Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: WIzGChFNYWOAp3HhIii/+pGpW/CNVKHwkMAhw3IqaVI=
Subject key identifier: 95:C3:2F:07:B2:5F:75:12:2E:0B:71:40:94:2F:AD:D0:C6:75:C9:3F
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019D27E07C195BF5E76917DB234F83746358
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 02:01:56 +0000
Manifest this update: Thu 26 Mar 2026 02:01:56 +0000
Manifest next update: Fri 27 Mar 2026 02:01:56 +0000
Files and hashes: 1: 9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa (hash: WVuRHrOmlMS6ytXr2Z+ySWU/cHgaZovcwRctB5udkTE=)
2: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: I9UDlPG/URWMkr8Q60IRsdtr8pcVZCD5aZ0F32k5JGo=)
3: jcwqdhirBap47K8I2f73LhbiMrI.roa (hash: 92nuQiH7pyqjL/L1oEYcoXAA6/cRc3pynOqbszSmmCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:e0:7c:19:5b:f5:e7:69:17:db:23:4f:83:74:63:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Mar 26 02:01:56 2026 GMT
Not After : Mar 27 02:01:56 2026 GMT
Subject: CN=95c32f07b25f75122e0b7140942fadd0c675c93f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:e9:34:be:ab:2c:c4:f6:2b:eb:cb:76:b5:6a:
03:6a:2c:9d:7e:63:40:42:23:54:0c:93:30:6f:50:
7a:bf:21:96:94:b3:22:ae:2a:53:2f:0f:c4:5a:15:
22:b5:8c:39:71:7b:16:f0:97:4d:2b:e5:c9:7b:e5:
a8:2e:78:97:b8:56:06:2b:4a:36:aa:27:fb:ca:c6:
f2:14:a0:ba:ed:62:03:43:15:d1:68:50:3d:b4:02:
5e:c2:c5:e1:e2:78:0c:7a:6f:6e:54:44:bd:91:d4:
79:e1:26:0b:45:18:8e:69:19:5e:cf:9d:c3:b1:04:
4d:9c:3b:89:25:89:d4:27:d0:de:dc:b9:29:18:e9:
1b:b7:24:3f:04:65:8e:e7:68:fe:2b:79:e8:05:cb:
23:62:bc:3f:c1:35:b6:41:48:b4:72:6e:a1:3a:a9:
22:4c:03:76:5c:51:a5:3c:ad:c9:f0:6a:fd:53:cb:
89:20:83:60:8e:85:a6:51:34:c5:af:eb:b4:4d:38:
90:10:96:10:77:b2:94:0c:e2:c5:32:41:88:64:c9:
8c:fa:43:56:02:1c:52:f5:4d:8b:18:33:e3:a7:0f:
2e:e5:bb:3e:78:d7:b8:55:07:58:d2:7c:87:b1:ba:
64:06:29:ca:b2:d3:82:31:f1:db:2e:0d:5b:0e:27:
99:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:C3:2F:07:B2:5F:75:12:2E:0B:71:40:94:2F:AD:D0:C6:75:C9:3F
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:23:19:46:3a:fd:bb:c8:7f:9a:b3:90:0c:94:9b:29:5f:11:
1b:ad:e2:a6:54:05:e6:15:b2:c2:e8:34:df:df:11:d7:76:82:
48:c4:f2:cc:c5:8e:e1:57:d9:6f:1f:6d:1a:ad:44:b9:8d:9b:
e3:88:7a:f4:36:10:aa:6d:b6:1a:82:ca:3c:e4:4c:2e:f6:46:
d7:34:30:9d:9a:6a:03:fa:de:68:df:cc:d8:21:46:a3:75:bc:
30:f4:44:f7:28:71:5a:b3:9a:0f:d5:e2:d5:7e:23:f7:63:b7:
e7:b0:c6:ce:c7:fa:10:9b:c1:a0:f6:e8:70:b2:ff:bd:80:72:
f3:8b:2b:d9:43:d8:46:68:ad:fa:dc:22:26:7d:19:80:44:eb:
57:62:65:f8:56:69:2a:54:b2:d2:96:ca:86:48:cb:81:4f:9c:
3a:10:f2:de:e7:12:09:c2:f9:52:18:86:51:ad:a5:fe:0d:9b:
35:0d:34:e3:d5:ab:d7:eb:d8:cd:0b:14:6d:71:f0:1e:5d:7d:
02:53:5e:f1:9e:8a:09:96:a3:b6:59:ec:89:c0:e1:53:5c:6a:
6b:17:c9:ac:c7:4e:87:ba:61:0a:33:32:9f:29:f0:63:f9:be:
42:88:dc:7e:9d:91:12:f7:20:76:0b:a2:38:b1:88:37:ec:a7:
0a:3b:e3:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0n4HwZW/XnaRfbI0+DdGNYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3
YjQ0MzgwHhcNMjYwMzI2MDIwMTU2WhcNMjYwMzI3MDIwMTU2WjAzMTEwLwYDVQQD
Eyg5NWMzMmYwN2IyNWY3NTEyMmUwYjcxNDA5NDJmYWRkMGM2NzVjOTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5ek0vqssxPYr68t2tWoDaiydfmNA
QiNUDJMwb1B6vyGWlLMiripTLw/EWhUitYw5cXsW8JdNK+XJe+WoLniXuFYGK0o2
qif7ysbyFKC67WIDQxXRaFA9tAJewsXh4ngMem9uVES9kdR54SYLRRiOaRlez53D
sQRNnDuJJYnUJ9De3LkpGOkbtyQ/BGWO52j+K3noBcsjYrw/wTW2QUi0cm6hOqki
TAN2XFGlPK3J8Gr9U8uJIINgjoWmUTTFr+u0TTiQEJYQd7KUDOLFMkGIZMmM+kNW
AhxS9U2LGDPjpw8u5bs+eNe4VQdY0nyHsbpkBinKstOCMfHbLg1bDieZswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXDLweyX3USLgtxQJQvrdDGdck/MB8GA1UdIwQY
MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct
ZjQ0MTY2YmIyZGIwLzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw
LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZyMZRjr9
u8h/mrOQDJSbKV8RG63iplQF5hWywug0398R13aCSMTyzMWO4VfZbx9tGq1EuY2b
44h69DYQqm22GoLKPORMLvZG1zQwnZpqA/reaN/M2CFGo3W8MPRE9yhxWrOaD9Xi
1X4j92O357DGzsf6EJvBoPbocLL/vYBy84sr2UPYRmit+twiJn0ZgETrV2Jl+FZp
KlSy0pbKhkjLgU+cOhDy3ucSCcL5UhiGUa2l/g2bNQ0049Wr1+vYzQsUbXHwHl19
AlNe8Z6KCZajtlnsicDhU1xqaxfJrMdOh7phCjMynynwY/m+Qojcfp2REvcgdgui
OLGIN+ynCjvjqA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:34:49 2026 by rpki-client