Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
File: N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft (raw, json)
Hash identifier: jvB61BGWM/ioDJcGn7c3HAAskQeIeomyH9chqro8V14=
Subject key identifier: 6C:DD:C8:40:EF:A8:A2:CE:F8:71:2D:B2:47:79:37:10:95:9C:9E:F2
Authority key identifier: 37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9
Certificate issuer: /CN=37493000b9a704531da1a1766be538271ee0ccc9
Certificate serial: 019D382DF2079F744359ED607E6A0F68E3F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
Manifest number: 0262
Signing time: Sun 29 Mar 2026 06:00:28 +0000
Manifest this update: Sun 29 Mar 2026 06:00:28 +0000
Manifest next update: Mon 30 Mar 2026 06:00:28 +0000
Files and hashes: 1: MNE-ZCwRYPDx0wTkQU5powJS4Nk.roa (hash: JTsGSY9wxU/ufYls0VwQm/PmoFlNeOnfFMb0n8iAQcg=)
2: N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl (hash: WR2sSXiR8yQLtks7IZAOs4FxFhpFOwof7cFLNDQsMXo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:2d:f2:07:9f:74:43:59:ed:60:7e:6a:0f:68:e3:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37493000b9a704531da1a1766be538271ee0ccc9
Validity
Not Before: Mar 29 06:00:28 2026 GMT
Not After : Mar 30 06:00:28 2026 GMT
Subject: CN=6cddc840efa8a2cef8712db247793710959c9ef2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:40:c8:07:9a:97:cf:d5:74:27:6b:f7:e5:2e:
dc:4e:1e:c5:ce:a1:ad:61:60:e0:d7:45:61:e2:7a:
85:5e:2d:4e:77:e7:04:30:aa:47:fd:16:4f:ac:b9:
42:c3:0e:e9:b5:7f:3c:bf:b8:6f:c6:65:93:0a:98:
14:10:4c:ac:5b:cc:9b:70:41:ed:39:2b:9d:8c:16:
6f:65:2e:69:fe:b0:9c:ec:d5:d0:a6:3f:41:6a:92:
e6:5e:97:94:bf:78:94:21:bd:61:a8:cd:85:70:f1:
5d:5a:4c:9c:91:a6:dd:5d:18:7d:4e:96:ca:d2:9b:
97:81:0b:27:0e:16:a8:a4:84:d4:26:a8:bb:bd:ea:
26:2f:ea:28:ab:ce:06:b3:49:67:f7:19:ae:ed:b0:
a3:09:07:e8:1c:3e:33:59:c5:ed:55:e2:08:9e:47:
3f:74:bd:f2:aa:0d:27:9c:4b:f9:78:d8:bd:52:46:
31:f0:46:86:5f:36:d5:a2:fa:13:66:07:23:7a:93:
74:32:f6:f2:16:15:5f:b0:c9:5c:6e:21:5e:1c:5b:
88:4b:81:07:b9:2a:84:66:99:59:ad:78:9a:c4:ec:
7d:1a:ae:0b:42:c3:91:cb:38:b9:42:62:35:31:14:
47:eb:1f:02:c7:4f:94:93:dc:0f:dd:c8:05:b0:66:
d2:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:DD:C8:40:EF:A8:A2:CE:F8:71:2D:B2:47:79:37:10:95:9C:9E:F2
X509v3 Authority Key Identifier:
keyid:37:49:30:00:B9:A7:04:53:1D:A1:A1:76:6B:E5:38:27:1E:E0:CC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0kwALmnBFMdoaF2a-U4Jx7gzMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/b1c31a-fc39-4160-b1da-8373a6a411bf/1/N0kwALmnBFMdoaF2a-U4Jx7gzMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:74:ab:df:89:da:ac:4c:97:b7:77:91:d9:4c:8e:d1:4c:7f:
f1:69:23:75:6b:07:0d:83:d2:90:7c:9e:ef:eb:3a:86:cf:75:
c3:53:76:8d:0a:ac:b5:70:94:d5:f0:52:e6:e4:4f:0b:69:7c:
4c:7a:31:f4:fb:2f:34:a5:7f:b8:a6:eb:75:dc:ed:2c:5b:85:
2c:28:52:98:8f:35:21:4e:b7:a3:ad:a9:17:00:8e:62:d6:f5:
ab:61:28:d4:93:87:41:a8:33:88:71:9c:d5:db:1a:da:74:22:
92:31:38:41:25:a7:08:af:f6:49:9d:87:d6:b3:45:5e:c2:be:
4b:4e:a5:50:90:37:15:3f:e3:3c:f6:ad:c4:4a:20:b2:5a:03:
bd:2d:8e:fd:ca:d0:2c:b8:54:b6:9b:63:85:5a:87:53:4a:58:
09:83:59:de:3d:71:b7:18:31:4f:b7:8c:f4:54:78:ed:f2:3e:
cf:d5:7d:26:2e:87:64:07:1b:b4:94:7a:de:b6:9f:50:b9:1f:
6f:4b:36:4e:3e:9d:78:13:cf:b5:bb:9b:0c:e7:f7:38:e5:78:
48:81:6a:2a:bd:04:c5:db:0a:0f:5a:1d:1f:45:f6:24:3a:d1:
e8:9d:b6:99:46:4b:46:10:c9:a6:51:6b:00:fe:3c:63:31:b4:
f2:d4:c5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:38 2026 by rpki-client