Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: 23yIydWnDssWqa3TUZZtJFErajsH3rIrX1KcfZsl4Xo=
Subject key identifier: A1:12:01:31:D4:F4:4E:07:7C:2A:D8:57:81:F3:65:63:84:53:11:07
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019D2884C3948D6777BFB379CFD02E3C33FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 11FC
Signing time: Thu 26 Mar 2026 05:01:22 +0000
Manifest this update: Thu 26 Mar 2026 05:01:22 +0000
Manifest next update: Fri 27 Mar 2026 05:01:22 +0000
Files and hashes: 1: 9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa (hash: J/ckLwZzEt0PQV77vngn+NxdBjiE32bwHDQ3p9KUBfE=)
2: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: gRXqA0MYrsiJ71ksNuWJtIKZXAzc00Hlq/2ETZjCwno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:84:c3:94:8d:67:77:bf:b3:79:cf:d0:2e:3c:33:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Mar 26 05:01:22 2026 GMT
Not After : Mar 27 05:01:22 2026 GMT
Subject: CN=a1120131d4f44e077c2ad85781f3656384531107
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f7:b3:c4:aa:20:51:92:fe:9c:56:d5:c3:be:
fb:73:0b:1e:2b:89:16:20:37:70:20:c0:2e:a6:10:
57:fa:ce:47:61:28:e4:50:3b:12:50:d9:cf:0d:fd:
a9:e0:3e:76:08:4d:84:e7:c9:37:ac:12:f3:0f:06:
df:31:e8:a2:d5:a3:e9:15:4f:4d:77:18:17:31:06:
e5:00:4e:e6:d4:64:c7:7d:0f:38:cd:54:14:38:54:
85:b5:d6:53:9f:5c:f6:f9:b3:28:12:49:c4:23:25:
84:31:13:72:aa:8a:1d:2c:0b:87:fb:d9:62:40:22:
24:85:8d:bd:0a:a9:5b:68:8c:d7:8a:05:c0:37:24:
ac:12:8b:19:a0:f8:b4:be:9d:0a:e9:e2:51:14:f7:
f4:70:7e:29:e0:6b:ba:f0:ba:ad:18:76:23:3d:b3:
d4:59:b6:60:80:53:83:b4:39:12:ff:53:53:d1:d3:
a8:7c:bf:6b:61:88:db:07:dd:3e:2a:25:8d:f4:9e:
36:d7:00:21:15:92:e6:22:4e:8b:c0:50:2c:8f:df:
a7:29:e8:99:91:3d:90:3a:51:57:9d:45:9e:3e:4a:
69:81:13:58:37:61:5b:a1:15:32:29:4f:26:9b:1e:
14:9c:ab:e0:f1:13:dc:fa:be:dc:4d:d9:5d:f7:b9:
99:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:12:01:31:D4:F4:4E:07:7C:2A:D8:57:81:F3:65:63:84:53:11:07
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:d6:fa:50:90:c1:25:09:d3:a1:0d:72:48:99:37:ff:25:69:
ef:7e:83:a7:cb:f0:eb:35:41:9a:ea:c3:1a:64:79:cb:e3:3a:
96:72:f3:9c:f6:79:93:70:6c:f1:c8:37:71:c8:24:37:aa:e1:
2d:84:08:93:fb:7a:44:84:f7:bf:ac:36:9f:64:47:ee:96:fe:
5e:c7:8c:2a:0d:fd:5c:d9:e8:b8:16:63:84:da:bc:d5:85:e8:
1b:c7:23:bc:aa:3c:69:5a:47:ba:f8:92:8d:77:62:09:29:8d:
d7:9f:d4:4f:2c:27:f5:61:74:33:71:46:52:cb:d3:9f:8d:52:
78:a6:11:61:03:06:55:21:7d:f5:a6:94:67:dc:f4:b8:2c:94:
e2:a6:d1:44:b8:cd:9a:f3:fe:8c:cc:66:39:09:ca:58:bf:43:
e1:9e:18:45:d7:65:1f:c1:04:fa:78:ef:8d:ca:a7:79:af:38:
cb:5a:ae:f2:3b:75:8a:ec:bd:78:15:d7:c2:f9:40:1b:2b:19:
29:1b:da:07:4a:3b:7e:9a:f9:5b:1e:8f:cf:4d:1f:ce:92:c6:
d6:a1:9c:ca:e6:45:50:f1:95:1c:73:46:be:4a:5d:d3:2d:34:
98:35:cf:93:35:df:b3:8c:f0:36:ed:42:71:54:1a:22:88:08:
49:f3:59:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:10:24 2026 by rpki-client