Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft
File: N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft (raw, json)
Hash identifier: vdjMoaROWh4Ccx07YDtAz/o0MD4CbYBeNar/bBE0/3k=
Subject key identifier: 84:9A:A2:F3:53:7C:14:C6:7B:9A:9A:8B:55:BB:E8:14:83:1B:3D:6D
Authority key identifier: 37:40:E1:2E:51:A1:A0:81:C7:DB:20:39:8D:00:81:09:56:52:13:A6
Certificate issuer: /CN=3740e12e51a1a081c7db20398d008109565213a6
Certificate serial: 01A04273DFB5226245DE08D8B8EC892795BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft
Manifest number: 0169
Signing time: Thu 27 Aug 2026 09:01:25 +0000
Manifest this update: Thu 27 Aug 2026 09:01:25 +0000
Manifest next update: Fri 28 Aug 2026 09:01:25 +0000
Files and hashes: 1: N0DhLlGhoIHH2yA5jQCBCVZSE6Y.crl (hash: EXjRYyEVAHaNb36mbP+VugPe4FCNsV5/HTZBi+sBlg8=)
2: tged4nfV0p0VJ7ddkMzI5XeCJzM.roa (hash: xTwgWx7v3Rln3av3wOawAwpocRZw5iAdOFXXMflHbE4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 28 Aug 2026 08:49:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:42:73:df:b5:22:62:45:de:08:d8:b8:ec:89:27:95:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3740e12e51a1a081c7db20398d008109565213a6
Validity
Not Before: Aug 27 09:01:25 2026 GMT
Not After : Aug 28 09:01:25 2026 GMT
Subject: CN=849aa2f3537c14c67b9a9a8b55bbe814831b3d6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:57:2d:6c:ae:5a:3a:b2:a0:1f:8d:ce:17:
98:d8:e5:f2:5e:16:76:da:95:90:b6:af:fd:74:b5:
30:42:f0:13:b3:17:d4:28:af:7e:97:30:a8:0c:cb:
fb:7f:0f:a2:31:a5:ad:a3:07:bc:a5:f0:fc:cd:cd:
8d:6f:cf:4e:7b:c5:f1:da:e1:d0:cd:8f:e6:23:ef:
f4:1d:e5:ac:8f:d8:e6:49:0a:72:29:5a:18:8e:b4:
a8:a3:95:2b:8f:4c:5d:37:38:a2:9b:7b:f8:df:83:
0f:fb:11:89:31:ef:87:c9:0f:0c:f0:e0:06:a6:55:
97:3a:60:23:cf:0e:c4:b3:a3:ee:e6:d2:de:07:b4:
3b:be:ca:bc:65:1b:c0:40:50:0d:4e:aa:00:19:b1:
e1:e8:fc:5e:e1:62:dc:02:42:84:13:84:15:65:7c:
73:bc:67:38:84:dd:86:27:06:05:d3:0d:1b:0c:2c:
95:68:0a:17:d3:d0:73:db:5d:1d:8c:5b:17:69:78:
82:a4:29:53:15:53:3d:3d:70:22:de:d2:8f:15:7e:
5c:94:87:4e:f6:42:6b:b0:11:42:c9:0c:46:e4:bf:
76:9e:fe:99:cf:1b:ae:7f:d9:ea:d2:08:2a:6f:cb:
b1:ea:34:7c:e6:04:d2:e1:71:68:7b:f0:ef:96:1f:
68:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:9A:A2:F3:53:7C:14:C6:7B:9A:9A:8B:55:BB:E8:14:83:1B:3D:6D
X509v3 Authority Key Identifier:
keyid:37:40:E1:2E:51:A1:A0:81:C7:DB:20:39:8D:00:81:09:56:52:13:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/11fa68-8880-49b1-a122-22036e187eed/1/N0DhLlGhoIHH2yA5jQCBCVZSE6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:05:9c:a2:1e:c3:ec:b3:cf:af:39:82:5a:44:b7:bd:0c:d2:
fc:58:46:f0:f3:9a:86:d6:a5:cd:50:74:f3:40:23:af:7d:9a:
47:40:81:cf:17:80:1b:17:25:d6:21:4f:d7:9d:90:7a:c3:9e:
fe:51:76:04:39:b8:40:ae:0b:9a:0c:17:c3:60:0a:52:1f:2b:
78:8c:26:f1:36:db:b6:91:bb:ae:c3:8d:37:2a:25:a6:8b:f1:
b1:8f:4f:ba:2c:4e:99:13:d0:09:4a:a7:b4:42:b2:8d:6c:fd:
45:90:4e:8a:99:c6:eb:d2:ad:e6:a7:88:67:4b:69:17:a5:8b:
7c:9e:2c:54:e2:8f:11:22:19:c5:e9:e1:83:10:fa:1c:5e:b6:
fe:47:f9:ce:64:f5:ed:77:fe:fe:f9:02:e4:27:c1:ab:81:48:
15:c7:f1:98:2f:9f:5e:22:47:62:46:c5:c6:e6:af:8e:a7:5f:
97:0b:ed:6f:3a:12:70:ac:68:9b:3b:91:fc:ec:6a:08:a1:89:
ab:1a:b8:d3:64:34:3d:e9:cc:79:6d:5c:97:a3:a4:9c:c3:8a:
63:13:f4:d2:b7:c4:6d:c7:5b:b0:8e:69:57:d2:47:2f:1f:43:
b7:ed:93:0b:e7:c0:35:a2:bf:ca:85:d1:09:81:8f:23:00:4c:
74:21:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 11:01:14 2026 by rpki-client