Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: YGsN4686EzLP3q3ZQ2jnwd/qoMH1uzh9aKM/W7vy+Mc=
Subject key identifier: 1C:E9:A6:2D:06:2E:C2:D2:84:D4:2C:59:53:B5:25:F3:80:37:FA:33
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 019D2961540F8BBB32F1B51FBB1928FBC084
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 06AD
Signing time: Thu 26 Mar 2026 09:02:17 +0000
Manifest this update: Thu 26 Mar 2026 09:02:17 +0000
Manifest next update: Fri 27 Mar 2026 09:02:17 +0000
Files and hashes: 1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=)
2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: 9/elNGPMoUyN3BkVYSCSfFx3DWJyAU4ABCvPPo91ZlY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:61:54:0f:8b:bb:32:f1:b5:1f:bb:19:28:fb:c0:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Mar 26 09:02:17 2026 GMT
Not After : Mar 27 09:02:17 2026 GMT
Subject: CN=1ce9a62d062ec2d284d42c5953b525f38037fa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:8b:da:12:6d:5d:33:50:95:97:07:41:9e:f1:
71:38:64:b7:21:97:22:d5:d9:59:09:df:bb:8e:38:
db:c3:e6:27:e8:84:2d:69:a2:53:da:6b:3e:97:bd:
ff:a0:5d:f9:95:d0:61:8e:a9:8e:f8:89:43:13:38:
03:9b:a1:2c:81:07:33:af:0b:a7:61:bb:a8:2a:b6:
87:65:72:90:51:a8:b9:a8:07:03:39:db:b9:3f:4c:
ce:fc:97:13:6e:5b:2d:90:86:2d:97:60:14:23:ce:
30:02:37:a9:16:12:c0:18:a6:4a:d0:9b:38:b5:f9:
c9:6d:1d:65:70:9b:48:e2:66:36:98:8d:e4:28:be:
23:31:ca:a8:f7:f3:9c:22:f7:a4:fa:4a:fb:8a:c2:
03:fb:c0:9d:4a:2a:39:93:c0:ae:56:f3:83:6f:da:
d0:e0:61:51:b0:bf:1e:cf:f9:97:fa:2b:7c:a3:ea:
c2:61:9c:bb:3c:c4:82:30:67:30:e9:85:92:ab:8d:
af:dc:d2:a2:8c:ba:b4:96:b9:52:6c:79:c6:6c:18:
25:c9:01:b3:62:91:a8:31:75:29:cd:87:9d:9e:a3:
32:89:27:c0:b3:35:a7:5a:98:11:37:5a:7e:06:71:
09:13:55:d7:7a:38:90:37:57:9a:8f:ae:da:50:22:
31:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:E9:A6:2D:06:2E:C2:D2:84:D4:2C:59:53:B5:25:F3:80:37:FA:33
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:04:42:9c:74:ef:f5:27:53:24:62:ce:3f:61:71:3b:93:57:
30:04:01:9f:80:f0:33:6e:33:f4:62:1e:6d:c9:9c:58:66:8f:
9f:13:e3:b0:7b:ef:9d:17:17:ff:f8:0c:ab:fa:16:f1:4c:57:
e5:51:5e:0c:26:dd:84:1c:cb:18:9d:e1:ef:af:5a:00:38:04:
61:be:4a:00:d0:b5:07:af:4f:f7:45:e9:0a:e7:6e:12:b4:94:
8f:e7:07:79:1e:b2:5b:81:ff:4a:d7:b2:86:cc:04:f2:72:53:
1a:b0:32:fa:0e:c3:6d:4b:06:8f:7b:fd:cb:3d:70:d1:4c:3f:
00:07:ae:ff:28:ef:97:50:5c:5e:90:88:c6:45:4c:9d:c1:e7:
fa:99:c7:db:0a:40:7f:be:0b:fd:4d:84:fc:98:17:7c:be:24:
c4:1e:1c:1e:b8:cc:ab:c3:d8:db:65:a0:30:d3:2f:0e:3e:3c:
e9:e7:2d:6e:58:14:f0:50:8d:96:3c:a7:18:9d:e5:6f:59:ad:
0e:0f:95:ee:14:b1:b2:32:a9:2b:c2:82:b7:d9:c2:e9:05:95:
ae:12:ec:9b:8f:d9:e8:f9:7c:88:58:6e:81:4d:e2:fc:71:c8:
9c:b2:90:fe:e7:0d:d8:95:ef:36:79:a7:ba:9a:73:9a:c5:ac:
ae:bd:41:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:53:23 2026 by rpki-client