Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: 3SMsIo782FdvzFX47j5h5jjQZWmyWK6nkS/d4fNTX4g=
Subject key identifier: C7:7A:96:3E:0B:F5:77:0C:85:4A:7D:C8:68:A5:04:91:22:76:AB:15
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 019D3940BC5B6D7AB1690F29FBFEADFCACF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 0E1A
Signing time: Sun 29 Mar 2026 11:00:36 +0000
Manifest this update: Sun 29 Mar 2026 11:00:36 +0000
Manifest next update: Mon 30 Mar 2026 11:00:36 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: NUnCLleqHs/nqYn6KwubzL6MgLx5ensSQ69tfWGDZwY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:bc:5b:6d:7a:b1:69:0f:29:fb:fe:ad:fc:ac:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Mar 29 11:00:36 2026 GMT
Not After : Mar 30 11:00:36 2026 GMT
Subject: CN=c77a963e0bf5770c854a7dc868a504912276ab15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9e:ef:d4:2c:70:dd:43:fa:5c:f9:31:02:e5:
cd:71:51:0b:ad:f2:59:07:b7:43:f8:d9:ea:a4:c1:
25:48:d3:a6:b8:ba:65:ad:ef:89:4b:f4:8a:d6:c0:
65:64:f8:ea:06:12:ad:43:29:8d:c8:78:d7:ba:0d:
dc:0a:c2:18:4b:50:73:4f:3f:37:b8:ed:21:63:ea:
ec:a1:87:0d:f5:63:17:b0:9f:d8:3c:30:e9:78:8b:
0f:0a:bd:69:a4:ad:84:6a:54:ff:b5:d2:d8:c5:23:
ff:0c:1e:ce:47:4f:a2:c4:0e:ee:a1:da:56:28:63:
93:18:02:3b:77:3d:6d:fa:1b:62:04:cc:bf:1a:db:
cf:eb:4b:f9:e1:6a:39:c5:17:2d:2d:48:18:16:55:
f9:14:e1:a1:3a:e8:35:b3:73:3e:04:94:08:fe:d1:
d0:79:1b:2b:b3:51:55:9f:26:a8:24:84:bc:ca:14:
b7:e6:6f:11:7e:de:55:f1:0b:ef:bf:1d:71:de:8f:
28:94:e6:24:2b:5c:33:e5:7f:19:76:84:32:43:46:
a0:15:fc:24:9f:23:57:5c:e2:b5:66:52:67:96:25:
6d:17:65:62:d3:29:b5:79:0c:01:67:32:86:39:38:
d5:65:29:1a:b0:6b:92:33:11:d6:65:89:76:f8:88:
47:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:7A:96:3E:0B:F5:77:0C:85:4A:7D:C8:68:A5:04:91:22:76:AB:15
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:9a:d0:28:e6:19:b9:5c:28:7a:c5:da:2c:68:84:3b:e9:ab:
b8:aa:fc:cf:f2:9b:db:71:dc:0f:8c:c1:4f:4a:b2:b9:92:9f:
da:a8:40:6b:09:37:41:b4:6a:e9:e6:6b:e0:1a:29:88:0c:43:
07:22:d3:84:bf:7d:ee:9d:e6:ee:c7:b4:cc:a3:15:5f:fa:7d:
0b:f2:f5:00:1a:79:0a:07:ba:8f:ec:77:24:da:09:a9:f1:97:
e3:a2:6c:d8:23:48:7f:f0:dc:44:ac:3c:77:75:ec:f6:5f:38:
4c:94:db:2b:06:05:d5:97:ff:69:4a:87:df:59:d1:36:a7:d0:
fd:78:4d:3d:50:cc:f1:42:9f:4a:d4:86:f8:ff:24:e3:b2:92:
29:d4:35:c5:64:e8:13:ed:7b:cd:98:9a:29:d7:b1:2a:91:03:
9b:d3:92:01:0a:c1:7d:7d:22:50:62:ce:1d:60:1e:14:4a:6e:
fd:4b:ba:be:0c:02:fa:66:0a:c9:3b:fa:ba:7e:04:3d:c4:91:
f9:51:8c:7f:2a:b4:3f:b4:dd:14:1a:4e:24:36:5d:f1:ef:12:
7b:d7:56:44:a2:d4:a9:bf:a8:d0:2c:3b:50:99:39:7d:ac:4b:
ae:94:a4:7d:a5:01:43:39:17:ae:b6:91:fb:72:63:02:b9:eb:
e2:95:9c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:55:27 2026 by rpki-client