
2: Ylv10vSg516VZiCHF-V4XQ_Q1lM.roa (hash: n4eisXfR10vCp8bRVZ+o+LnCZlLeQphgEpVjncPOq/M=)
3: taxylqt92XTRMNCLEumj-gGuc9E.roa (hash: 0T0KeKHGFppSjei5UxW0JsFkblLexOctRs4/cKSBPqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2a:3b:49:3d:c8:bf:6f:e8:4c:d1:94:b3:73:ce:97:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Validity
Not Before: Mar 26 13:00:21 2026 GMT
Not After : Mar 27 13:00:21 2026 GMT
Subject: CN=dd00b3163265681dbc31056d9f4e3db333bc601c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:af:d4:93:77:02:20:75:a6:df:50:31:69:3f:
38:9a:b8:c0:b2:ac:71:58:c6:7c:ea:a5:d0:6b:64:
0d:38:b9:b4:1a:b9:3c:f2:02:c3:84:1a:f4:ce:4c:
50:df:7d:94:f3:13:f6:e9:2f:dd:6a:d2:c9:8b:c3:
74:d0:cc:09:38:73:eb:98:45:f2:9a:40:3d:0d:e4:
c6:a0:c9:51:5d:7e:f1:c3:5e:74:b7:1a:f0:6d:1c:
05:30:fb:88:17:79:f0:2a:d9:ca:62:f8:ee:45:5f:
d3:f1:04:09:38:ab:fe:73:7e:11:04:47:96:f0:55:
86:d7:c9:5c:8d:4b:f6:3e:5c:5c:d6:e4:eb:4f:80:
ed:82:f1:7d:20:17:4e:bf:28:5e:1b:d2:3b:98:eb:
20:49:6c:a3:ec:5a:e5:84:96:3c:41:37:28:aa:41:
ed:90:4f:0d:da:0c:17:c9:0d:f5:54:0f:b9:64:18:
7e:4c:6b:f7:07:34:71:b9:cf:ba:a2:14:ac:71:93:
99:18:8d:8b:d4:f7:e5:60:83:f9:79:3c:ef:ca:d1:
68:fa:36:f6:9f:40:63:f0:b2:4b:78:44:d5:42:d7:
63:d3:fb:b7:77:49:86:cf:90:76:74:d1:37:90:06:
75:d3:57:13:26:bd:04:c4:f7:42:5d:6a:cf:6c:73:
a2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:00:B3:16:32:65:68:1D:BC:31:05:6D:9F:4E:3D:B3:33:BC:60:1C
X509v3 Authority Key Identifier:
keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:1a:da:d4:6a:0d:ae:80:5f:8d:24:79:93:81:df:b5:2a:b0:
11:c7:4c:78:d0:a8:8e:ee:1b:6e:3c:38:f4:c0:ed:2c:26:82:
14:46:6d:31:a8:f9:91:6f:d9:73:66:28:87:f6:07:5b:8c:b2:
52:a3:88:02:36:bc:eb:a1:5d:0f:a6:d1:45:b5:5d:f5:d4:05:
cc:3c:ef:74:0d:d8:b1:b1:7a:b8:c8:93:16:3b:b9:6c:9e:99:
a6:4d:fe:68:b9:92:e3:28:c6:83:eb:8e:6f:8f:35:3c:6e:40:
90:52:45:e6:26:a4:a5:5b:d0:fe:0c:de:2c:97:9d:41:df:cd:
48:98:64:b3:de:80:1d:64:46:78:b9:13:f0:fb:77:0d:3a:df:
53:1b:4b:1f:ce:5a:cc:b3:a9:18:e0:38:4f:40:f4:6e:c6:19:
55:3d:01:1c:1b:26:3e:df:a6:a5:79:2f:9a:43:f2:cc:6e:a3:
85:37:2d:51:8a:ca:cc:7c:7b:16:37:40:64:e8:1f:0d:fc:da:
e4:5c:7e:bf:7a:38:42:e4:1d:fa:19:98:b9:d7:bf:9f:19:5a:
cf:80:ff:04:94:ec:18:25:39:69:99:c5:f3:55:a0:b7:22:63:
27:f0:56:53:b7:4d:a4:77:b9:13:c2:41:38:32:92:10:4c:7c:
b5:79:0f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:32:31 2026 by rpki-client