Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier: 6B2uG9Q8Os+CrY464wuyj/7yrW3hPajkvn/VRGB78yg=
Subject key identifier: B9:F3:52:B9:CD:27:FB:60:60:F8:D5:48:1C:08:CD:75:64:CA:E2:60
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial: 01A199C62A5954CEFB47EF03C0D5DE9B8979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number: 146C
Signing time: Mon 02 Nov 2026 01:01:03 +0000
Manifest this update: Mon 02 Nov 2026 01:01:03 +0000
Manifest next update: Tue 03 Nov 2026 01:01:03 +0000
Files and hashes: 1: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: n+Vqhc53cVU9uzvzqc4PMJ61ufDiTePklD/5ef/XYks=)
2: Ylv10vSg516VZiCHF-V4XQ_Q1lM.roa (hash: n4eisXfR10vCp8bRVZ+o+LnCZlLeQphgEpVjncPOq/M=)
3: taxylqt92XTRMNCLEumj-gGuc9E.roa (hash: 0T0KeKHGFppSjei5UxW0JsFkblLexOctRs4/cKSBPqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 21:02:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:99:c6:2a:59:54:ce:fb:47:ef:03:c0:d5:de:9b:89:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Validity
Not Before: Nov 2 01:01:03 2026 GMT
Not After : Nov 3 01:01:03 2026 GMT
Subject: CN=b9f352b9cd27fb6060f8d5481c08cd7564cae260
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:a0:0b:26:d6:58:9b:77:27:cb:8a:f7:1a:5a:
28:31:a7:b5:f8:a8:b7:0d:f0:b3:34:08:36:fb:f8:
86:83:25:7d:7c:2f:70:96:05:4c:45:f9:06:8e:cc:
10:ee:d1:f4:d2:ac:06:22:60:c2:c3:09:76:23:6e:
21:70:ff:eb:33:a8:ee:ca:9f:ef:a8:24:c8:f7:b7:
06:0a:c6:3e:e8:17:3f:8e:c3:14:6b:0d:71:c8:7b:
db:37:8a:50:fa:e9:82:f4:73:96:b9:7e:57:59:73:
37:92:9a:ca:51:3d:31:5b:42:ec:a2:ef:60:63:7f:
c8:27:c5:69:00:66:d8:be:0b:58:59:f7:5d:7e:87:
6f:ca:2a:22:29:00:11:67:05:cd:c5:32:0f:ec:c0:
b2:0c:d3:c6:4a:80:9c:17:46:f8:99:b4:b2:32:ce:
f6:9c:0c:c8:61:9d:66:65:ce:61:4e:3b:9e:8b:b2:
5d:8d:37:f3:63:d0:3c:03:e5:e4:66:73:79:d4:e3:
ed:c5:ae:ad:e4:b4:a7:9d:60:66:ef:ad:23:e6:75:
1e:aa:09:e8:13:28:dc:5f:67:30:c0:04:2a:3d:26:
59:db:a9:60:33:e6:e9:b5:28:7c:bd:9d:bf:e5:17:
6a:07:73:2e:e5:34:8b:37:74:f7:b7:72:1b:07:77:
6b:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:F3:52:B9:CD:27:FB:60:60:F8:D5:48:1C:08:CD:75:64:CA:E2:60
X509v3 Authority Key Identifier:
keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:f2:a8:75:91:4a:80:ed:eb:de:38:cc:00:45:53:e6:f7:1e:
8c:87:94:f5:06:17:e8:02:a0:66:83:63:c1:75:77:17:12:ec:
92:58:6c:6b:6f:08:55:d0:9f:9b:80:21:95:96:fe:4f:ba:c7:
d4:17:3a:cc:2d:38:6e:2c:76:5e:16:49:87:14:b9:b7:9d:e9:
95:30:79:c5:de:cd:c9:bb:2e:d0:2d:42:b7:1d:16:c4:43:32:
f5:56:a9:c9:4d:16:1c:92:84:26:af:7a:97:98:a9:68:f3:7e:
81:28:5e:d1:dd:45:3b:69:1e:84:bd:18:32:8e:07:4e:e9:49:
60:eb:1d:be:17:0a:2c:96:44:0c:f3:c8:3f:5f:66:52:c6:93:
e9:c2:c0:8f:d0:15:72:cf:a4:ab:da:4c:26:90:ed:43:05:71:
47:0c:23:69:cc:d0:12:ce:ed:f9:a9:59:dc:e0:c2:87:e5:15:
3f:ee:c3:39:e2:de:c4:68:db:8c:db:26:ca:bd:35:13:5e:cd:
34:8a:ae:8c:66:9c:92:0c:34:6b:99:47:f7:31:31:f8:a4:79:
55:6f:26:69:f9:84:52:8f:b9:1b:57:4d:1d:a9:d6:a9:a7:d9:
cb:3c:d9:3b:04:cd:97:b3:d9:e6:43:31:19:de:7c:49:49:d8:
aa:46:8f:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 2 06:59:45 2026 by rpki-client