Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: n7kg8adFnvAYsWiGbP96LWiJRvf5j0dbKv4e1fP5ung=
Subject key identifier: 7C:81:85:4B:71:96:97:5D:F1:CE:1B:73:6B:92:E6:BA:68:34:4D:BD
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019D0DE9345A224DA716C8493001B705774D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 15C5
Signing time: Sat 21 Mar 2026 01:01:20 +0000
Manifest this update: Sat 21 Mar 2026 01:01:20 +0000
Manifest next update: Sun 22 Mar 2026 01:01:20 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: ExkoFX9+pw5WIcA8WfxipCKqBu9kYs5zZbeFwtwbhaQ=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 22 Mar 2026 01:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:e9:34:5a:22:4d:a7:16:c8:49:30:01:b7:05:77:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Mar 21 01:01:20 2026 GMT
Not After : Mar 22 01:01:20 2026 GMT
Subject: CN=7c81854b7196975df1ce1b736b92e6ba68344dbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:75:f2:d3:60:c5:6f:f9:32:53:65:8e:c3:01:
02:a6:33:51:81:6d:ee:91:9d:41:d1:32:1c:a2:2c:
77:8a:a4:60:29:98:54:14:1b:e9:7f:e4:6c:01:20:
3b:90:2d:6c:96:0c:ed:11:45:d3:18:d9:f7:35:11:
c2:b6:ea:e6:76:20:aa:84:59:6f:a6:f8:34:2d:ea:
65:da:d7:67:03:6b:40:86:02:67:b2:f6:d1:6e:66:
e1:3e:fd:3c:23:50:dd:9a:b8:f9:02:fe:70:b6:51:
08:ab:b4:88:8d:30:19:9b:72:6a:d9:75:2f:14:cd:
15:e2:cc:7a:9a:ab:ee:56:e8:ce:be:0f:60:75:1d:
af:6b:35:03:86:fc:58:d9:2a:f2:21:5f:a1:9b:59:
0b:49:5a:3a:80:8d:72:30:c4:30:d2:fa:3c:0b:bb:
c3:66:7d:98:e3:61:6d:76:51:36:e2:31:43:42:0b:
bf:6f:35:85:57:9b:cc:d9:5e:30:43:da:99:a6:6d:
74:ed:0c:b7:b1:b7:fa:89:c9:2a:81:0b:85:21:1d:
39:48:17:69:0f:b2:af:b2:8a:fd:40:b3:13:20:38:
a6:d7:97:76:52:c7:28:d4:d9:22:3e:27:bb:58:68:
aa:fb:0a:2f:af:08:ae:22:a5:d3:63:7b:0b:93:02:
1c:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:81:85:4B:71:96:97:5D:F1:CE:1B:73:6B:92:E6:BA:68:34:4D:BD
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:25:b4:6b:fd:f8:f1:1a:8c:e3:7a:d4:87:1d:1b:28:87:76:
3e:3e:b9:69:0a:63:f1:b8:c5:02:84:e1:d7:8f:04:fe:90:db:
0e:39:33:87:3c:e5:a1:46:b9:bb:fe:43:b5:f0:69:40:75:f3:
50:53:e6:e9:8c:fe:0e:b4:42:cd:ac:75:3f:58:a2:17:d9:88:
23:34:04:7e:cc:b3:b9:90:ff:70:37:78:ad:69:5b:89:eb:51:
53:70:78:e7:2b:54:db:84:c0:b3:ef:9b:2b:1c:3b:01:25:04:
03:99:e5:e4:54:ff:30:ed:2f:a3:92:05:bb:ae:59:c1:f0:27:
2b:cb:d4:cb:07:8e:b8:68:b6:ca:f6:3e:6b:c3:ae:da:5f:85:
5b:7e:ea:9c:8f:3e:40:16:ff:2e:e4:78:ea:d3:32:06:15:db:
05:b4:43:ef:6c:b2:4b:ff:dd:fb:01:21:b1:1b:32:5f:49:d0:
15:78:bd:3a:4d:72:b8:d3:2f:cf:40:dc:bd:bc:f7:b1:36:6d:
26:dd:c4:cb:98:fd:07:53:21:29:db:d1:10:22:99:6b:6f:f5:
2e:8d:fd:3e:e8:e4:78:ee:ca:d7:d9:9a:ee:e2:d2:7c:03:30:
98:35:a3:4e:58:d5:b2:38:0a:d0:00:d5:65:6b:b5:eb:4d:24:
27:6b:6a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 08:07:26 2026 by rpki-client