Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: RlNKoVWwdyHCvvQ1HawrTpNnr2gkiv1p5WjcUEiifio=
Subject key identifier: 82:CF:8A:1D:FB:9E:A6:D2:47:06:8B:F3:3C:00:1D:6B:41:49:88:D9
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 019D27A9391D0D39A06F398382CEED5BE2B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:34 +0000
Manifest this update: Thu 26 Mar 2026 01:01:34 +0000
Manifest next update: Fri 27 Mar 2026 01:01:34 +0000
Files and hashes: 1: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: jt65YOD5nmUtKYeEbVWJq3TkYwTHyRj6/cE70O5Tgd8=)
2: NRr2xnrc8q3h4uFkXN71z-KKA3E.roa (hash: P9SGhc4Yfp9gNj6Hs6UJwSGYWBkDoeITgWd2bUYfBvw=)
3: q8LLAWsYj15dDU4uGxTr8uDvbqE.roa (hash: +TDQWUOOqKp5vb78QVJ0zxHTWhdeGR0lnx+TBsmkF48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a9:39:1d:0d:39:a0:6f:39:83:82:ce:ed:5b:e2:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Mar 26 01:01:34 2026 GMT
Not After : Mar 27 01:01:34 2026 GMT
Subject: CN=82cf8a1dfb9ea6d247068bf33c001d6b414988d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:17:5d:63:8e:5a:5f:d8:04:35:f2:60:7c:9c:
5c:de:1d:95:8c:38:43:33:69:16:ce:a6:5a:79:5c:
0d:f8:67:80:b5:fa:5c:f1:7a:a9:b7:b5:36:05:67:
70:47:60:98:46:cb:67:69:d7:fd:ab:20:db:78:c5:
84:8d:59:9d:23:ad:70:18:9f:15:21:c0:44:1a:ed:
65:91:71:47:94:2c:a6:11:43:73:fe:7f:2d:76:68:
06:ff:5a:10:18:53:f0:d4:3e:0f:8f:e8:a6:3d:bb:
5f:53:3d:bb:df:91:42:b4:21:3b:a0:91:10:9f:71:
c9:87:da:dd:e2:40:2d:91:5f:8f:c7:58:56:59:a6:
4f:b3:fc:ed:f1:d0:54:14:c1:1b:6d:4c:1e:14:17:
68:9b:31:bf:68:42:b6:e3:3d:af:72:49:54:80:3d:
5d:a3:68:9f:13:de:d7:7f:41:07:6d:45:f8:69:85:
01:4c:99:a3:48:54:3d:a9:9d:60:00:f0:ea:67:b1:
b3:30:7d:70:aa:f7:d7:75:8b:2c:d6:6c:9d:6a:17:
4b:23:4c:e0:95:1c:73:c6:d3:aa:7c:15:f8:b0:45:
39:86:03:ba:6a:6f:6b:f8:68:aa:48:e5:7d:82:e0:
f2:85:01:3a:a2:84:ab:86:a1:9c:42:81:c7:56:62:
52:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CF:8A:1D:FB:9E:A6:D2:47:06:8B:F3:3C:00:1D:6B:41:49:88:D9
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:05:90:4a:d1:05:9a:39:08:25:f8:3b:64:1a:4d:46:29:87:
be:f3:f2:89:53:69:7e:b4:9b:38:70:8c:1c:63:d3:bd:31:00:
ff:bf:e9:ab:a4:3d:da:6a:e3:79:2d:86:86:47:85:f3:c7:37:
a7:cf:a5:36:67:8f:91:23:2d:39:1f:5f:ce:c1:1a:ff:1f:9c:
84:cd:0d:52:71:24:2a:cc:80:c8:5d:cc:f7:96:c8:01:f2:fd:
da:f8:7b:9e:74:a5:e5:30:14:a4:6a:0f:81:6b:7c:4e:89:8d:
01:85:72:01:42:fd:cd:ff:a9:b7:72:b0:2b:4a:af:32:a2:f2:
b5:6e:1a:10:2a:b1:a5:fc:73:30:69:75:76:8f:c3:ba:00:03:
ca:da:0d:4f:3a:55:ef:8a:b1:8d:8e:16:8d:54:52:99:19:36:
68:bf:2e:89:5a:e8:85:9f:6e:85:46:ab:8d:b1:2c:94:68:3b:
e1:bf:42:84:b9:af:08:51:b4:11:28:d1:2e:87:67:3e:fa:c4:
37:a4:74:d7:6f:a9:61:f9:74:03:1d:42:40:40:5d:56:20:bb:
e1:0b:5f:39:fa:bc:25:22:ae:80:30:df:cf:c9:e7:52:60:05:
88:8b:8e:98:f6:e0:3a:44:72:2b:ae:b7:f9:93:8b:50:f0:bf:
6b:78:da:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:59:03 2026 by rpki-client