Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: G9ffTS4z0MsLHrDI/825p9KqnsvsV/cySvZ3WLRMsXE=
Subject key identifier: C7:14:D2:B3:36:86:A5:DD:E9:A7:2A:07:99:87:78:03:3A:FE:B7:85
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 01A197D7D4721F09B5564D80ED979A48F7AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 0A93
Signing time: Sun 01 Nov 2026 16:01:06 +0000
Manifest this update: Sun 01 Nov 2026 16:01:06 +0000
Manifest next update: Mon 02 Nov 2026 16:01:06 +0000
Files and hashes: 1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: HDcmHLObivliRFpVEY3VDmJhEy59DIZNgxa0asBfQJA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 13:18:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:97:d7:d4:72:1f:09:b5:56:4d:80:ed:97:9a:48:f7:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Nov 1 16:01:06 2026 GMT
Not After : Nov 2 16:01:06 2026 GMT
Subject: CN=c714d2b33686a5dde9a72a07998778033afeb785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:7c:e7:35:f3:31:ab:e4:f8:f3:aa:25:a6:f8:
0c:48:30:32:87:f2:c3:1b:33:b6:19:de:5f:7d:7a:
cb:aa:b3:0f:9d:79:51:4b:fe:14:31:72:11:ed:d6:
cf:af:df:95:07:06:8b:42:d0:7c:30:dd:fd:f4:98:
2b:a3:d2:ad:60:c9:a8:0c:38:7b:df:d4:0f:37:00:
e2:b4:f4:f6:7a:e9:35:23:9d:14:c0:fb:ed:ea:c6:
98:fe:25:c9:00:70:a9:a9:b2:8a:be:62:65:90:74:
30:d7:36:29:09:8f:e8:ef:28:60:4a:89:82:67:1f:
3a:4c:17:5a:71:00:44:c7:a6:ff:30:57:d5:71:a5:
11:5e:6a:4b:21:0e:78:57:a1:5d:38:e4:e8:ee:56:
52:57:39:ad:81:f8:96:8d:af:e3:e6:ab:f7:a2:ee:
ea:e0:ab:a5:cc:bf:31:d2:59:ca:f8:d1:bd:e9:91:
9a:33:f7:5e:1d:ca:e8:fb:82:ea:4b:1a:1a:00:4e:
28:49:66:4e:96:b4:3e:f0:90:e3:f3:12:cf:f3:80:
5b:28:cd:3c:07:a9:79:ee:57:76:15:9d:27:28:f0:
59:20:41:24:f0:8c:48:9a:69:3b:1c:ac:bd:0d:25:
8c:c2:9f:35:cc:1b:a2:56:ba:e5:52:7a:0b:d1:df:
e3:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:14:D2:B3:36:86:A5:DD:E9:A7:2A:07:99:87:78:03:3A:FE:B7:85
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c9:0a:fe:97:b5:32:6e:97:bb:65:41:78:00:4b:32:6b:dc:
96:e6:0d:be:b1:3b:01:57:9a:35:82:8a:c6:4b:1f:58:b0:70:
2f:1a:6d:e6:ad:40:bd:7a:85:3e:01:e7:6b:3c:aa:f0:07:d3:
2e:d3:40:98:c0:ea:de:48:23:8d:f5:19:0c:1f:eb:96:19:18:
e6:1c:e0:56:8d:87:42:dd:24:1b:e8:76:e6:c3:05:ea:97:9e:
fb:43:c7:58:48:fe:ee:5b:bd:8e:f0:73:2a:99:54:fc:79:56:
38:15:39:ba:22:13:04:12:b4:4c:9a:83:f0:cb:51:62:63:19:
49:63:87:f8:2f:bb:32:20:a0:c1:f4:7f:01:bf:6b:78:59:53:
f1:27:4e:cb:ca:fa:d6:36:6e:25:27:a3:3f:31:cd:26:e4:3a:
5a:03:cf:64:37:2f:22:6b:85:02:32:3b:bf:65:17:0f:7b:e7:
56:e7:a1:67:a1:07:8a:61:e5:a8:fc:8f:39:7f:25:4f:f2:77:
f0:2c:00:61:5c:b7:0e:2a:70:14:f2:7a:44:f8:b3:ba:44:ca:
3e:83:0a:a4:5d:a5:ac:b5:37:19:e3:cb:48:e4:be:d0:a7:f0:
ba:bf:29:8b:da:df:c9:9a:75:05:91:e8:c5:16:ec:66:cf:99:
5c:5c:ff:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 19:41:55 2026 by rpki-client