Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier: /pF/6PSDoJm2+7lmavjI/DHBLDqxz5IWsbPkBnfwtBE=
Subject key identifier: 64:B2:37:DB:C6:B6:52:9A:6C:66:94:E9:65:3F:0F:76:B9:D9:35:EF
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 019D27043553B9803BECB9E877DF9A3CFFF5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number: 033C
Signing time: Wed 25 Mar 2026 22:01:20 +0000
Manifest this update: Wed 25 Mar 2026 22:01:20 +0000
Manifest next update: Thu 26 Mar 2026 22:01:20 +0000
Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: qUPt7O2OxIctVX3GahlolRWC1z1HnaCHG1jLhTkONpM=)
2: czKSPCCshe_dDSbHHG45r9I_rso.roa (hash: ZmpNSaMc8ilnubHI16mYkmGjrHKzVWSmxUhSzVqLWvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:04:35:53:b9:80:3b:ec:b9:e8:77:df:9a:3c:ff:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: Mar 25 22:01:20 2026 GMT
Not After : Mar 26 22:01:20 2026 GMT
Subject: CN=64b237dbc6b6529a6c6694e9653f0f76b9d935ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e2:ae:3b:74:c3:bb:bc:24:50:ff:87:ad:ae:
79:62:45:e6:f0:34:a5:24:e6:d2:64:15:4f:c5:85:
8f:33:e3:d0:0b:c4:54:86:6e:16:bc:02:61:a7:bd:
f3:08:55:2f:c0:fd:0f:5a:ea:84:56:3b:53:23:b1:
e8:d9:d4:09:e7:82:74:a5:0f:39:ab:68:44:fe:57:
2e:5a:a2:6b:2c:77:61:85:8e:8d:f1:1b:19:0e:9b:
c6:73:20:e5:9b:e4:f7:6b:8a:f1:eb:27:50:6a:c5:
2f:d5:9d:76:ae:6f:71:22:64:75:51:49:d8:4e:0a:
c6:04:1a:8b:ee:ed:df:86:37:71:56:63:ed:aa:ec:
84:50:5b:23:86:f1:48:74:2c:96:e1:5d:e0:1d:d7:
71:64:48:d9:ad:7f:96:20:e5:22:9d:bc:35:c1:34:
74:0b:f6:58:1f:97:07:cd:f2:4d:d5:d1:1f:07:ed:
4a:05:d5:44:aa:49:4f:0b:b1:3d:81:83:00:8b:67:
ea:0a:b1:24:a6:78:2d:e6:07:0e:af:fd:41:a2:26:
76:4e:19:5a:7f:7d:05:46:0e:d0:06:8d:8d:e6:33:
81:7c:62:d1:5a:93:78:1a:87:ad:5c:8e:41:a7:6f:
96:c6:20:71:93:20:ed:e6:8f:d6:b1:77:fa:94:0a:
76:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:B2:37:DB:C6:B6:52:9A:6C:66:94:E9:65:3F:0F:76:B9:D9:35:EF
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:e4:a4:7b:3f:17:a6:f4:49:0f:45:ed:18:08:42:2b:3b:2a:
9a:4e:57:d2:0c:a2:41:f2:ba:74:1a:92:ec:0d:e6:0a:ea:0d:
81:14:ae:66:bf:30:ec:55:29:04:bc:17:8c:0e:a9:74:65:c1:
03:ef:7b:e8:13:1a:61:96:e4:ad:cc:44:db:fc:14:6e:61:8a:
42:eb:83:d9:c3:b9:6d:23:8b:e9:51:0a:c4:23:0a:56:7d:7a:
54:67:16:c3:63:7b:c1:fe:8e:32:43:33:ff:3b:9b:8d:ee:ab:
dd:72:da:cc:d0:a4:c0:b3:e3:d4:d6:f4:37:db:b3:0f:0c:b1:
27:8b:9f:16:12:69:42:da:41:c1:a9:5e:fd:cd:6b:46:37:cb:
a0:37:27:f0:69:c0:fa:6d:87:61:c0:e4:8d:14:43:72:ce:c6:
4c:7e:44:fd:d4:26:2b:55:26:5d:2a:ce:5e:59:72:b6:93:91:
c4:c2:55:eb:bf:df:57:6d:40:b2:f5:cc:e8:b6:35:1b:9e:26:
c6:dd:aa:f8:c0:22:24:af:e8:4a:e2:74:66:58:43:a3:e8:1a:
0e:13:65:dc:c3:c3:4a:12:1a:ae:75:e7:16:15:f5:d1:80:7d:
12:25:10:8a:a3:c8:4c:02:29:0f:e6:09:c0:ce:44:89:3a:64:
73:11:8f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:59:53 2026 by rpki-client