Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
File: N_k-RoBmZm0Fu1TFSr41Al023v4.mft (raw, json)
Hash identifier: 8M41bGEZwshUBuqlcnE/a0Y5q4RmxGFECYFCPLpOlxw=
Subject key identifier: 2A:05:1B:99:DE:EF:80:CC:27:D1:81:2B:D0:2A:B8:53:38:07:4E:FA
Authority key identifier: 37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
Certificate issuer: /CN=37f93e468066666d05bb54c54abe35025d36defe
Certificate serial: 01A0D3EF5BFF0CCB9FD38D6870F29DF46509
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
Manifest number: E7
Signing time: Thu 24 Sep 2026 15:01:14 +0000
Manifest this update: Thu 24 Sep 2026 15:01:14 +0000
Manifest next update: Fri 25 Sep 2026 15:01:14 +0000
Files and hashes: 1: IpOk2-baAJmBq3G0sGeE5MDiPGw.roa (hash: DK5qUCU0NDdVm+egXm1v6a3rNwDmd+BapaCsSxr03wQ=)
2: N_k-RoBmZm0Fu1TFSr41Al023v4.crl (hash: uUaE1LdoBvWbbjKIx/cK9osr4qoRJQ5r5npb3Ho3Rfw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 15:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d3:ef:5b:ff:0c:cb:9f:d3:8d:68:70:f2:9d:f4:65:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f93e468066666d05bb54c54abe35025d36defe
Validity
Not Before: Sep 24 15:01:14 2026 GMT
Not After : Sep 25 15:01:14 2026 GMT
Subject: CN=2a051b99deef80cc27d1812bd02ab85338074efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1f:78:96:c5:17:1a:e3:a1:be:0e:88:81:62:
3b:7c:3c:7f:ec:19:c4:ac:23:ad:cd:9d:a5:34:e2:
94:78:47:42:43:e4:e6:7c:d0:70:1b:b0:da:2e:db:
57:5c:68:8d:51:3a:bf:82:5b:34:13:6d:39:6d:ad:
17:61:e1:02:56:ec:0b:5c:29:61:d9:a9:ac:1d:f0:
b2:2b:2b:58:ef:13:60:08:a4:38:1b:ef:0e:bc:28:
7f:ae:80:c8:8b:32:6a:e1:7a:db:2c:ca:44:b3:2b:
f9:63:7d:c9:53:43:c0:20:45:a8:27:9f:f3:74:61:
d6:4f:ff:fb:ff:68:13:bd:4a:bf:80:2b:d2:02:27:
8d:49:79:fe:52:0c:ec:2d:be:3b:02:54:32:4a:4a:
b8:07:92:82:cf:86:41:85:dc:35:03:36:c0:30:17:
9e:5d:12:47:59:00:68:30:30:7e:5d:8d:db:4b:b9:
0b:c5:4a:be:1b:86:9e:4d:1f:c1:f2:7c:8c:5b:5c:
21:4e:a8:df:0c:e5:09:1b:34:2f:98:ac:0e:5e:20:
49:98:51:ce:f9:8d:10:f7:ef:69:69:6a:54:8b:4d:
6e:21:6e:fc:81:55:7c:a6:dd:0f:d9:7e:4d:bf:20:
da:50:3d:5e:1b:98:56:89:67:01:af:c9:0b:f6:67:
8c:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:05:1B:99:DE:EF:80:CC:27:D1:81:2B:D0:2A:B8:53:38:07:4E:FA
X509v3 Authority Key Identifier:
keyid:37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:9a:8e:7b:a4:0e:cd:c7:48:d6:cd:64:6d:a0:2b:f7:be:5b:
e6:58:86:b5:0d:18:b3:33:31:0e:c4:df:70:87:06:a4:09:e9:
0d:c5:38:0f:64:c8:1c:be:14:72:54:9e:ba:6b:5d:dd:7e:67:
ac:8a:6a:d3:5a:7e:ca:64:a6:03:0f:b4:04:34:97:e8:a8:99:
44:ab:7f:bc:3e:5b:04:30:4a:bd:7c:9e:eb:7f:ed:39:a1:44:
29:ab:4b:68:04:c1:34:4f:8e:2b:af:b2:2f:25:a2:d6:bd:25:
70:15:62:2b:60:64:90:f7:da:8f:54:e2:60:0e:a0:5b:1f:11:
a2:69:02:21:de:92:3f:01:f2:be:cd:16:56:18:54:d4:99:81:
f3:3a:21:8d:20:f9:da:b9:94:76:a5:eb:68:e0:59:b6:f1:00:
13:36:e7:11:dc:4a:ba:d9:f6:f5:eb:eb:6e:cc:cd:62:b1:5f:
49:45:8b:8f:c0:8a:7e:3d:1b:69:07:e8:47:2b:30:51:2b:5d:
db:be:83:88:a4:f2:d9:13:77:c1:41:9f:3f:7d:23:43:c8:fa:
78:75:5f:27:c5:7d:88:67:57:ed:9e:5a:d1:f0:ad:d5:44:17:
59:3f:d4:e1:2c:10:34:ef:90:a7:9c:4b:7f:b9:af:f3:00:a3:
4a:23:45:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:55:24 2026 by rpki-client