Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
File: N4G6usaSUnGxeYF1FeBuahCs9rQ.mft (raw, json)
Hash identifier: 5ymW6dRKLSyLg8yzBbfAexmSN2debzqujeEs0Ug7dZ0=
Subject key identifier: DA:AD:63:37:7D:85:CE:C1:EC:4A:DB:92:8B:9A:74:0B:13:30:28:D2
Authority key identifier: 37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
Certificate issuer: /CN=3781babac6925271b179817515e06e6a10acf6b4
Certificate serial: 019D3A1CFFE73C5531938E5625D35B0F0E01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
Manifest number: 0837
Signing time: Sun 29 Mar 2026 15:01:12 +0000
Manifest this update: Sun 29 Mar 2026 15:01:12 +0000
Manifest next update: Mon 30 Mar 2026 15:01:12 +0000
Files and hashes: 1: N4G6usaSUnGxeYF1FeBuahCs9rQ.crl (hash: lN29EOc9ZCtp7j37Dj66W39LXzYMoEQx+om/gI3++5U=)
2: UMO1z7FNQUIj7rxCcZm51cdNS7c.roa (hash: aO85cpc/9+GkbgWZzDFbtHXWcwZ07v5DtjyrFyxdVlw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:3a:1c:ff:e7:3c:55:31:93:8e:56:25:d3:5b:0f:0e:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3781babac6925271b179817515e06e6a10acf6b4
Validity
Not Before: Mar 29 15:01:12 2026 GMT
Not After : Mar 30 15:01:12 2026 GMT
Subject: CN=daad63377d85cec1ec4adb928b9a740b133028d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:0b:f7:37:11:94:6a:8b:ca:34:62:b0:78:cd:
83:32:71:79:68:82:83:b1:6f:1d:1f:be:cc:fc:37:
48:81:be:de:0a:a6:2d:d6:7d:06:26:2a:8e:21:b8:
00:6c:f9:7b:84:09:05:30:a7:2a:17:73:07:57:a2:
f1:33:17:70:59:db:8a:9c:9d:8d:30:6f:c4:10:1d:
4f:2d:86:f5:17:bb:0c:9e:1d:21:f7:14:ad:de:42:
1e:8a:c5:36:76:8d:0d:38:7f:32:f0:f1:19:41:7c:
e2:7b:f4:0f:90:93:a7:c8:60:94:90:86:de:49:b0:
bb:9a:37:05:c0:ae:53:40:5b:23:58:aa:9d:0a:9f:
dc:84:95:15:b3:30:60:5d:1b:af:37:89:05:71:6c:
1a:4a:81:2b:3d:d2:0f:75:e3:fe:6b:1d:24:e2:35:
df:b3:8a:f7:c9:bd:98:ce:4c:74:f0:49:27:b6:97:
49:28:60:c9:f1:67:e7:08:66:1a:9f:ab:a3:48:d3:
9c:9c:fe:11:d0:89:af:ea:eb:33:4b:47:4d:21:e1:
c9:a0:08:63:fa:2c:71:d1:3e:57:98:96:40:68:8c:
5a:0b:b0:e3:6f:0c:02:57:41:32:49:94:60:db:e6:
09:89:b2:59:ab:94:f4:9e:cd:9e:76:67:08:b4:68:
8f:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:AD:63:37:7D:85:CE:C1:EC:4A:DB:92:8B:9A:74:0B:13:30:28:D2
X509v3 Authority Key Identifier:
keyid:37:81:BA:BA:C6:92:52:71:B1:79:81:75:15:E0:6E:6A:10:AC:F6:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4G6usaSUnGxeYF1FeBuahCs9rQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/8f83c2-3bb3-4d47-8031-de571b89618d/1/N4G6usaSUnGxeYF1FeBuahCs9rQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:97:9d:a4:9d:b5:4f:f5:f9:ae:d3:8c:61:8c:e9:b8:eb:81:
8c:81:16:6a:f4:fa:83:5a:9e:6d:77:28:d1:f6:ad:23:8f:df:
44:43:28:76:2f:3a:2f:82:a2:6d:0a:5a:e5:50:d8:b9:95:d3:
ce:af:4a:88:89:e2:43:12:72:89:b3:d4:93:cb:e9:c5:65:f2:
f2:d2:c0:5b:ba:a8:2c:68:e0:95:01:73:80:2a:ac:58:41:06:
30:82:41:40:a1:ef:6c:f7:bc:d0:a9:2c:fd:6b:b7:d9:10:63:
b6:51:d4:0d:b6:f7:a7:37:ec:f6:db:78:e7:ed:93:04:4d:c1:
a6:b6:df:91:e5:71:4a:00:40:6e:59:81:3d:3d:d1:5a:13:cc:
9c:cd:28:51:85:d0:86:dc:1a:dc:59:df:79:70:c6:bf:68:b9:
6b:0b:e6:86:49:41:07:80:36:90:c1:37:81:73:e0:f6:aa:75:
16:32:b5:f2:5e:be:f2:ed:fd:b0:5d:b2:07:58:61:0c:24:b0:
48:96:79:02:a1:df:aa:01:f1:9a:97:09:08:b5:b5:56:67:e8:
27:43:84:e5:a9:f1:b7:b6:f7:f7:94:0f:ce:1b:6e:15:53:11:
d1:e3:11:71:f4:50:65:2c:5e:94:ae:58:b3:05:20:b7:6f:ff:
a7:12:da:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 17:02:50 2026 by rpki-client