Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: 9yxB9jfeQnCSq/bw0gJZDAV38lWwrydv8gbLBKD+NJ4=
Subject key identifier: 9B:ED:92:E4:40:7D:BE:D1:F6:30:43:DD:2F:D5:69:FA:7B:1F:A7:08
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 019CE1473FB4FE0EAB0DB7A30ABA1816E850
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: 93
Signing time: Thu 12 Mar 2026 09:01:08 +0000
Manifest this update: Thu 12 Mar 2026 09:01:08 +0000
Manifest next update: Fri 13 Mar 2026 09:01:08 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: 7egjYis1rgmG3L1nriKJ3+RDiO1qFVQvkfioX6c4SYw=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:47:3f:b4:fe:0e:ab:0d:b7:a3:0a:ba:18:16:e8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Mar 12 09:01:08 2026 GMT
Not After : Mar 13 09:01:08 2026 GMT
Subject: CN=9bed92e4407dbed1f63043dd2fd569fa7b1fa708
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1b:59:89:a5:ad:c3:83:d2:13:5c:09:db:69:
55:20:5b:39:4f:7e:8b:23:23:52:00:1f:ba:50:e6:
1c:2a:92:7d:8b:92:84:18:e4:f3:cf:6f:1d:53:80:
35:68:c3:15:56:a7:40:1a:32:c2:54:40:62:4f:70:
b3:b4:24:e7:c3:b3:50:bc:13:b1:c6:05:b8:f9:5c:
16:e0:8f:fe:d7:c3:71:16:e9:13:22:f4:17:62:90:
9f:45:62:80:51:a3:61:5c:2c:cb:4e:fd:c3:b4:25:
e6:e9:7c:3d:c6:10:34:bf:c7:e3:a7:5a:9f:24:9b:
cf:d1:ee:1e:7a:a0:14:b3:4a:0c:1a:3e:66:5f:5f:
17:34:24:95:16:22:6b:2c:6b:5c:44:fa:6c:48:6f:
25:7e:40:05:c0:f3:36:24:24:5b:87:0d:5f:cd:82:
93:b7:45:74:6c:73:10:fc:1f:ac:9f:3f:e1:da:37:
24:13:3a:58:63:6f:26:0e:5b:b1:fa:7b:d7:84:81:
81:79:fe:95:9c:32:c9:d3:dd:ce:05:af:f6:da:36:
45:8b:30:61:00:d9:47:3d:63:4d:44:8a:b7:ae:f8:
0c:fd:86:bd:ec:56:f5:6b:ae:8b:e1:3c:77:0c:d4:
e9:7b:7d:94:e5:43:62:88:85:f5:b2:e4:95:4a:bf:
8d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:ED:92:E4:40:7D:BE:D1:F6:30:43:DD:2F:D5:69:FA:7B:1F:A7:08
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:3b:e4:42:64:47:46:35:bb:ab:2b:15:a9:ef:6f:a3:95:1c:
41:91:1c:d4:bb:71:c8:c1:fd:0f:0c:01:de:8c:18:a6:d1:8b:
84:4d:cc:06:b6:a8:4b:da:7c:33:c8:36:7f:24:b8:10:80:48:
6e:d2:09:13:a0:ac:9e:a4:3b:54:67:82:dd:59:08:d8:58:61:
be:5b:4e:c6:f2:98:b8:77:7e:53:44:3c:23:2d:a0:02:19:87:
02:b2:49:f9:0f:15:a9:fc:6d:56:18:bb:01:b9:4f:bd:3e:5b:
8c:c0:3c:24:6c:95:e5:82:03:d0:ff:5f:5d:f0:67:14:0b:e9:
ca:97:96:f7:01:59:26:e7:24:82:93:19:01:0b:d5:82:b5:fb:
fa:d1:50:42:66:84:8e:bb:dc:48:6c:8d:1b:9c:d4:05:04:91:
fa:1b:ef:39:2e:a0:a5:9f:f1:4e:79:f6:42:50:da:70:af:0b:
ed:c0:82:02:02:01:8d:2e:24:d4:90:4d:50:a0:d0:78:a0:b1:
b6:62:1a:7c:da:53:72:05:69:5d:b5:7f:b7:75:07:94:fa:b3:
78:88:5c:71:ad:d3:08:66:ed:ec:9b:a0:6e:8c:58:68:3b:01:
87:2c:85:4a:b3:c1:f2:0a:82:00:6f:71:40:c9:d9:29:a5:ad:
76:75:dc:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 15:50:02 2026 by rpki-client