Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
File: N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft (raw, json)
Hash identifier: FlhWm8oFCtRhA2bftEEP1izg07CPztwbpisIaoODVrU=
Subject key identifier: 9D:AF:95:90:09:D1:D6:D8:C1:3B:27:FE:8D:52:79:86:4D:05:EA:C5
Authority key identifier: 37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
Certificate issuer: /CN=37ca50022828d901bf42b2798f7844104b05404d
Certificate serial: 019D38D3068DBEE99CE025F0D8B77017998B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
Manifest number: 0CA5
Signing time: Sun 29 Mar 2026 09:00:46 +0000
Manifest this update: Sun 29 Mar 2026 09:00:46 +0000
Manifest next update: Mon 30 Mar 2026 09:00:46 +0000
Files and hashes: 1: N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl (hash: yCm/WW4a5QxtdWF4vbC48qJOTBikzjCM54LG0G5MneA=)
2: T8qj0TqqRzvgZV6bToFz4c0FM-4.roa (hash: RUkC3kCoEXyWtFRshNXK5Ou2vFrdu7iWv96bVF4GwyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:06:8d:be:e9:9c:e0:25:f0:d8:b7:70:17:99:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ca50022828d901bf42b2798f7844104b05404d
Validity
Not Before: Mar 29 09:00:46 2026 GMT
Not After : Mar 30 09:00:46 2026 GMT
Subject: CN=9daf959009d1d6d8c13b27fe8d5279864d05eac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:dd:3f:94:51:fc:24:ed:05:0a:97:45:b2:c5:
18:c2:2b:78:2b:dd:6f:a7:01:30:3f:fc:66:08:cc:
4a:c3:f9:89:40:a3:9c:30:bb:f0:7e:ad:39:05:9d:
b5:41:ad:c4:d3:5e:b4:f7:44:d9:fa:b8:d7:b2:25:
b2:78:a3:ae:4e:f8:04:cd:80:94:c0:e1:a2:1c:59:
8b:b8:7f:af:76:8b:86:ae:8d:64:32:84:3b:e8:10:
5c:f4:33:63:bf:7d:08:ee:ba:0b:c1:73:a4:f3:43:
4e:55:b0:8d:54:f0:cb:6b:3d:72:f7:c3:ed:eb:11:
46:e0:52:ac:6c:e4:7e:c2:0a:42:bc:9f:28:e9:1f:
1a:3a:21:01:c3:62:af:ad:1f:06:62:d2:11:10:51:
e3:21:5f:6f:64:83:62:88:22:d9:97:18:af:42:92:
59:0a:61:6a:f2:3b:50:57:71:99:3d:f7:dd:1f:08:
dc:be:75:e3:48:1f:76:f4:85:70:e4:a5:d5:ce:a5:
86:1b:e4:f9:cf:77:2c:c5:fa:e3:1e:8b:82:e0:e3:
c0:15:3b:a0:28:ed:78:06:06:83:5c:0d:6a:c7:55:
17:8e:6a:f4:ad:2e:41:79:9a:38:8b:78:b1:c1:74:
8c:4b:82:4a:f8:4a:ab:28:b8:c6:a6:7b:93:55:bd:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AF:95:90:09:D1:D6:D8:C1:3B:27:FE:8D:52:79:86:4D:05:EA:C5
X509v3 Authority Key Identifier:
keyid:37:CA:50:02:28:28:D9:01:BF:42:B2:79:8F:78:44:10:4B:05:40:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8pQAigo2QG_QrJ5j3hEEEsFQE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/ef9498-44f4-4ffd-844f-5c830fe4bad0/1/N8pQAigo2QG_QrJ5j3hEEEsFQE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:d7:94:3c:36:f6:9a:82:c4:cf:94:86:13:5b:ee:b0:b9:83:
75:2f:40:b2:07:18:13:df:1a:80:7c:3a:0d:44:9e:7a:45:a0:
13:3a:dc:06:21:a6:6c:a4:a5:9c:24:f1:d9:1a:2a:12:5e:f0:
82:2a:21:d8:1d:e0:e0:25:0a:d5:68:6c:7c:b7:cf:a8:5a:05:
26:00:ab:5e:e5:51:39:bf:35:57:9e:5c:7a:9b:82:08:e2:b1:
bb:9d:8b:cb:cb:8f:3d:a1:48:1f:c1:f6:12:e4:9d:d7:47:a0:
0f:26:1e:91:bc:db:82:16:68:a7:38:c7:03:dc:dc:26:36:21:
07:e5:c6:42:5b:7b:ad:34:8c:dc:c5:aa:13:0e:0a:cf:85:33:
88:b8:52:b3:8d:5a:9d:05:f8:8b:3d:89:15:a9:59:d7:09:6f:
c9:fd:bf:ac:65:16:51:6a:f1:e6:76:d7:4f:2b:f7:62:3e:18:
10:0a:ab:db:17:44:68:56:41:4b:bd:43:b0:b0:5a:e3:28:7c:
5a:73:ce:7c:70:de:e5:3e:51:a5:3d:19:98:60:fe:2d:01:27:
69:1b:52:a6:b7:62:a3:9f:db:17:d0:d8:b2:84:81:05:92:21:
0a:58:ce:a9:ad:39:7a:10:e9:66:db:c1:e6:86:f3:a4:f8:41:
29:63:5c:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:09:26 2026 by rpki-client