Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier: C9/7XUo8OBHKnh6sZh+XM4oAjYx0t/InR3T3DgkfWmc=
Subject key identifier: 9E:30:C1:67:AD:2F:6D:08:12:87:8B:7D:DB:34:29:25:C7:35:5C:F8
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 019D2583CF080C78DC01D01B2D8221A97D57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number: 0C9B
Signing time: Wed 25 Mar 2026 15:01:28 +0000
Manifest this update: Wed 25 Mar 2026 15:01:28 +0000
Manifest next update: Thu 26 Mar 2026 15:01:28 +0000
Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: iFXe6dfmGRuh1GNJNB5yKocgydGe7VBt02Kk9otYEjk=)
2: T8qj0TqqRzvgZV6bToFz4c0FM-4.roa (hash: RUkC3kCoEXyWtFRshNXK5Ou2vFrdu7iWv96bVF4GwyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:cf:08:0c:78:dc:01:d0:1b:2d:82:21:a9:7d:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Mar 25 15:01:28 2026 GMT
Not After : Mar 26 15:01:28 2026 GMT
Subject: CN=9e30c167ad2f6d0812878b7ddb342925c7355cf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5a:f7:69:ee:07:38:6a:7c:de:d3:9a:52:ef:
e4:73:10:72:98:f7:4b:b6:61:a7:f7:b1:d7:35:a7:
5e:57:4e:11:ca:ae:64:cc:49:8b:90:27:9e:ac:f2:
03:84:a6:b1:86:1a:1e:41:12:dd:a6:89:64:5a:35:
a6:b5:9b:e4:f5:fc:44:4c:1f:d9:ff:f9:5d:83:d0:
7c:d0:20:d0:40:4c:8f:e1:f9:21:03:68:73:e0:d5:
72:2e:82:23:4f:15:1e:bc:37:b0:b9:50:cb:e2:be:
99:02:1b:a3:b9:3c:06:12:07:12:00:e2:6a:16:3b:
f6:13:e2:fa:fd:7c:72:e1:4c:25:50:95:94:de:e0:
6f:7e:ca:e4:ff:5c:a7:55:5f:4f:02:4f:41:58:df:
b7:4f:a5:91:be:96:0a:51:89:7b:48:83:63:87:02:
89:f8:a8:b8:77:de:6d:09:02:9c:f6:81:cd:a9:b2:
8b:b2:0f:73:ef:a2:4d:d3:e3:26:70:3a:98:fc:62:
cd:88:b0:6f:87:ad:6a:ce:97:76:39:eb:4e:b8:ef:
19:e3:aa:e4:ca:9e:0d:bb:68:4f:0c:37:b4:32:df:
b4:8e:f7:94:d4:8b:c6:58:58:b8:9a:76:db:d3:e5:
2a:15:64:7a:38:dc:3c:b0:ff:b3:4f:ad:8f:e3:71:
5e:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:30:C1:67:AD:2F:6D:08:12:87:8B:7D:DB:34:29:25:C7:35:5C:F8
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:dd:c4:b8:54:38:07:24:0f:bf:82:dd:dc:f3:63:b1:2b:40:
7f:83:46:a0:9d:a2:14:32:c9:54:4e:b3:fa:c4:b4:d0:fe:b3:
d7:b8:4f:d9:0c:cc:cb:fa:ac:f7:bb:e5:3b:37:62:f1:05:57:
0e:86:92:4a:1b:7b:fd:d3:ac:34:85:9c:12:c0:75:00:01:aa:
bf:61:77:5b:e2:1f:69:a7:76:ab:63:59:b9:7b:e9:c6:e2:77:
80:f3:04:b2:a9:ab:d8:37:04:23:cd:4b:41:7d:bc:b5:c4:7e:
21:ac:8e:72:8a:6c:95:b1:d7:0f:6d:3f:69:99:52:27:b7:fb:
ab:e0:ba:8b:8c:81:00:c7:6a:cf:7b:6b:3b:14:4f:9a:64:a9:
a6:f2:5b:a3:dd:d7:3b:6a:6b:81:a0:2b:f2:b5:f8:92:49:5c:
0c:70:f6:ca:3c:e9:f7:5b:a3:3b:87:64:63:27:58:ed:01:fb:
1a:2a:80:5f:48:a3:1e:88:18:70:e2:f0:29:6a:b1:fb:7c:59:
e0:94:1f:e7:81:84:9b:65:fe:d7:21:f9:7e:9e:3d:d5:86:7d:
1d:75:cb:b7:c8:de:44:34:44:85:7f:51:cd:07:af:74:a9:b3:
ac:39:0b:35:58:e3:a4:a1:4c:c6:ad:7c:1f:6f:e7:8b:17:f2:
e4:51:b4:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:44:00 2026 by rpki-client