Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: kad7phNx1T+Q4oyETe1I8LeCu2Rxz1a2a/C00HJW/QI=
Subject key identifier: 1E:96:12:DD:8E:7B:2E:80:F2:3F:30:CE:FD:A0:A3:17:DB:F2:5F:85
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019D37529B5C59C50E088FD616ECFF657AB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 1892
Signing time: Sun 29 Mar 2026 02:00:53 +0000
Manifest this update: Sun 29 Mar 2026 02:00:53 +0000
Manifest next update: Mon 30 Mar 2026 02:00:53 +0000
Files and hashes: 1: 9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa (hash: WVuRHrOmlMS6ytXr2Z+ySWU/cHgaZovcwRctB5udkTE=)
2: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: 7vPpWc0noHGmqbTN5IK6oNawIYLyFB2tKvS33w/afHY=)
3: jcwqdhirBap47K8I2f73LhbiMrI.roa (hash: 92nuQiH7pyqjL/L1oEYcoXAA6/cRc3pynOqbszSmmCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:9b:5c:59:c5:0e:08:8f:d6:16:ec:ff:65:7a:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Mar 29 02:00:53 2026 GMT
Not After : Mar 30 02:00:53 2026 GMT
Subject: CN=1e9612dd8e7b2e80f23f30cefda0a317dbf25f85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f3:08:32:89:f3:e2:05:a7:ef:31:72:f5:ae:
2c:91:d0:3b:14:56:24:21:25:4f:86:26:26:25:b2:
6a:7d:c1:29:92:dd:0d:72:ac:f1:32:63:77:1e:84:
83:fa:7d:d1:84:90:ab:97:88:8d:1c:c0:f3:79:a9:
59:7f:a7:ba:00:a0:8e:b3:d8:b7:61:0e:02:df:eb:
e8:b3:4c:b8:b6:9d:39:7d:41:ca:b7:7a:bb:43:1c:
4c:ec:d3:ac:4c:b8:21:11:05:41:92:bb:2b:e8:87:
55:80:b7:bd:9e:b1:66:87:d6:45:b6:c6:ee:d7:34:
ba:12:16:35:11:ff:56:7e:9e:e8:80:99:b4:87:b6:
d2:b3:db:c5:5f:bc:98:9f:cb:5c:7a:83:54:15:c3:
c9:b1:ec:ca:df:76:29:1f:dc:2c:97:4d:5e:93:0b:
0e:49:33:00:9e:36:9a:22:34:54:0d:f2:aa:75:4d:
e2:0e:9a:26:f6:a8:f8:a5:c1:cd:19:38:05:3d:2f:
36:34:8d:65:73:07:c5:69:96:5b:bd:70:99:3a:1e:
d6:87:79:94:68:26:93:11:a6:00:65:d7:41:07:3a:
63:71:b2:71:a1:b0:50:3d:b8:ee:13:df:af:d8:9a:
19:7f:23:7e:fe:6a:0d:16:98:23:8e:5f:a9:90:72:
76:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:96:12:DD:8E:7B:2E:80:F2:3F:30:CE:FD:A0:A3:17:DB:F2:5F:85
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:42:8b:3e:44:73:02:99:a7:aa:81:29:90:94:29:51:8c:3e:
6c:0b:e1:10:83:7e:99:8c:31:bf:b1:b4:f0:74:ad:71:f2:34:
18:cd:14:6a:1d:f6:03:66:a5:eb:42:ee:52:93:cd:ff:48:e1:
fd:5c:3e:af:17:2a:77:f2:9e:69:b0:47:9d:aa:c3:06:16:cb:
1a:df:9f:7b:1e:83:c6:95:f1:ee:2a:6e:29:25:a6:4d:af:bb:
2b:91:e6:7e:8a:e3:a9:e2:a7:b3:89:20:db:05:95:6d:5f:86:
aa:1a:74:d0:f8:67:16:c4:a9:ab:9c:a7:2e:b3:7f:9b:39:c8:
e2:07:1e:40:c5:3b:d5:5a:d1:b1:f4:46:c6:a5:b7:c3:7c:b6:
b0:3a:36:f5:9a:dc:af:09:3f:6e:ad:dd:7b:9a:f5:00:3e:09:
fa:7c:61:c7:8b:3b:2a:f8:f4:c9:83:61:1b:ea:aa:77:4d:e0:
6d:5b:8e:75:49:fc:88:4a:d2:4a:a6:8b:52:0b:0c:4a:83:af:
c8:01:fb:46:84:a7:9a:36:a4:98:0d:33:08:0c:04:d3:b9:5e:
f9:eb:8a:a4:64:0a:ea:2f:53:68:37:81:45:3b:53:f6:2b:38:
1c:d9:0a:6e:4d:9a:7c:1a:1e:3a:89:92:aa:88:74:03:f8:33:
57:b2:c1:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03UptcWcUOCI/WFuz/ZXqxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmJkZjJmNWY4NTVlNWUxY2E0OGU3N2MzYmRkMzNiZDQ3
YjQ0MzgwHhcNMjYwMzI5MDIwMDUzWhcNMjYwMzMwMDIwMDUzWjAzMTEwLwYDVQQD
EygxZTk2MTJkZDhlN2IyZTgwZjIzZjMwY2VmZGEwYTMxN2RiZjI1Zjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/MIMonz4gWn7zFy9a4skdA7FFYk
ISVPhiYmJbJqfcEpkt0NcqzxMmN3HoSD+n3RhJCrl4iNHMDzealZf6e6AKCOs9i3
YQ4C3+vos0y4tp05fUHKt3q7QxxM7NOsTLghEQVBkrsr6IdVgLe9nrFmh9ZFtsbu
1zS6EhY1Ef9Wfp7ogJm0h7bSs9vFX7yYn8tceoNUFcPJsezK33YpH9wsl01ekwsO
STMAnjaaIjRUDfKqdU3iDpom9qj4pcHNGTgFPS82NI1lcwfFaZZbvXCZOh7Wh3mU
aCaTEaYAZddBBzpjcbJxobBQPbjuE9+v2JoZfyN+/moNFpgjjl+pkHJ2twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB6WEt2Oey6A8j8wzv2goxfb8l+FMB8GA1UdIwQY
MBaAFDf73y9fhV5eHKSOd8O90zvUe0Q4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDct
ZjQ0MTY2YmIyZGIwLzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS8xMzM2YzctYTMzZi00ZWM2LTgyZDctZjQ0MTY2YmIyZGIw
LzEvTl92ZkwxLUZYbDRjcEk1M3c3M1RPOVI3UkRnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0KLPkRz
ApmnqoEpkJQpUYw+bAvhEIN+mYwxv7G08HStcfI0GM0Uah32A2al60LuUpPN/0jh
/Vw+rxcqd/KeabBHnarDBhbLGt+fex6DxpXx7ipuKSWmTa+7K5HmforjqeKns4kg
2wWVbV+Gqhp00PhnFsSpq5ynLrN/mznI4gceQMU71VrRsfRGxqW3w3y2sDo29Zrc
rwk/bq3de5r1AD4J+nxhx4s7Kvj0yYNhG+qqd03gbVuOdUn8iErSSqaLUgsMSoOv
yAH7RoSnmjakmA0zCAwE07le+euKpGQK6i9TaDeBRTtT9is4HNkKbk2afBoeOomS
qoh0A/gzV7LBig==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:37:47 2026 by rpki-client