Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: u/gkx9DvRRO/bkttvJgwtzxkB8/fxRPduO4adLEfCeU=
Subject key identifier: A6:86:75:A0:BB:7D:F2:C1:A5:D8:23:B3:54:51:69:4E:28:F6:8F:DE
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 01A1355A691F7BF11E5314756C1D6A5AD835
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 154B
Signing time: Tue 13 Oct 2026 13:01:19 +0000
Manifest this update: Tue 13 Oct 2026 13:01:19 +0000
Manifest next update: Wed 14 Oct 2026 13:01:19 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: ZO7X3L2E9NUwMsvoN9ILHPnXEFakHP8rs/us9xSpn5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 14 Oct 2026 07:34:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:35:5a:69:1f:7b:f1:1e:53:14:75:6c:1d:6a:5a:d8:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: Oct 13 13:01:19 2026 GMT
Not After : Oct 14 13:01:19 2026 GMT
Subject: CN=a68675a0bb7df2c1a5d823b35451694e28f68fde
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:82:e5:72:1c:fa:68:c1:a5:fb:01:a6:37:ba:
a6:5e:ed:d1:b0:80:26:a3:28:fb:d5:45:80:89:04:
67:21:99:88:d0:96:27:3e:d9:a6:8d:93:a9:02:d9:
ea:3a:fc:69:70:40:12:63:ee:63:d4:20:a8:53:b1:
0b:a3:0c:0a:01:68:cf:d8:0c:ac:7f:61:a6:1e:78:
25:e0:f7:49:e8:a2:d6:a9:27:59:3c:1a:0b:49:64:
bf:cb:07:fe:d1:fa:be:fc:f2:19:4b:a1:f7:34:9a:
d0:d3:5e:99:9b:f4:07:07:23:64:eb:67:8b:b3:4b:
e3:33:d6:89:2b:a1:ea:b9:71:a2:ca:eb:01:6d:ed:
91:d4:ee:f3:73:cb:dd:11:bf:6a:ff:be:42:d5:6c:
ea:90:ff:81:7e:c7:84:e9:4c:f0:4e:4d:8d:10:fa:
50:6b:59:9d:ac:38:1a:25:a0:2a:c5:1c:16:54:ed:
70:4c:5d:c8:43:b9:e9:ac:d7:76:7e:54:62:23:08:
08:3b:16:fc:17:06:7b:22:b7:57:27:86:b3:9d:46:
2e:ec:d6:0c:5d:f4:f3:6b:a0:50:31:88:90:1c:f1:
ea:ee:8b:38:5e:1f:5c:14:ec:da:9d:c2:81:c2:cd:
67:3d:67:f2:09:65:db:d8:22:69:47:96:48:a5:e8:
46:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:86:75:A0:BB:7D:F2:C1:A5:D8:23:B3:54:51:69:4E:28:F6:8F:DE
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:6e:50:f3:4b:af:fd:ab:c1:69:40:89:f0:9b:87:5b:95:53:
e3:2d:cb:52:38:b4:f3:21:65:bd:28:a4:36:3b:01:13:b3:63:
63:36:46:29:46:91:62:12:52:77:cf:27:71:08:e7:db:8f:d1:
d8:ee:a5:e8:eb:ee:19:e4:f6:6d:02:9b:e8:1e:d8:d6:9d:6b:
eb:f4:87:90:b3:7f:6a:38:f1:9a:63:1f:5d:ad:1d:40:15:ff:
f7:32:26:23:05:f9:fa:87:df:73:79:53:19:19:d8:2e:fc:87:
0e:3a:46:ce:54:87:0f:6b:15:15:3b:93:f8:c1:37:ce:aa:00:
0b:8e:7b:37:9c:0f:e8:b4:38:db:e2:20:98:ce:a0:b2:f5:06:
5b:88:ca:6e:1c:9a:99:2c:3f:08:b3:4f:14:95:a9:14:a7:31:
be:92:07:2f:b4:be:a0:1b:62:7e:92:68:7c:9e:66:37:ec:8e:
fe:d4:66:ba:60:62:b0:9c:aa:40:95:6b:21:db:11:8a:f5:d4:
44:b3:a2:87:76:be:e3:71:9b:49:6a:24:62:f8:1b:15:9b:60:
d2:e7:dd:d3:ea:86:7c:2d:f8:7e:9f:a0:fa:7e:f4:f2:18:e3:
f1:22:63:80:2e:5f:e8:b5:cf:4a:bb:83:26:45:07:48:1c:c3:
e3:f7:af:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 13 17:32:55 2026 by rpki-client