Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
File: N9IJppWeI1T3POLyuUEib4MpDIw.mft (raw, json)
Hash identifier: ZLc10h5FiX+b7SebpSTd1oMjNEK4TboC72yVQe3Dm08=
Subject key identifier: 09:DA:1D:E3:2A:85:FB:AD:F5:3C:29:69:29:38:90:10:AF:58:F0:2A
Authority key identifier: 37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
Certificate issuer: /CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Certificate serial: 019D3865F53B3E2A726099CB2FF8D0D593E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
Manifest number: 0345
Signing time: Sun 29 Mar 2026 07:01:39 +0000
Manifest this update: Sun 29 Mar 2026 07:01:39 +0000
Manifest next update: Mon 30 Mar 2026 07:01:39 +0000
Files and hashes: 1: N9IJppWeI1T3POLyuUEib4MpDIw.crl (hash: Ts05NP0fN8NF6C9Uhs4eGMpjQsvpzEL/gj0osLPVkpc=)
2: czKSPCCshe_dDSbHHG45r9I_rso.roa (hash: ZmpNSaMc8ilnubHI16mYkmGjrHKzVWSmxUhSzVqLWvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:f5:3b:3e:2a:72:60:99:cb:2f:f8:d0:d5:93:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d209a6959e2354f73ce2f2b941226f83290c8c
Validity
Not Before: Mar 29 07:01:39 2026 GMT
Not After : Mar 30 07:01:39 2026 GMT
Subject: CN=09da1de32a85fbadf53c296929389010af58f02a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:cd:d8:eb:84:af:37:64:9c:f3:a4:2a:cc:83:
c3:7b:b4:0d:ad:e6:cb:72:f1:c8:b9:2c:31:ee:a8:
6a:25:84:5f:9e:07:f6:54:8d:c6:8e:e7:50:2f:30:
59:9b:6f:fa:13:95:db:64:47:ca:97:67:ec:5d:10:
f3:f8:42:74:a5:cf:d6:0f:9b:14:7d:38:f2:6f:94:
c5:a7:e8:17:88:9b:be:f3:98:9c:40:f6:f8:d5:df:
12:ef:f9:19:33:7f:e9:b0:0f:ca:ac:f1:48:95:ac:
92:a0:7e:2a:9a:9d:cb:86:c8:de:c3:6e:5a:c0:1a:
ba:dd:3f:da:78:1f:f1:c8:e2:46:20:23:ca:8f:07:
3d:f4:d7:61:cc:cb:2e:24:2c:1b:a9:3c:81:a8:65:
dd:b4:ed:9d:a4:1e:8a:6f:61:11:0f:e2:e1:a8:b6:
09:70:1f:c1:ed:1a:73:16:ee:f1:78:91:42:73:13:
5a:5c:b8:a2:48:26:aa:2a:1b:52:da:3f:78:80:11:
40:9d:ba:91:df:10:62:9b:ee:ad:58:0a:e2:87:f0:
63:f0:d6:18:40:4a:0f:95:83:9c:0b:c2:10:f6:e8:
68:20:1a:b6:3e:79:01:3d:67:29:0c:e8:7e:73:06:
a5:67:eb:cf:de:14:72:b0:1f:41:b7:dd:66:f6:5e:
2f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:DA:1D:E3:2A:85:FB:AD:F5:3C:29:69:29:38:90:10:AF:58:F0:2A
X509v3 Authority Key Identifier:
keyid:37:D2:09:A6:95:9E:23:54:F7:3C:E2:F2:B9:41:22:6F:83:29:0C:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9IJppWeI1T3POLyuUEib4MpDIw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/bd7dce-0ddc-4368-b04d-13f34b09ae61/1/N9IJppWeI1T3POLyuUEib4MpDIw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:70:0c:be:77:00:51:dd:64:8d:5e:ff:97:56:b8:c2:fb:aa:
b1:de:cd:a5:11:2c:c6:ce:23:86:f3:62:20:be:92:59:0b:8e:
dc:01:27:64:ab:a2:b1:e9:40:78:8b:e7:9e:ef:9b:24:18:2e:
d5:15:cd:5f:77:4b:f8:56:fd:ea:87:4d:31:57:ec:88:6b:16:
18:81:94:29:de:f3:b9:43:f1:bf:52:a9:ea:8e:1f:6f:0e:db:
3b:f5:2e:fd:d4:bb:8e:40:73:ab:0a:f5:99:ba:27:99:c4:7b:
4b:c1:2b:03:61:54:d3:87:60:39:9a:f7:f1:f3:3f:23:13:4e:
7a:db:86:a0:16:9e:74:a5:4b:e2:6d:d2:ba:d6:4f:61:6e:ef:
39:5d:97:f2:a5:4a:4b:70:a3:c4:ef:1b:3a:76:54:b4:23:f0:
47:f5:ba:e9:cb:0d:78:fe:d3:f4:85:65:3d:cb:13:50:ca:03:
83:7b:d7:80:19:5e:a5:18:4d:c8:75:a0:1b:7c:a1:8b:bb:da:
14:00:66:73:cc:48:f6:49:f6:6b:9b:3e:14:61:d9:4d:f0:12:
03:56:36:93:23:04:d4:01:58:e2:a3:e9:d1:d5:6c:01:96:d5:
05:0a:08:05:47:db:a7:39:66:f6:bf:16:57:01:25:4c:93:51:
c5:7a:28:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:56:07 2026 by rpki-client