Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: 0JxSBgrY7cU2i0DzWuhYLRRG4KZeDUBGTIEdS5l43sM=
Subject key identifier: 7B:2A:89:80:C0:B4:A0:1E:E0:B1:84:B9:13:19:76:BA:E4:B4:E0:85
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 019D27DFF28EE3ABE9B198876824F8CF526D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 1201
Signing time: Thu 26 Mar 2026 02:01:21 +0000
Manifest this update: Thu 26 Mar 2026 02:01:21 +0000
Manifest next update: Fri 27 Mar 2026 02:01:21 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: aANvHm8GpAoZ1qjqc/367ExrQxIPKWtX7RPlrqD+nGw=)
2: NIPM7aKL5uexVcL90KLAP5wDjZQ.roa (hash: 9ZYrM11j7nntBzeZqvmkRCiHqz1k+TWVJfFzgJNUNng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:df:f2:8e:e3:ab:e9:b1:98:87:68:24:f8:cf:52:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Mar 26 02:01:21 2026 GMT
Not After : Mar 27 02:01:21 2026 GMT
Subject: CN=7b2a8980c0b4a01ee0b184b9131976bae4b4e085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:fe:67:22:ab:d7:0d:f8:fc:0d:c2:fa:c7:f3:
65:65:e7:d8:e0:73:74:ec:4f:bb:bc:e5:a3:58:7d:
d5:3d:9c:9a:22:75:5f:8d:ec:84:7c:38:7b:c2:89:
33:f4:e3:41:08:6b:f0:cd:4a:bc:0b:09:0b:5a:32:
8b:aa:e2:48:df:d8:0d:cb:9a:d0:75:76:5c:24:38:
a1:40:21:f8:db:44:2e:f2:3c:71:97:b9:60:42:20:
c1:ee:a9:89:5f:1c:8a:3e:c5:6b:5f:2b:ac:1a:36:
4f:a6:0c:8f:e9:39:dc:00:6e:9e:8f:df:e3:10:4d:
04:17:36:57:1a:fc:76:b9:00:c5:78:8e:1f:80:a7:
5d:17:00:1e:6c:03:56:29:3e:53:70:89:6c:29:13:
ba:fa:75:a6:01:81:36:94:a5:df:9e:72:8a:34:b0:
17:95:b6:84:16:c1:70:72:0e:6a:8b:5d:c4:90:e0:
b3:22:4b:7d:57:27:f2:ae:91:27:8f:b8:bb:ac:21:
4b:e2:a2:2f:ef:5f:61:b4:59:25:d5:04:5c:2e:b3:
63:bf:74:f5:f4:ca:dd:db:0c:18:08:51:eb:61:a3:
b3:94:95:2f:2f:11:21:f2:14:02:4a:d2:46:32:fb:
f2:f5:50:af:65:09:29:8d:74:e4:8d:9c:e3:66:33:
5b:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:2A:89:80:C0:B4:A0:1E:E0:B1:84:B9:13:19:76:BA:E4:B4:E0:85
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:2b:84:81:4f:03:b4:c7:3d:d3:29:7a:91:ab:2b:2e:e1:4c:
5d:3f:5b:ed:c0:40:12:57:3d:4b:52:5a:c1:a5:b8:d6:5a:f6:
b7:33:c1:e3:bf:7b:83:7e:55:8e:bc:2e:96:a7:ee:9d:af:15:
59:63:35:9c:3a:07:de:28:05:e5:83:3d:41:24:e1:5c:04:8b:
9c:cd:39:d4:d6:dd:a8:6d:da:96:4d:b7:eb:9c:7b:ab:2c:44:
de:1a:bd:32:7c:4b:b6:11:34:23:c6:ed:cb:90:59:3f:b5:d6:
4f:ed:d2:82:84:de:f3:58:8b:a1:f8:e5:46:83:4d:55:8d:93:
f5:69:6b:c4:ac:0d:77:21:71:aa:73:cb:33:a7:83:20:6e:d3:
60:f7:38:e5:42:ad:66:d1:0f:b9:07:38:b1:92:2d:93:fc:31:
9f:97:de:07:65:a5:04:22:ac:fa:67:fa:be:2e:94:a9:62:01:
0f:0f:bd:a2:fe:2d:29:be:19:d8:70:b3:09:93:c1:a4:81:01:
a0:37:51:e9:4f:ac:bc:9e:b7:e8:6d:fe:5b:a8:65:10:76:6e:
3b:b4:93:f2:ea:ba:19:32:e5:5c:78:93:95:4d:27:09:42:42:
ef:1d:03:35:11:c3:aa:5a:e1:16:c8:21:bc:e4:43:7c:a2:fa:
2b:cd:f2:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:52:11 2026 by rpki-client