Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: S6fYCWlvQMOmcxWsUIJMKcePfYZZIEywV9vT6wMknE0=
Subject key identifier: 55:D3:19:71:CC:F0:C9:24:0A:CC:41:27:C0:CC:41:16:38:20:31:97
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019D258429575FD80E2DF192C54DBD3F2674
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 127F
Signing time: Wed 25 Mar 2026 15:01:51 +0000
Manifest this update: Wed 25 Mar 2026 15:01:51 +0000
Manifest next update: Thu 26 Mar 2026 15:01:51 +0000
Files and hashes: 1: LA-wi6A11ya7LBdprms18TeIogg.roa (hash: mGJUSbaGKL8VGDPcuUd8EHQTcLMU3S2Uwe+tVWxibH8=)
2: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: g8uKZ4nP0tPqevyQHQieyqwhdSUdfY1syS0mQHNR4r8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:84:29:57:5f:d8:0e:2d:f1:92:c5:4d:bd:3f:26:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Mar 25 15:01:51 2026 GMT
Not After : Mar 26 15:01:51 2026 GMT
Subject: CN=55d31971ccf0c9240acc4127c0cc411638203197
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:82:a8:bc:23:9a:ee:3c:ae:1b:b0:e0:2a:17:
bb:2a:b0:b2:21:f2:fb:96:ec:fc:fd:38:cf:85:c8:
82:a3:60:43:5d:50:81:24:6d:72:90:40:95:01:41:
f8:95:1e:4b:d7:d1:d1:59:cb:1a:86:84:80:e8:6f:
b6:af:bb:78:8d:6a:0d:d0:f7:9d:7c:8e:18:a4:e0:
47:eb:05:e9:ad:10:c4:45:12:ef:87:a1:dd:69:78:
eb:5a:c7:27:3a:6a:7d:5c:05:2c:51:f6:0c:8c:da:
c0:90:9a:8c:e3:23:97:2b:96:02:11:aa:32:70:25:
01:9b:fb:14:d6:44:2e:91:8b:eb:7d:1e:17:55:d1:
6c:4f:c8:59:87:75:eb:bd:75:38:aa:ad:53:f3:74:
80:32:3d:45:d4:47:93:2b:29:e3:30:3b:e7:02:83:
4c:16:f1:91:22:a4:83:cf:e3:02:54:d4:55:cd:e8:
ac:a4:64:d5:0f:89:5e:63:44:59:f2:9e:2d:cc:59:
dd:80:f6:be:35:24:31:93:7d:2e:52:3d:23:d3:39:
1c:c6:84:9e:ef:10:09:ee:bf:7d:4e:45:8d:98:83:
29:f7:33:d9:c9:1e:a9:82:29:db:9d:b4:b6:b8:5c:
6b:dd:2c:a1:b1:73:32:ee:0a:7c:f7:45:29:f2:88:
9a:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D3:19:71:CC:F0:C9:24:0A:CC:41:27:C0:CC:41:16:38:20:31:97
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:59:36:6d:f6:39:c7:fc:4b:19:ae:df:0d:04:c3:27:0e:a4:
be:b4:6e:d3:84:6d:d8:db:15:ea:71:10:7d:58:f3:7b:1c:9d:
87:85:d2:fd:74:63:6e:cb:96:81:6c:ff:56:71:48:31:9c:df:
6c:80:f7:ab:36:5f:bd:99:52:f6:f0:ea:c5:42:b9:3b:a0:44:
f7:d4:3c:6c:b9:3a:48:c0:6a:ed:2e:8c:5b:6a:9a:27:74:7c:
d3:92:40:70:5b:03:a1:ea:13:0f:25:51:2f:94:0a:6a:3c:90:
5a:ee:f9:d0:18:be:31:fd:59:2a:ea:b2:51:a6:4c:60:d4:3c:
97:48:0b:28:32:ff:50:b7:8d:8f:aa:b3:bd:07:62:68:4b:e7:
78:23:6e:11:62:ef:f6:e8:47:56:59:86:e7:0d:70:14:88:5c:
05:33:7b:61:bd:24:50:61:36:42:9c:d2:ee:8f:78:d0:4b:7c:
c4:8b:89:6f:0c:71:d4:35:e3:08:77:ad:50:27:7e:20:02:81:
e1:47:94:04:c9:a2:45:f8:65:79:82:0f:51:10:ef:66:67:bc:
c9:a2:8c:e4:ea:ab:38:40:f9:c1:eb:33:5c:53:f9:77:61:f3:
5d:7d:f9:63:3c:6d:a1:9f:7a:74:d3:d6:7c:15:9e:a7:3b:4b:
f0:e2:16:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:36:50 2026 by rpki-client