Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: h+/4xO9MqHP8/tF4aeDwVfQhuqOF0aWGXUVQwnVSG5U=
Subject key identifier: E7:49:C7:5D:2B:E3:63:30:6D:0B:03:FC:19:A8:6A:76:07:FD:B1:C0
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019D29615B99AC275E21811923C8AA6BAE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 188B
Signing time: Thu 26 Mar 2026 09:02:19 +0000
Manifest this update: Thu 26 Mar 2026 09:02:19 +0000
Manifest next update: Fri 27 Mar 2026 09:02:19 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: JlTp5Li5welI23+lbt5TeATNr6R/k3Hl798Mfmz7vIU=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:5b:99:ac:27:5e:21:81:19:23:c8:aa:6b:ae:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Mar 26 09:02:19 2026 GMT
Not After : Mar 27 09:02:19 2026 GMT
Subject: CN=e749c75d2be363306d0b03fc19a86a7607fdb1c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:bc:5a:22:1c:27:81:0e:ab:77:dc:e0:80:61:
e1:70:50:86:12:18:e5:f4:77:c6:80:5d:12:d4:aa:
da:f4:b1:e1:57:0e:b6:ab:c8:04:77:02:9a:4e:48:
3e:d2:8c:e9:cb:88:16:1e:14:d3:ed:fc:92:f3:07:
22:a6:89:11:8e:18:a6:40:42:bf:ea:5e:80:d3:a6:
fa:6d:a0:71:37:ff:ea:76:85:a4:fa:08:fd:67:1a:
7c:88:69:5f:1d:33:e8:45:e9:ec:6e:3f:dc:5d:c5:
12:5b:dd:7e:6e:61:3d:47:e5:19:da:25:a5:d8:41:
0a:0e:9f:72:5f:48:8d:da:36:f3:85:8f:55:ee:8b:
1d:7f:72:5b:94:be:f9:6a:fd:b3:8f:61:13:c9:af:
94:10:89:8d:23:cd:94:81:82:81:16:30:95:53:20:
cc:70:f6:07:4d:47:b5:80:33:3a:e3:c0:30:ad:5b:
54:17:ca:0d:32:8c:bc:94:0a:c7:52:fa:57:e5:48:
40:5c:f3:18:39:f2:62:4d:90:67:3c:da:11:48:0e:
0c:2f:95:3f:4d:50:ac:35:f3:84:75:29:05:6e:f5:
02:21:c0:3a:7c:72:90:1b:19:77:e3:90:96:8b:23:
0e:62:5d:05:c2:ae:f1:a3:20:fb:f7:0a:e9:65:99:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:49:C7:5D:2B:E3:63:30:6D:0B:03:FC:19:A8:6A:76:07:FD:B1:C0
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:23:5c:e1:a6:c9:16:f5:32:e1:b9:4c:1f:55:9d:da:46:d1:
66:36:eb:3b:19:9e:f7:ce:c8:67:55:3d:5d:65:37:d3:64:b0:
19:20:d6:29:b0:d2:3c:5e:1d:7e:56:6b:db:d6:f2:a2:ee:5e:
08:15:77:fa:77:19:d8:9a:a4:80:87:68:2b:a9:6d:e0:ce:7a:
24:e3:06:94:37:91:ba:78:0a:24:80:cb:11:79:05:98:76:b2:
e9:31:16:73:6f:91:00:d1:9c:77:8b:6b:60:b3:f8:63:49:cb:
0b:74:e1:02:69:62:a8:a6:a1:d4:c4:1b:b2:bf:8f:bf:ec:dd:
a0:40:a2:a2:64:7a:05:26:bd:af:b3:b2:f1:d2:ed:ff:48:55:
6d:70:4a:0b:9e:61:65:5c:4d:cc:6a:82:cc:4e:19:90:48:dd:
07:be:96:45:d9:7e:9d:01:c7:45:79:fb:b2:4e:6e:b8:2f:62:
e4:69:7c:b4:f2:08:99:6c:a6:58:82:97:36:f1:c9:87:ce:e0:
b3:61:79:02:f6:3e:44:a7:4e:c2:a4:70:d0:1c:26:c9:9c:5b:
12:ef:7c:29:81:31:0c:db:9a:a3:10:dd:06:f0:46:cb:69:5b:
47:99:c3:e7:df:cb:f4:01:32:91:6c:b1:99:db:1f:06:27:58:
c5:f8:4d:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:17:57 2026 by rpki-client