
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier: aNFmNvdPRDS/PHTUq+LhE2Ny+2eaY1MscSY/AsTlpyY=
Subject key identifier: 43:8E:15:82:AE:26:54:DA:8B:0D:D5:FC:DB:9D:E0:C8:01:6C:3F:A7
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial: 01A08BD6700ADE54746CD2199C29529D6DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number: 10FF
Signing time: Thu 10 Sep 2026 15:01:21 +0000
Manifest this update: Thu 10 Sep 2026 15:01:21 +0000
Manifest next update: Fri 11 Sep 2026 15:01:21 +0000
Files and hashes: 1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=)
2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: hvlfj+ahrJVjpbfWuu9EeAFfjzgUDbZrf+27UK2R+mU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 15:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d6:70:0a:de:54:74:6c:d2:19:9c:29:52:9d:6d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
Validity
Not Before: Sep 10 15:01:21 2026 GMT
Not After : Sep 11 15:01:21 2026 GMT
Subject: CN=438e1582ae2654da8b0dd5fcdb9de0c8016c3fa7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:34:a0:ee:7c:dd:70:68:fa:97:de:d6:3f:f7:
cc:ef:8f:13:a1:30:86:60:37:1f:c6:8f:de:7a:2b:
fc:76:57:f9:3d:54:a1:5c:6b:04:68:bd:a3:fd:f1:
22:58:8f:79:1b:7f:50:ce:09:a4:bb:50:db:e1:36:
3f:17:dd:a8:d7:d2:19:3f:d8:a8:04:95:ca:96:e3:
62:73:5a:43:13:67:b5:07:f2:82:23:89:90:a3:cb:
77:7d:14:c4:a4:80:2e:1d:08:a3:a5:1d:31:e7:99:
16:b7:a9:d2:af:ad:66:70:21:02:68:da:45:02:10:
fe:d0:5b:9d:7f:03:cb:5e:3d:88:42:70:41:bc:15:
6e:50:36:7c:b4:0c:0e:77:93:ae:fd:09:3d:a3:cf:
08:dd:be:5d:1b:25:1d:b8:1a:6e:cb:f6:9a:d7:e9:
a2:d4:9c:7b:3d:f9:b2:d7:50:50:78:0a:13:3d:25:
c8:91:9e:6e:2e:e4:8a:4e:e1:59:30:3c:97:45:12:
a0:29:22:89:11:87:25:17:3e:77:87:c0:0d:10:d8:
52:da:bd:fd:c9:85:93:a7:8e:07:75:43:e2:61:e6:
5d:c0:94:af:62:c3:12:27:72:d3:96:e3:b0:a0:05:
7b:03:26:ea:78:99:2b:a6:1e:54:eb:59:81:5e:90:
7c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:8E:15:82:AE:26:54:DA:8B:0D:D5:FC:DB:9D:E0:C8:01:6C:3F:A7
X509v3 Authority Key Identifier:
keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:26:4b:9b:c9:49:c2:cc:33:55:ca:56:27:39:9b:64:e9:0e:
4c:4d:f2:df:13:af:17:41:7b:ca:40:49:f3:f9:d6:8e:4a:e8:
49:14:3d:f3:c5:c8:90:28:bc:e8:13:88:2e:af:08:a9:29:64:
55:c5:d8:4c:ea:b9:21:4c:22:09:59:d4:56:04:a8:df:62:e8:
0d:e2:5e:d3:15:c7:57:ea:fe:5c:97:ce:71:e0:a4:48:80:0c:
a6:c1:08:10:9a:3f:ea:76:72:68:57:bb:f0:03:23:31:12:8d:
22:ab:90:52:44:80:dc:22:94:5c:72:fe:76:54:45:d0:61:58:
c1:08:fa:f3:93:c8:8a:7d:6a:53:ab:0c:a8:45:c3:ac:8b:ca:
b3:da:3f:c6:06:bf:0a:4c:04:df:87:2d:cd:fe:74:80:16:60:
b8:67:8c:82:96:be:8c:a3:66:25:cc:79:3c:64:7c:a6:5a:b3:
91:6c:67:a8:1a:f8:92:75:97:36:c4:d4:8f:4f:80:4e:fa:c4:
77:6f:37:b8:de:7d:2b:5e:72:4f:31:cf:df:8c:62:4a:8a:fc:
f9:0a:eb:99:7b:8c:4b:3f:59:c6:2f:64:d1:b0:97:44:00:5b:
2d:d2:ce:5d:3d:0b:29:47:a1:24:73:bb:c7:c5:97:8b:d1:19:
1d:0e:fe:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaCL1nAK3lR0bNIZnClSnW3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTM1MmUxN2FmODdlZTJlNWRjMTczZDE1NTQzZGE2M2Jl
NTU0NzMwHhcNMjYwOTEwMTUwMTIxWhcNMjYwOTExMTUwMTIxWjAzMTEwLwYDVQQD
Eyg0MzhlMTU4MmFlMjY1NGRhOGIwZGQ1ZmNkYjlkZTBjODAxNmMzZmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkTSg7nzdcGj6l97WP/fM748ToTCG
YDcfxo/eeiv8dlf5PVShXGsEaL2j/fEiWI95G39Qzgmku1Db4TY/F92o19IZP9io
BJXKluNic1pDE2e1B/KCI4mQo8t3fRTEpIAuHQijpR0x55kWt6nSr61mcCECaNpF
AhD+0FudfwPLXj2IQnBBvBVuUDZ8tAwOd5Ou/Qk9o88I3b5dGyUduBpuy/aa1+mi
1Jx7Pfmy11BQeAoTPSXIkZ5uLuSKTuFZMDyXRRKgKSKJEYclFz53h8ANENhS2r39
yYWTp44HdUPiYeZdwJSvYsMSJ3LTluOwoAV7AybqeJkrph5U61mBXpB8QwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOOFYKuJlTaiw3V/Nud4MgBbD+nMB8GA1UdIwQY
MBaAFDejUuF6+H7i5dwXPRVUPaY75VRzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYt
MzViMjFiZmZhZDRkLzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9hOTc3ZWEtNGE5My00NjE4LWI3ZmYtMzViMjFiZmZhZDRk
LzEvTjZOUzRYcjRmdUxsM0JjOUZWUTlwanZsVkhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlSZLm8lJ
wswzVcpWJzmbZOkOTE3y3xOvF0F7ykBJ8/nWjkroSRQ988XIkCi86BOILq8IqSlk
VcXYTOq5IUwiCVnUVgSo32LoDeJe0xXHV+r+XJfOceCkSIAMpsEIEJo/6nZyaFe7
8AMjMRKNIquQUkSA3CKUXHL+dlRF0GFYwQj685PIin1qU6sMqEXDrIvKs9o/xga/
CkwE34ctzf50gBZguGeMgpa+jKNmJcx5PGR8plqzkWxnqBr4knWXNsTUj0+ATvrE
d283uN59K15yTzHP34xiSor8+QrrmXuMSz9Zxi9k0bCXRABbLdLOXT0LKUehJHO7
x8WXi9EZHQ7+qg==
-----END CERTIFICATE-----
Generated at Fri Sep 11 02:09:03 2026 by rpki-client