Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: Qojy9gJ2mtCXyanT5Wk2jj0C/ZJTxkSqkU+h3apbNvA=
Subject key identifier: 3C:BD:F1:AA:C1:ED:47:89:DC:B4:FA:10:39:B0:74:85:A0:8D:B6:7A
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 019D25F175275AFAF89E31329106E9911B6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 158A
Signing time: Wed 25 Mar 2026 17:01:14 +0000
Manifest this update: Wed 25 Mar 2026 17:01:14 +0000
Manifest next update: Thu 26 Mar 2026 17:01:14 +0000
Files and hashes: 1: L4LHXK0GX3W-TkIYyV116VIxXoI.roa (hash: fcLNxKQ8yWrXIL5Wmszwu+qvpRuxr2NO+f0WZHV/MxY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: +ryvgDFFUDc+bAdctoyR6QsCMV09daf7hn9y2jtvxI4=)
3: n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa (hash: hXDmI2LoN2Vg0aHEdqhP1gGIgLWmSc2cb/qRIsBSYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 17:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:75:27:5a:fa:f8:9e:31:32:91:06:e9:91:1b:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Mar 25 17:01:14 2026 GMT
Not After : Mar 26 17:01:14 2026 GMT
Subject: CN=3cbdf1aac1ed4789dcb4fa1039b07485a08db67a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:db:bf:18:48:9e:56:a9:e5:b8:6e:ba:69:bc:
26:19:99:88:fa:67:5d:83:ff:06:b3:ed:45:99:eb:
6f:02:33:d1:ba:ec:ca:58:af:ed:d9:f3:6a:22:5e:
bd:7f:da:ed:c8:97:ed:e6:03:7c:9c:99:0b:de:50:
ed:09:07:2e:a0:7f:f4:5e:ed:04:8c:26:bd:a8:26:
93:98:b9:f4:8c:d5:a2:8e:79:83:b9:b4:ac:a3:a0:
5b:d2:8c:b5:07:5e:fe:90:93:54:a1:40:00:cd:77:
f4:e7:7a:73:86:7f:f5:7f:b0:17:53:1f:53:c6:af:
a3:1c:b0:16:fc:cf:36:7b:b3:b0:1e:f7:d7:d9:da:
7a:bd:e5:4c:75:2c:df:57:ae:47:dd:4b:01:10:1b:
d9:17:64:c7:5a:f1:06:32:f8:e4:09:3b:f5:cf:50:
2f:2c:5d:8b:22:f2:06:95:2b:26:36:f5:be:eb:87:
31:ac:67:80:e5:84:e0:4e:92:12:8f:60:98:5d:ca:
c2:74:c3:29:5d:8a:90:1d:f7:b5:16:f1:ba:a1:73:
08:ce:27:03:24:a1:c5:df:7e:a1:13:2f:02:78:d6:
65:2f:6e:23:af:d1:f9:35:3e:ad:46:d9:18:f7:d1:
e7:aa:cc:5d:21:8d:c7:39:15:3e:28:ae:4d:62:15:
b1:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:BD:F1:AA:C1:ED:47:89:DC:B4:FA:10:39:B0:74:85:A0:8D:B6:7A
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:42:58:71:f1:9e:85:65:24:3a:dd:75:09:67:0b:7f:2d:f9:
69:49:75:ec:80:ac:9e:10:c9:6a:2a:95:f2:56:3a:b5:44:1a:
c0:c1:0a:72:37:f3:f3:88:7e:27:d1:58:7c:1d:1d:ba:ab:7e:
05:71:0b:33:b8:e0:8b:f9:fb:3d:0b:36:88:e6:8b:b9:72:53:
83:7d:b1:ae:e9:bf:93:ea:de:23:f2:8c:35:fd:a5:31:e5:fc:
4d:b6:91:02:fc:7e:ca:ba:55:66:d7:87:fd:29:fa:ee:b7:35:
f8:d7:2c:d2:7a:7d:a0:64:d8:e2:e2:77:59:9b:86:1b:5d:b8:
2f:e0:ff:3f:a2:30:e3:7b:2f:5a:64:b8:17:93:e4:e3:ed:fe:
f8:89:5a:9f:48:65:91:30:5b:90:42:bb:c3:d1:b7:da:fd:b0:
36:eb:d9:f6:55:b3:c3:aa:76:19:08:d9:fb:2b:7e:02:87:61:
cf:aa:ba:d7:b7:7f:93:f3:d5:12:7b:0a:af:97:b1:17:60:17:
1d:33:02:d0:80:95:ee:db:d4:30:8f:9a:c7:78:90:e4:a3:84:
43:6d:03:43:62:90:bb:e1:f1:60:81:01:8c:d5:99:e9:e5:13:
23:44:ab:1a:9b:f3:fd:08:fa:e2:66:ed:71:27:df:3b:55:53:
2b:4a:2f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:07:43 2026 by rpki-client