Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: pbnkhMitcC4OYM841Z247UUYIxsiRisWMzIw9aerKHk=
Subject key identifier: 20:7D:B1:D8:B7:B1:26:56:4B:DA:C4:C8:C4:43:2F:19:9C:FF:DA:9A
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 01A1DF8357838AAC90D611B2B37D781527C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: 0329
Signing time: Sun 15 Nov 2026 14:01:29 +0000
Manifest this update: Sun 15 Nov 2026 14:01:29 +0000
Manifest next update: Mon 16 Nov 2026 14:01:29 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: qmERDyoSCgEtUDdpL6DVK+gbyaUI6LcpVS5btu/YlwI=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:df:83:57:83:8a:ac:90:d6:11:b2:b3:7d:78:15:27:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Nov 15 14:01:29 2026 GMT
Not After : Nov 16 14:01:29 2026 GMT
Subject: CN=207db1d8b7b126564bdac4c8c4432f199cffda9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:05:a4:f5:8f:0b:e7:53:c5:b5:22:a4:af:eb:
c5:5b:c7:e2:85:ba:20:ad:4b:3a:98:68:38:0b:2c:
67:e1:8d:f3:81:c4:15:fb:03:89:e2:18:45:3e:5a:
f7:fe:5b:e0:ec:03:43:a7:e0:ed:40:88:7e:4d:25:
e6:7b:c2:36:80:4c:c5:38:26:29:43:72:9a:5f:be:
b4:81:28:f4:63:19:71:f0:92:05:68:6c:f5:a6:4f:
f3:2e:9c:58:92:c7:8d:b2:f8:6a:60:0c:3d:f8:a5:
db:07:d7:9f:ff:05:4e:40:fb:e4:6c:51:94:18:43:
d2:51:05:3e:a0:57:24:6d:4c:5c:1c:69:72:be:e3:
5a:cd:f5:4e:aa:b1:14:ab:7f:ca:dd:63:f9:ef:38:
61:0e:4e:6c:7e:78:36:e3:73:f4:68:03:b5:0b:80:
40:b7:7c:d5:1b:1e:1b:cf:46:23:30:4c:eb:ef:df:
aa:d7:15:21:82:72:f3:17:d1:fe:fb:05:8a:08:e4:
46:8c:d4:9d:d8:81:fd:fd:c6:99:1f:ed:db:bd:0c:
dd:30:03:0f:67:be:d8:19:7e:fa:fd:dc:f9:84:51:
d9:75:97:4c:cd:db:cc:d8:37:72:b1:6e:c3:db:a1:
ac:5e:17:7a:df:f1:91:32:18:10:c9:3b:65:f7:b6:
0e:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:7D:B1:D8:B7:B1:26:56:4B:DA:C4:C8:C4:43:2F:19:9C:FF:DA:9A
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:01:3d:f9:55:01:ce:aa:19:81:9b:cc:bb:e8:a0:25:11:75:
16:d6:b2:ca:ac:b3:f9:83:c7:46:b8:77:77:ea:33:44:f3:21:
61:cb:9c:0e:be:e5:5e:aa:36:87:ca:34:4f:ee:01:ac:c3:88:
39:63:6c:5b:d7:10:5e:60:e6:72:87:70:46:09:cd:dc:e5:2e:
41:61:39:12:c3:48:59:6d:e6:f5:03:d1:93:13:b5:ff:28:09:
4c:3a:a8:ae:d4:a9:57:16:67:c0:2d:57:6e:29:9a:6d:4a:84:
83:9e:87:29:06:7f:41:f0:df:03:84:5c:cc:32:50:b0:32:07:
7d:07:ad:5b:53:5e:58:03:3e:8d:7e:fc:ba:da:10:04:d4:29:
44:a1:b3:10:74:d9:1c:1b:4c:fd:12:f3:f7:7a:67:5f:59:b1:
09:72:6c:d6:c1:7f:03:7d:bc:7d:95:59:00:b6:f2:c7:8b:f2:
50:db:87:cf:7e:e5:51:9a:7c:07:09:5b:84:bd:31:88:ca:18:
44:79:85:cc:d2:c7:28:e4:19:bc:a0:c3:ca:dd:8a:52:39:33:
2f:99:ab:71:03:88:28:a4:77:13:b7:cd:ee:c1:51:fb:14:a6:
eb:5c:dd:a4:e2:ca:c4:73:11:81:2e:5c:df:d2:43:f9:4a:95:
a3:f1:29:a8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHfg1eDiqyQ1hGys314FSfAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTMwNzIwNjgyNWQ5NjIxOGU3NGVjZDA4ZGQyZGQ5ZGRj
MGY5ZDcwHhcNMjYxMTE1MTQwMTI5WhcNMjYxMTE2MTQwMTI5WjAzMTEwLwYDVQQD
EygyMDdkYjFkOGI3YjEyNjU2NGJkYWM0YzhjNDQzMmYxOTljZmZkYTlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wWk9Y8L51PFtSKkr+vFW8fihbog
rUs6mGg4Cyxn4Y3zgcQV+wOJ4hhFPlr3/lvg7ANDp+DtQIh+TSXme8I2gEzFOCYp
Q3KaX760gSj0Yxlx8JIFaGz1pk/zLpxYkseNsvhqYAw9+KXbB9ef/wVOQPvkbFGU
GEPSUQU+oFckbUxcHGlyvuNazfVOqrEUq3/K3WP57zhhDk5sfng243P0aAO1C4BA
t3zVGx4bz0YjMEzr79+q1xUhgnLzF9H++wWKCORGjNSd2IH9/caZH+3bvQzdMAMP
Z77YGX76/dz5hFHZdZdMzdvM2DdysW7D26GsXhd63/GRMhgQyTtl97YOnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCB9sdi3sSZWS9rEyMRDLxmc/9qaMB8GA1UdIwQY
MBaAFDejByBoJdliGOdOzQjdLdndwPnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQt
NDI4YTUzMmFjZWYwLzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQtNDI4YTUzMmFjZWYw
LzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwE9+VUB
zqoZgZvMu+igJRF1Ftayyqyz+YPHRrh3d+ozRPMhYcucDr7lXqo2h8o0T+4BrMOI
OWNsW9cQXmDmcodwRgnN3OUuQWE5EsNIWW3m9QPRkxO1/ygJTDqortSpVxZnwC1X
bimabUqEg56HKQZ/QfDfA4RczDJQsDIHfQetW1NeWAM+jX78utoQBNQpRKGzEHTZ
HBtM/RLz93pnX1mxCXJs1sF/A328fZVZALbyx4vyUNuHz37lUZp8BwlbhL0xiMoY
RHmFzNLHKOQZvKDDyt2KUjkzL5mrcQOIKKR3E7fN7sFR+xSm61zdpOLKxHMRgS5c
39JD+UqVo/EpqA==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:20:55 2026 by rpki-client