Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: gOOqQ2P5HgCZu+aIZXO/4aaapaMAvSrrkuRPyzrTcLI=
Subject key identifier: C0:8B:6C:71:8F:2D:CA:F5:95:CA:5A:18:88:00:D4:05:DC:4E:91:3C
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019D2C98620EA428D91AD69D797617B7195A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 188B
Signing time: Fri 27 Mar 2026 00:01:17 +0000
Manifest this update: Fri 27 Mar 2026 00:01:17 +0000
Manifest next update: Sat 28 Mar 2026 00:01:17 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: DKWXc4Dcs9B1L+zHI1+eH4HYlzwoDMaTFFPOmC2LYmY=)
2: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
3: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 20:56:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:98:62:0e:a4:28:d9:1a:d6:9d:79:76:17:b7:19:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Mar 27 00:01:17 2026 GMT
Not After : Mar 28 00:01:17 2026 GMT
Subject: CN=c08b6c718f2dcaf595ca5a188800d405dc4e913c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:60:41:96:14:d4:6a:e6:b7:d5:2a:a5:30:cd:
ef:81:75:02:94:69:04:b1:8e:06:78:e3:65:7e:9e:
0a:35:6e:2f:b0:2e:bf:b1:49:c8:a3:fd:c9:d0:a3:
5f:35:ce:9f:ce:3c:4a:40:a7:4d:00:64:22:f4:6c:
ef:8d:73:36:87:4f:8c:4f:4e:b4:cd:32:85:28:1d:
c0:f1:92:41:32:0d:a1:a3:86:79:95:cf:e0:90:d4:
a6:9b:cd:32:79:6c:b8:9a:11:16:64:9a:7b:0c:bc:
16:87:78:f3:fd:cd:be:51:f0:f4:60:b4:08:59:f7:
74:8a:4b:64:b4:a2:f9:49:75:d5:d5:ff:23:78:1b:
27:58:66:d4:75:ba:2f:f7:e8:5d:8f:2c:6c:bb:39:
0d:83:b3:ba:b7:72:50:16:df:20:b7:c3:c9:45:53:
7c:06:dd:22:9f:43:11:6b:70:60:01:5c:81:2d:0e:
15:f9:a1:98:33:cd:df:64:6c:be:0d:d0:ea:ad:34:
49:24:bc:6f:8f:7f:3d:d5:0e:3c:4b:0b:07:74:73:
f2:f8:4d:80:0d:12:5d:c8:37:3e:1d:40:03:0d:d8:
f5:53:f0:c5:9e:b9:07:71:1e:50:75:27:8a:55:8a:
3c:b9:be:a4:69:d1:01:2c:5d:87:1e:40:c6:c8:79:
49:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:8B:6C:71:8F:2D:CA:F5:95:CA:5A:18:88:00:D4:05:DC:4E:91:3C
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:14:dd:8b:ca:14:a7:7e:fb:ca:74:4d:4d:53:2d:62:5c:91:
89:ee:08:d7:18:b5:56:de:e2:9f:22:93:d5:0e:97:a5:5d:50:
1a:aa:95:c0:06:be:64:53:fd:60:80:13:7a:26:ba:ec:ad:b9:
74:e5:a3:06:08:a5:55:ba:4d:93:5d:25:20:36:7e:f5:71:03:
83:82:44:74:18:b9:b8:95:d2:a8:e1:8e:35:e9:42:8c:b1:d9:
18:cb:64:31:1d:cf:5e:31:a5:4e:99:cb:df:9b:90:82:b2:16:
84:71:22:9f:b3:b0:58:f1:32:a8:b9:11:87:28:3b:7b:dd:dc:
e1:e6:73:00:32:2a:b3:a1:46:d7:8d:bb:9d:31:14:54:16:57:
f7:51:75:6f:8f:75:1d:63:64:39:9d:41:68:13:b3:4c:aa:53:
75:bb:26:78:2e:00:09:8e:5e:f0:48:d6:10:48:a7:02:f1:49:
2c:1b:51:7b:43:c1:11:05:8d:b6:c0:cd:af:5c:96:5d:a9:90:
27:2a:06:12:af:99:93:63:b8:73:d9:03:9d:49:54:e0:4d:d2:
a2:fc:ab:a2:f2:74:57:01:52:47:85:9c:a1:3b:19:04:13:90:
e5:b1:3b:0a:87:b6:53:7c:c6:bb:4e:d1:65:c7:de:33:04:fa:
7e:49:40:a6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0smGIOpCjZGtadeXYXtxlaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDI3ZmMyNDQ0M2ZjZGQ0YjFiNjVjZmM4MDc4YzRhMTQy
ODlmOWUwHhcNMjYwMzI3MDAwMTE3WhcNMjYwMzI4MDAwMTE3WjAzMTEwLwYDVQQD
EyhjMDhiNmM3MThmMmRjYWY1OTVjYTVhMTg4ODAwZDQwNWRjNGU5MTNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2BBlhTUaua31SqlMM3vgXUClGkE
sY4GeONlfp4KNW4vsC6/sUnIo/3J0KNfNc6fzjxKQKdNAGQi9GzvjXM2h0+MT060
zTKFKB3A8ZJBMg2ho4Z5lc/gkNSmm80yeWy4mhEWZJp7DLwWh3jz/c2+UfD0YLQI
Wfd0iktktKL5SXXV1f8jeBsnWGbUdbov9+hdjyxsuzkNg7O6t3JQFt8gt8PJRVN8
Bt0in0MRa3BgAVyBLQ4V+aGYM83fZGy+DdDqrTRJJLxvj3891Q48SwsHdHPy+E2A
DRJdyDc+HUADDdj1U/DFnrkHcR5QdSeKVYo8ub6kadEBLF2HHkDGyHlJowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMCLbHGPLcr1lcpaGIgA1AXcTpE8MB8GA1UdIwQY
MBaAFDfSf8JEQ/zdSxtlz8gHjEoUKJ+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQt
NDhiMTY2NGQ0MGQ1LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQtNDhiMTY2NGQ0MGQ1
LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANRTdi8oU
p377ynRNTVMtYlyRie4I1xi1Vt7inyKT1Q6XpV1QGqqVwAa+ZFP9YIATeia67K25
dOWjBgilVbpNk10lIDZ+9XEDg4JEdBi5uJXSqOGONelCjLHZGMtkMR3PXjGlTpnL
35uQgrIWhHEin7OwWPEyqLkRhyg7e93c4eZzADIqs6FG1427nTEUVBZX91F1b491
HWNkOZ1BaBOzTKpTdbsmeC4ACY5e8EjWEEinAvFJLBtRe0PBEQWNtsDNr1yWXamQ
JyoGEq+Zk2O4c9kDnUlU4E3SovyrovJ0VwFSR4WcoTsZBBOQ5bE7Coe2U3zGu07R
ZcfeMwT6fklApg==
-----END CERTIFICATE-----
Generated at Fri Mar 27 03:26:17 2026 by rpki-client