Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier: Yu9P8S4d64wdXLrNmpSlIlDvYuOYf372gr73DNxdgzY=
Subject key identifier: 72:0B:0E:4E:BC:1A:4D:3B:3D:E5:86:F9:EE:26:FB:58:27:D0:AA:68
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 019D37C0346A25E5319D81D3FC4D8226AED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number: 0E3C
Signing time: Sun 29 Mar 2026 04:00:36 +0000
Manifest this update: Sun 29 Mar 2026 04:00:36 +0000
Manifest next update: Mon 30 Mar 2026 04:00:36 +0000
Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: WSGhdGiyV4X48j+w/ibUMZUm4iAD/96GAVw0iLjlxvE=)
2: U1i2p1mwMwcMPAenuBEHdijiIZE.roa (hash: AHlcD8BHVzzh2oESK4HUkXMAua5AnRRE5iMN+WNNbdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:c0:34:6a:25:e5:31:9d:81:d3:fc:4d:82:26:ae:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: Mar 29 04:00:36 2026 GMT
Not After : Mar 30 04:00:36 2026 GMT
Subject: CN=720b0e4ebc1a4d3b3de586f9ee26fb5827d0aa68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9a:4e:e3:62:98:68:d8:8f:5d:64:f7:64:44:
3e:9b:e3:d4:d2:6e:bd:5a:86:a6:63:2a:14:85:41:
bb:10:80:fa:99:4a:8f:db:1b:e1:3e:2e:87:c5:c6:
57:c0:50:b2:b7:de:21:e1:6c:d8:5f:4d:46:72:91:
5a:6a:84:6a:25:fa:7c:62:e9:51:d8:30:68:f5:2d:
68:81:98:e3:a6:92:f0:44:d2:6a:a2:d0:1e:76:ca:
2c:de:b1:b2:4b:33:00:0a:d4:51:95:ca:48:13:7b:
2b:41:7b:ef:46:1f:74:22:dc:d9:ee:02:2e:52:89:
45:e6:e0:73:7f:ce:8f:0b:74:3b:d5:6e:67:0d:14:
fb:b2:a2:24:c0:43:a2:cc:3b:1a:3c:8f:e3:11:19:
a2:af:b5:ec:f0:c7:94:dc:02:0a:e0:9d:8a:e2:c8:
fe:06:05:63:fd:bf:d0:75:ed:ce:c9:64:d9:b1:6e:
1f:74:c7:e7:f0:96:93:38:4d:5f:50:4b:e0:44:a3:
77:e5:5d:d0:fd:83:a3:18:54:60:54:bb:74:b2:e4:
c4:d8:32:a8:98:b4:30:c6:08:48:23:47:68:63:f3:
53:45:69:b3:b8:4f:96:fc:41:ce:08:3e:16:0c:48:
77:57:4b:26:a2:46:fc:f6:d2:a8:c2:32:77:f0:6c:
fc:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:0B:0E:4E:BC:1A:4D:3B:3D:E5:86:F9:EE:26:FB:58:27:D0:AA:68
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:30:d0:1d:22:69:3d:bc:e6:0d:c2:fe:5d:bc:a3:f5:4b:3f:
9f:42:4e:d1:83:7e:18:fc:5a:fb:c5:4f:fd:68:17:17:46:08:
0c:09:d1:f1:c5:24:af:9a:13:3a:44:72:1d:87:fc:5d:40:60:
7a:c5:b9:b2:23:53:57:9d:45:16:7b:e7:f3:95:db:0b:20:a0:
dc:e1:8a:70:61:b4:19:e9:8d:36:eb:e8:48:e0:a3:13:f0:64:
0d:b3:d1:bb:e8:b1:b2:79:f0:d6:af:b5:bb:ca:c6:8f:71:5f:
78:da:dc:c1:9f:1f:ab:db:42:20:6d:68:02:95:00:cb:3b:23:
09:54:6c:df:fd:bb:48:90:54:61:9f:5f:bf:2b:1c:b7:28:47:
61:14:5f:c4:05:e8:c4:ce:53:c6:e4:a9:20:b7:27:42:02:ef:
6a:d9:a9:2f:8b:7e:a9:17:1b:d8:e0:77:83:a9:08:1a:db:77:
e6:07:b7:72:95:3f:a6:86:86:a3:f7:e7:bf:87:df:1a:c4:f8:
ee:e7:26:da:51:b5:bb:01:a5:f4:ec:e7:c8:3c:8d:e5:8b:10:
15:85:d5:13:c6:92:6a:62:f4:4b:59:1e:6d:8a:b6:1d:bc:cc:
55:db:61:84:24:c7:09:92:62:18:50:70:15:2c:8e:67:68:8f:
18:7d:e5:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:44 2026 by rpki-client