Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: fNGPHNCDAcBNjdRiFSUkEmM0qMLkSt/RWYbARdSzJCQ=
Subject key identifier: 92:70:0A:FC:F4:04:94:28:10:F4:26:EA:FC:42:2C:AC:92:2D:B3:D2
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 019D39411B004E61C64710A48A8DA8115985
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0D28
Signing time: Sun 29 Mar 2026 11:01:01 +0000
Manifest this update: Sun 29 Mar 2026 11:01:01 +0000
Manifest next update: Mon 30 Mar 2026 11:01:01 +0000
Files and hashes: 1: 4TPc3m07IptozaAS-Sg6u70wBY8.roa (hash: Ub9VBi2JJ0n1uK8GpU4txhHGzf/S6oXYoNYi6ksYIpM=)
2: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: 1lwLzxvhwuKwMv1rL5VsSKiInS6TLcyuDXi2prFhLt4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:1b:00:4e:61:c6:47:10:a4:8a:8d:a8:11:59:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Mar 29 11:01:01 2026 GMT
Not After : Mar 30 11:01:01 2026 GMT
Subject: CN=92700afcf404942810f426eafc422cac922db3d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:79:70:9f:74:b8:a0:7c:f0:94:d3:75:eb:ca:
b3:3d:49:76:c7:13:13:23:53:46:7d:b9:d6:c7:91:
a6:74:0c:3b:16:62:8e:89:34:a1:44:2d:30:da:86:
79:f5:7a:27:dc:e2:2f:ee:10:01:5b:81:9a:a1:ad:
e8:cd:66:ca:06:97:a7:13:1b:a6:21:8a:f2:2d:a4:
33:ca:ea:1a:86:26:74:6c:10:e2:28:75:70:7d:c8:
5a:2a:b2:4d:23:3c:91:b6:1f:08:d1:99:f2:5d:33:
cf:43:bc:40:a0:9e:b7:d9:47:50:b9:ae:64:e2:f5:
c9:00:a3:6b:73:5b:a8:c5:c1:69:de:34:21:b4:c4:
5e:9d:9b:9d:c7:b0:be:67:e5:b8:de:44:b9:25:8d:
e0:d8:0f:b4:37:4d:db:a0:93:1e:f1:98:76:c0:34:
09:4d:13:8f:14:a6:83:8d:88:1f:65:5d:dc:57:52:
56:31:7b:ec:c0:49:2a:ae:9f:97:5d:c5:df:0d:04:
24:b0:1a:12:1d:88:1a:b6:3a:f8:a2:e3:8f:cd:13:
e0:b2:aa:53:ed:28:5d:fc:c4:ba:e0:00:3f:4a:81:
ca:19:0e:ee:0f:0a:fe:f0:c2:24:af:ca:b6:12:cb:
f1:ea:08:4e:ea:fa:b5:66:29:20:1e:5b:26:c8:51:
7a:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:70:0A:FC:F4:04:94:28:10:F4:26:EA:FC:42:2C:AC:92:2D:B3:D2
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:56:d7:64:c2:b7:57:e8:8f:73:1b:9b:3d:9b:85:07:26:e2:
46:13:47:0b:a0:d8:34:19:2a:99:ae:b7:86:7b:e4:c3:54:05:
dd:b6:fe:ae:5d:47:af:d5:0e:e1:b2:8e:b5:ae:72:73:58:84:
64:b7:5c:f3:61:2b:2a:46:97:fa:78:cf:3f:89:74:8a:d8:60:
c7:78:cf:b4:0f:42:66:f2:ff:39:21:c6:fc:02:f9:62:df:35:
68:4b:20:1a:31:16:b6:47:35:9e:a9:75:07:5a:ec:23:e0:cb:
9a:1b:f7:0a:f2:9b:53:b1:cd:bb:69:a7:6e:43:bd:62:bf:b2:
cb:f7:c4:6e:3d:43:c3:40:75:60:88:aa:0d:fa:41:3f:d0:91:
52:b8:7f:f2:d8:2a:77:c7:28:68:71:53:f1:f3:24:4e:08:5d:
30:19:bc:5f:b5:e6:83:a9:d8:de:8d:93:09:78:f0:24:79:c9:
af:7c:c8:5c:34:f3:49:50:cc:b4:22:52:1e:fe:b6:8f:ea:38:
1f:b5:b4:61:a2:bf:9e:a1:df:74:87:a1:ae:12:f2:da:d7:76:
19:ad:2a:97:e4:28:7e:dc:57:05:ae:9c:43:0e:cc:3c:26:67:
a2:85:28:e6:48:84:6a:44:14:91:d6:22:ee:c4:3b:3a:52:b4:
01:29:0d:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:05:36 2026 by rpki-client