Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: yFk8AvB80g4GpsOx/uLL7RLKWf1YdwpCbUZ3YBQMkG8=
Subject key identifier: E1:C5:7C:E5:EE:DA:81:21:74:9F:B7:35:8D:1C:D3:98:00:EE:2C:B6
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 019D39AF1A7D4DCD8B6783A81473CACC2A03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 0850
Signing time: Sun 29 Mar 2026 13:01:09 +0000
Manifest this update: Sun 29 Mar 2026 13:01:09 +0000
Manifest next update: Mon 30 Mar 2026 13:01:09 +0000
Files and hashes: 1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: QWbC9qgNyh6ZvrsIQfHluzD+RzOHX6uA7Ij5p4u1sSY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:af:1a:7d:4d:cd:8b:67:83:a8:14:73:ca:cc:2a:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Mar 29 13:01:09 2026 GMT
Not After : Mar 30 13:01:09 2026 GMT
Subject: CN=e1c57ce5eeda8121749fb7358d1cd39800ee2cb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:cf:34:f6:f6:00:c6:58:c6:3c:4e:ea:5a:ab:
e1:40:c4:ca:2d:09:42:5e:a9:2a:34:07:0d:d7:2a:
12:b7:a3:3f:65:6f:7c:90:ee:04:2d:04:23:08:3e:
ac:e8:11:52:ee:4b:58:b4:19:f8:44:9d:40:b1:01:
3b:e7:86:51:ec:4f:6e:9f:83:fc:19:bf:6f:2d:e1:
48:6c:67:3b:9e:04:ea:77:04:97:88:16:e3:1b:ca:
68:fd:34:1b:49:70:f6:35:4e:84:68:4d:bb:01:9a:
37:4f:8d:8c:40:fa:de:c1:25:f6:13:88:c6:00:ce:
03:31:49:ff:e8:a1:80:58:b8:29:fc:2c:cc:0f:41:
0a:e4:db:3c:c5:bb:02:6b:8b:5c:ab:9f:7c:ad:49:
14:29:ef:0b:e6:21:a0:3e:ec:80:13:a5:e1:55:8b:
ab:98:dd:2f:db:a8:80:43:c2:c5:98:e0:68:14:c5:
cf:ab:c5:f0:be:ad:5f:2e:4f:0c:4d:a0:8f:12:c7:
8a:bc:0b:ae:0f:2b:ee:29:7a:24:28:9b:91:69:3f:
31:65:6d:0a:f4:17:24:63:74:89:01:f8:60:cc:e1:
9b:1e:ab:0a:61:c1:65:06:7c:a7:34:b9:df:df:e9:
97:ba:7b:ce:26:17:73:81:64:9f:7e:97:d4:a3:44:
00:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:C5:7C:E5:EE:DA:81:21:74:9F:B7:35:8D:1C:D3:98:00:EE:2C:B6
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:e4:5e:3d:46:b6:33:f9:ac:8d:0b:36:62:ad:9a:72:67:96:
05:44:cf:14:65:69:cd:93:c0:7c:78:f5:2b:a6:f5:dc:a6:50:
51:71:ea:cf:07:5c:bd:b7:cc:69:07:c8:dc:4f:a6:21:b1:28:
21:a5:2a:1c:5d:6d:08:fb:9f:64:cd:cf:75:ab:e3:c4:6a:a3:
42:ee:ec:f9:fb:dd:ca:5b:8d:d8:ba:1d:b0:0b:1d:f4:f5:61:
42:c8:b0:09:7c:72:d8:ef:e4:10:c6:17:34:17:60:b0:9e:91:
11:5a:19:3b:42:7c:1b:48:b4:b1:dc:0e:ae:0e:2a:fb:9c:ce:
2e:4c:0d:98:c9:c2:19:0b:ca:20:b1:a4:b6:13:77:a0:84:a3:
c6:75:d6:d1:7b:4f:81:5a:43:75:3d:43:ea:93:6f:79:cc:69:
e9:ce:87:b9:22:40:0d:f4:a1:82:18:f2:2b:a7:e4:93:d5:ac:
b0:ae:9f:09:34:3a:ae:c4:32:04:7b:fd:cf:e2:6b:5c:72:44:
61:45:0e:44:3e:d0:86:a4:fa:4c:0b:ee:94:80:73:82:07:fe:
b6:c2:a3:80:8b:93:be:4e:ff:82:d8:67:b2:ac:7a:fb:40:48:
a4:c8:dd:70:5c:05:e4:25:6d:b7:24:a2:c4:21:de:8f:a2:e3:
04:cc:40:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:27:07 2026 by rpki-client