Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: hj4wAkxXydIpDP47fHyFdi4HXhtROyTqAjjnp0tVFQc=
Subject key identifier: E8:F6:6E:25:89:1C:B1:E7:0B:06:06:3D:64:FD:1A:0C:57:BA:80:37
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 01A0E663DBC86C5818EB01EEA3C6EF182CFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: 02A8
Signing time: Mon 28 Sep 2026 05:01:39 +0000
Manifest this update: Mon 28 Sep 2026 05:01:39 +0000
Manifest next update: Tue 29 Sep 2026 05:01:39 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: cLnxsoLt6S1NkKnau5+8z2Cno2vpBRW06cF+Cd4zs8s=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 05:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:63:db:c8:6c:58:18:eb:01:ee:a3:c6:ef:18:2c:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Sep 28 05:01:39 2026 GMT
Not After : Sep 29 05:01:39 2026 GMT
Subject: CN=e8f66e25891cb1e70b06063d64fd1a0c57ba8037
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:38:26:08:62:04:40:9b:71:07:20:73:e5:9c:
47:d8:9d:7f:8e:9d:9f:86:cd:34:c5:8a:af:36:46:
07:7c:ff:19:22:92:19:62:8e:37:a7:b2:d8:aa:ca:
e3:1e:25:39:9b:30:d1:7e:b2:91:13:ef:0b:06:0b:
97:ab:cb:ed:02:ae:fc:ee:47:c9:80:ae:7e:bc:76:
de:c6:ac:c0:f0:7a:f7:36:7b:3d:74:fe:09:0f:23:
01:78:20:4b:cb:aa:bc:3a:c5:85:5d:36:79:fe:1b:
75:3d:b3:fb:84:21:0c:53:d4:d2:78:fb:44:1e:97:
a9:1b:58:c2:9b:cb:2d:a1:fd:3b:86:ac:f7:f0:8e:
94:0c:13:f2:76:13:41:61:20:4b:9d:64:1f:f4:0f:
5b:03:2b:54:5b:8c:30:c7:01:32:77:a1:ed:a3:c3:
6b:5c:c7:f6:39:9a:cc:36:cc:25:c7:f2:d3:0c:e2:
8a:cf:91:c1:45:23:69:4a:2a:4a:21:4f:66:f6:8f:
23:65:3a:bd:25:f6:8e:f5:eb:0a:77:93:8e:47:13:
ae:5a:4a:1b:70:f4:74:cc:76:91:9d:33:b3:43:83:
0a:1e:6f:1b:fc:19:0f:b5:e1:2d:7a:4b:1d:a1:f8:
f4:f5:75:a2:e3:88:cf:be:13:70:3d:2e:96:fb:09:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:F6:6E:25:89:1C:B1:E7:0B:06:06:3D:64:FD:1A:0C:57:BA:80:37
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:c8:ba:b5:c3:54:d6:b0:44:7e:20:f5:19:5d:f4:b1:90:40:
e5:80:3e:84:65:ac:6f:fa:8f:12:fc:f4:de:75:ea:43:55:42:
f3:e6:54:99:28:28:c9:1d:58:8c:33:df:5d:3f:54:c6:59:60:
9c:43:e8:68:64:43:a0:60:7c:84:10:14:49:6c:ce:89:cb:01:
23:ec:eb:f9:83:66:97:3f:1f:1c:7d:c6:29:5d:31:da:18:dd:
ca:99:60:38:06:ba:ef:5e:51:5a:79:7c:79:d7:a1:ab:0f:e7:
3c:a4:b9:ce:d8:74:27:c6:ae:ac:f3:e2:2a:e1:50:b4:63:11:
cf:55:74:a1:b5:aa:68:94:ca:c6:37:a2:32:83:bd:0b:cf:5a:
4d:6c:bf:ef:3d:af:7f:b4:52:72:49:50:3a:87:87:a8:d2:0f:
51:02:80:0c:cc:88:ec:08:8e:c5:9f:83:bc:6b:e3:d5:de:f5:
56:86:67:65:e5:c3:3a:91:de:aa:c4:77:71:99:91:71:08:a4:
f5:87:bd:c5:48:96:28:3b:2c:a1:d5:59:64:47:31:fe:47:00:
a3:d6:5b:96:ed:72:54:6d:dd:82:ab:8c:69:76:90:08:35:e2:
92:e9:37:1a:6f:5d:8e:9b:ca:b3:36:dd:bc:00:44:bd:57:78:
96:2b:d2:d0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDmY9vIbFgY6wHuo8bvGCz7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTMwNzIwNjgyNWQ5NjIxOGU3NGVjZDA4ZGQyZGQ5ZGRj
MGY5ZDcwHhcNMjYwOTI4MDUwMTM5WhcNMjYwOTI5MDUwMTM5WjAzMTEwLwYDVQQD
EyhlOGY2NmUyNTg5MWNiMWU3MGIwNjA2M2Q2NGZkMWEwYzU3YmE4MDM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jgmCGIEQJtxByBz5ZxH2J1/jp2f
hs00xYqvNkYHfP8ZIpIZYo43p7LYqsrjHiU5mzDRfrKRE+8LBguXq8vtAq787kfJ
gK5+vHbexqzA8Hr3Nns9dP4JDyMBeCBLy6q8OsWFXTZ5/ht1PbP7hCEMU9TSePtE
HpepG1jCm8stof07hqz38I6UDBPydhNBYSBLnWQf9A9bAytUW4wwxwEyd6Hto8Nr
XMf2OZrMNswlx/LTDOKKz5HBRSNpSipKIU9m9o8jZTq9JfaO9esKd5OORxOuWkob
cPR0zHaRnTOzQ4MKHm8b/BkPteEteksdofj09XWi44jPvhNwPS6W+wnC6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOj2biWJHLHnCwYGPWT9GgxXuoA3MB8GA1UdIwQY
MBaAFDejByBoJdliGOdOzQjdLdndwPnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQt
NDI4YTUzMmFjZWYwLzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQtNDI4YTUzMmFjZWYw
LzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVci6tcNU
1rBEfiD1GV30sZBA5YA+hGWsb/qPEvz03nXqQ1VC8+ZUmSgoyR1YjDPfXT9Uxllg
nEPoaGRDoGB8hBAUSWzOicsBI+zr+YNmlz8fHH3GKV0x2hjdyplgOAa6715RWnl8
edehqw/nPKS5zth0J8aurPPiKuFQtGMRz1V0obWqaJTKxjeiMoO9C89aTWy/7z2v
f7RScklQOoeHqNIPUQKADMyI7AiOxZ+DvGvj1d71VoZnZeXDOpHeqsR3cZmRcQik
9Ye9xUiWKDssodVZZEcx/kcAo9Zblu1yVG3dgquMaXaQCDXikuk3Gm9djpvKszbd
vABEvVd4livS0A==
-----END CERTIFICATE-----
Generated at Mon Sep 28 14:06:40 2026 by rpki-client