Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier: PPrG+fedKHpeGLs8ZQ9OaBQgnqxDvb3S4bVM7f3aMQI=
Subject key identifier: 8E:A6:15:94:B7:D9:FD:57:D1:3B:F6:F7:03:67:75:20:3A:6E:D0:AC
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial: 019D27A8A56FDC4D2DAE396D6C74B68C1238
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number: 146A
Signing time: Thu 26 Mar 2026 01:00:56 +0000
Manifest this update: Thu 26 Mar 2026 01:00:56 +0000
Manifest next update: Fri 27 Mar 2026 01:00:56 +0000
Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: bn4DtInAIsFqJ0T3ES4FABkmV7mkWh7pEb02AEay6oo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:a5:6f:dc:4d:2d:ae:39:6d:6c:74:b6:8c:12:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
Validity
Not Before: Mar 26 01:00:56 2026 GMT
Not After : Mar 27 01:00:56 2026 GMT
Subject: CN=8ea61594b7d9fd57d13bf6f7036775203a6ed0ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:fd:1f:f2:99:23:7b:17:a6:e7:01:f7:5a:d6:
dc:95:29:de:18:06:fd:0c:ff:b9:a7:fe:a7:aa:6f:
31:af:e9:fe:e0:2b:da:b4:51:d5:cc:27:40:e3:5b:
dd:c3:89:9e:68:12:9a:c1:91:53:58:96:45:7f:e3:
62:e0:e5:20:14:8e:a7:24:e8:82:1e:18:70:d8:80:
45:cb:c2:bd:79:97:6c:37:3f:02:37:f0:e7:d3:c9:
86:9c:9a:cb:48:0e:07:85:3f:5b:45:f8:dd:89:a7:
a6:d0:3c:34:81:0a:fe:d7:a4:33:93:7c:56:2a:7f:
62:a8:ba:0e:b0:44:d6:74:25:5b:fb:04:ae:c4:93:
95:9d:4d:59:14:46:08:07:ff:3c:1c:78:3c:23:dd:
be:24:fd:fc:1e:c2:18:e4:74:06:d7:66:7d:fd:f5:
cd:f2:83:62:5a:dc:7a:84:5e:e2:9f:c9:e7:41:b8:
17:4a:71:bb:17:be:7a:98:b7:fa:99:6b:1c:1d:0f:
b6:8a:7f:ea:df:b0:cd:8c:79:ac:20:6a:51:c2:bd:
7c:87:d6:09:da:a9:e1:0a:2f:b5:48:ac:65:9f:73:
82:5b:33:ac:2b:58:3b:a8:5f:74:63:88:1b:26:d6:
9a:4b:0d:12:7b:35:a8:ce:97:1a:77:c8:93:3a:5a:
4c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:A6:15:94:B7:D9:FD:57:D1:3B:F6:F7:03:67:75:20:3A:6E:D0:AC
X509v3 Authority Key Identifier:
keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:9c:6b:f3:39:f7:0e:a3:11:07:ae:fe:9b:db:7f:4a:df:48:
e1:ea:1b:ec:25:44:7f:95:e3:67:34:47:bc:7b:d0:04:ce:e5:
c3:9f:f2:1c:43:52:98:66:1d:35:61:e7:5a:5a:47:74:63:54:
b4:6c:91:1c:ce:26:c2:fb:ec:f3:bc:1d:93:82:85:06:4f:be:
82:65:83:eb:75:c7:3b:3c:bf:9d:44:42:4e:04:2c:0c:28:6d:
2a:78:55:d3:60:23:62:90:b9:4e:48:08:2e:f0:9e:ac:38:00:
1f:a2:ac:61:bf:49:7e:55:d2:00:6c:37:df:61:13:04:3e:2d:
b0:7f:ba:94:92:f8:e6:76:12:60:2b:cf:b1:2a:36:45:c6:b7:
d8:b0:92:fd:2b:c9:d0:29:b0:28:45:96:16:60:44:f0:16:f0:
85:fb:3a:2b:a9:5e:8b:15:b4:66:1b:94:fb:d5:50:ad:6d:b1:
e8:ad:51:45:fd:f5:60:df:b4:e5:44:0d:14:22:56:8c:28:0f:
57:3c:5b:fe:ec:44:f3:60:4b:43:84:05:a7:c1:26:36:d8:c7:
0b:2f:39:f4:c2:61:72:30:71:3f:29:bd:92:c0:0b:ac:40:ee:
84:31:88:77:5a:d4:0b:de:47:83:e4:d4:ea:72:12:cf:05:be:
b3:f6:eb:29
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0nqKVv3E0trjltbHS2jBI4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NDA4M2FmMGZmZjE3NjhhMDdjNjU1ZjFmZTM4NjAwOWM1
MjJjY2YwHhcNMjYwMzI2MDEwMDU2WhcNMjYwMzI3MDEwMDU2WjAzMTEwLwYDVQQD
Eyg4ZWE2MTU5NGI3ZDlmZDU3ZDEzYmY2ZjcwMzY3NzUyMDNhNmVkMGFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjP0f8pkjexem5wH3WtbclSneGAb9
DP+5p/6nqm8xr+n+4CvatFHVzCdA41vdw4meaBKawZFTWJZFf+Ni4OUgFI6nJOiC
Hhhw2IBFy8K9eZdsNz8CN/Dn08mGnJrLSA4HhT9bRfjdiaem0Dw0gQr+16Qzk3xW
Kn9iqLoOsETWdCVb+wSuxJOVnU1ZFEYIB/88HHg8I92+JP38HsIY5HQG12Z9/fXN
8oNiWtx6hF7in8nnQbgXSnG7F756mLf6mWscHQ+2in/q37DNjHmsIGpRwr18h9YJ
2qnhCi+1SKxln3OCWzOsK1g7qF90Y4gbJtaaSw0SezWozpcad8iTOlpM6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6mFZS32f1X0Tv29wNndSA6btCsMB8GA1UdIwQY
MBaAFDdAg68P/xdooHxlXx/jhgCcUizPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMt
ZTRjYTZiNzNhYzc2LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy84M2FhNDctYzdmYi00ZTA1LTlmYWMtZTRjYTZiNzNhYzc2
LzEvTjBDRHJ3X19GMmlnZkdWZkgtT0dBSnhTTE04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWJxr8zn3
DqMRB67+m9t/St9I4eob7CVEf5XjZzRHvHvQBM7lw5/yHENSmGYdNWHnWlpHdGNU
tGyRHM4mwvvs87wdk4KFBk++gmWD63XHOzy/nURCTgQsDChtKnhV02AjYpC5TkgI
LvCerDgAH6KsYb9JflXSAGw332ETBD4tsH+6lJL45nYSYCvPsSo2Rca32LCS/SvJ
0CmwKEWWFmBE8Bbwhfs6K6leixW0ZhuU+9VQrW2x6K1RRf31YN+05UQNFCJWjCgP
Vzxb/uxE82BLQ4QFp8EmNtjHCy859MJhcjBxPym9ksALrEDuhDGId1rUC95Hg+TU
6nISzwW+s/brKQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:14:25 2026 by rpki-client