Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: c8aiVYUNP1i03TwE42vd+6V43Cb7S7zXE5YTQoIH1zU=
Subject key identifier: 4B:3E:E0:EF:07:67:E8:27:47:6C:43:6C:18:EA:37:CB:19:5B:22:F3
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 019D29CDD263B9C1ACE3F11001670B1B61F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0F33
Signing time: Thu 26 Mar 2026 11:00:47 +0000
Manifest this update: Thu 26 Mar 2026 11:00:47 +0000
Manifest next update: Fri 27 Mar 2026 11:00:47 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: Vv0afsIBz9fdkWYLfazmZY06CjKBAVZY7DE4MKhscTw=)
2: gXm46Hmm-qTO4hodxrSof3TLiNM.roa (hash: xq/l2oyKL3r2u7cjQoxp//Kygz431FReQyIA4fXa0hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:cd:d2:63:b9:c1:ac:e3:f1:10:01:67:0b:1b:61:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Mar 26 11:00:47 2026 GMT
Not After : Mar 27 11:00:47 2026 GMT
Subject: CN=4b3ee0ef0767e827476c436c18ea37cb195b22f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:31:f6:64:20:27:a5:f6:61:70:08:63:70:
8c:35:8a:3c:a8:7a:a2:8e:54:04:5f:d2:b1:50:7d:
16:df:36:9c:c4:22:64:78:75:60:2c:ba:fd:5a:5f:
8d:8d:63:78:f2:30:e1:4c:3e:2a:70:4d:a3:41:da:
ba:d0:e4:98:64:f9:0e:1e:20:51:a1:6b:f6:45:f9:
6b:44:17:6c:71:c6:36:95:d1:cb:df:13:dc:91:9a:
c4:59:86:ad:14:ca:48:85:9e:64:f4:b9:ca:c5:75:
66:77:e7:eb:92:04:43:3b:40:69:9a:e2:7e:a3:8b:
23:be:8e:dc:df:df:a3:6f:e5:dd:ea:aa:d8:b2:56:
f9:39:c8:0e:c4:77:51:85:93:4e:ce:c2:23:fb:c4:
1b:b5:28:56:ea:d6:e8:c0:6f:29:e6:a3:05:f3:88:
ed:84:0b:da:c9:c7:31:9b:f3:2f:a0:c0:14:25:1b:
df:41:1c:d1:99:d4:1e:26:ed:67:ee:d9:c3:3c:f3:
22:d8:74:22:6a:5b:5a:56:ec:af:02:a4:b6:af:b6:
78:fb:50:d3:79:61:62:9c:54:a8:2e:21:5b:83:2f:
58:cb:6e:1a:8f:aa:93:32:28:87:33:41:12:7c:d3:
7c:be:f3:7b:63:5d:c3:86:2e:17:8f:da:69:44:cf:
39:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:3E:E0:EF:07:67:E8:27:47:6C:43:6C:18:EA:37:CB:19:5B:22:F3
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:03:f8:58:7c:eb:b0:25:e8:bf:94:8e:d2:32:dc:d5:c9:c4:
ff:57:6b:3b:25:f3:65:c5:0a:7d:06:9b:38:2e:7e:27:f1:8b:
d1:2c:c1:bc:a9:a3:28:e7:42:97:81:18:06:83:8d:d7:ef:d9:
f7:d6:d8:46:53:14:ed:16:d3:4b:59:42:87:e9:48:67:cf:0b:
06:1e:1f:78:0f:38:97:11:17:ee:32:62:af:b7:f4:da:2b:be:
b0:52:82:fc:5e:14:fd:60:4a:b0:a8:b0:19:da:3b:27:49:4f:
41:a7:e1:5d:e3:11:2e:98:56:1e:1b:b3:73:b4:09:24:3d:91:
6c:dc:fe:d3:3e:92:3d:26:80:ce:86:ca:e0:d5:52:71:03:5d:
0a:39:dc:ed:35:ea:5b:2d:1a:70:43:83:89:2d:db:0c:66:f7:
42:fd:81:5e:45:ff:6d:ee:93:c0:89:27:56:bd:d4:0c:86:18:
c3:aa:5d:35:82:cc:10:d7:0c:fc:e9:54:88:69:2f:77:db:03:
94:6a:6a:a3:12:dc:3e:bd:be:51:38:99:ad:4c:cc:05:1d:2b:
b2:bb:c9:fd:59:79:db:91:7d:a5:59:7f:6e:4f:e4:89:95:17:
61:1f:7a:33:10:0d:05:43:81:99:0f:76:5d:24:e8:c2:9f:fc:
09:a4:02:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:48:03 2026 by rpki-client