Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: 0ZHiowuzdUykK+XyEmXUClfyYJ5hoS4b85EiJFAsx2g=
Subject key identifier: 77:54:AA:13:B3:2D:42:B6:02:2B:41:A2:CD:FB:17:FE:7F:D1:D2:66
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019D352D42F327A3F67407E3E4C1A8DC8502
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0845
Signing time: Sat 28 Mar 2026 16:00:51 +0000
Manifest this update: Sat 28 Mar 2026 16:00:51 +0000
Manifest next update: Sun 29 Mar 2026 16:00:51 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: RCvfJ0mNWPaYXEABAy1jfytsCZmVO6KYG29C9WFA9/A=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 16:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:35:2d:42:f3:27:a3:f6:74:07:e3:e4:c1:a8:dc:85:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Mar 28 16:00:51 2026 GMT
Not After : Mar 29 16:00:51 2026 GMT
Subject: CN=7754aa13b32d42b6022b41a2cdfb17fe7fd1d266
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:9d:01:ce:85:09:70:5f:23:12:7c:44:14:de:
35:c2:74:bd:12:39:04:85:6a:2e:2e:10:04:15:3f:
33:e5:4f:5e:18:03:4c:be:e6:1c:63:4a:95:59:29:
aa:8b:8e:d1:ec:12:b1:9d:53:90:1b:93:a4:10:fd:
f1:d9:37:45:b0:7a:e0:77:cd:ed:3b:d9:b0:d3:41:
f8:a4:f9:d0:4a:e9:13:42:b5:e5:4a:7d:66:e4:76:
59:d4:ee:90:2b:02:b5:9e:61:ea:b0:d3:60:7f:ad:
74:f5:40:a2:b9:b2:9e:12:36:28:65:4a:43:04:69:
3a:3c:40:e1:26:88:35:35:35:74:ac:ad:09:d6:cb:
41:95:75:29:f2:a3:e4:fb:67:bd:ab:bf:45:f6:4e:
be:75:cb:ef:58:8b:2f:06:f5:f8:59:f6:41:d5:af:
ef:0e:f5:33:30:19:63:82:42:46:41:bb:47:bd:8d:
2f:30:3e:f8:74:4d:0e:ad:4b:cf:a3:cf:e3:3e:41:
fb:f1:78:11:51:0f:0f:20:79:99:9a:47:18:2b:a1:
e3:be:74:db:8b:c2:f7:1c:f4:e8:6b:e3:9c:8c:a0:
5f:bc:c4:55:8d:b7:b2:df:44:88:1c:0a:3e:db:a8:
cd:1e:44:92:9e:f5:bb:94:35:de:36:79:93:0d:1f:
1d:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:54:AA:13:B3:2D:42:B6:02:2B:41:A2:CD:FB:17:FE:7F:D1:D2:66
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:a9:9a:1f:17:6b:ee:05:d5:e1:a5:de:3d:eb:c6:0b:b0:06:
49:0f:db:0d:d6:6e:05:ef:d5:fa:25:c5:00:e0:ff:87:c6:5b:
7f:ca:94:ec:ba:05:20:7f:ca:8c:64:e6:f3:e9:44:eb:b9:25:
43:01:bc:eb:84:fe:18:2a:98:7f:d9:28:5d:a0:06:a1:38:69:
fd:4e:8f:03:6b:4c:59:75:be:51:40:f0:1b:46:29:5d:5c:3b:
4e:32:90:e9:8c:9d:da:e4:ae:1f:7f:01:6a:95:e8:0c:7e:10:
81:7d:36:54:2d:d2:f5:4e:fe:68:a4:c7:23:79:c5:47:8e:06:
d5:d4:2e:ca:96:f0:f6:95:e6:2d:84:d3:7d:b1:72:08:28:df:
dd:38:15:19:bd:43:b3:8b:39:1a:2d:38:f2:97:fe:a9:d8:72:
a5:72:0b:58:ac:58:c5:c6:d7:07:0b:e6:f0:8d:81:df:dc:0a:
9b:09:06:2d:d7:80:c4:e3:bb:b3:c0:aa:28:dc:fa:12:04:67:
24:01:21:98:c0:a7:61:1b:87:72:73:8f:d2:d7:dd:0e:66:d8:
a5:be:aa:87:c3:87:b0:d8:4c:99:8e:ab:8c:5e:cc:2b:c4:87:
da:f0:c4:47:5b:30:df:5b:be:43:49:2d:5c:22:a9:b8:c6:2a:
ca:4d:c4:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 03:08:19 2026 by rpki-client