Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: wpq0njoBXZxwEWtGaDtMPluPufBlLBCaUKEgS2le+v8=
Subject key identifier: AF:17:63:DF:8A:D0:0B:DF:2E:1C:47:E2:B7:EE:DC:19:17:B7:C1:5F
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019D38D3AC70E6937E2279BDB7206C424E16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 1289
Signing time: Sun 29 Mar 2026 09:01:29 +0000
Manifest this update: Sun 29 Mar 2026 09:01:29 +0000
Manifest next update: Mon 30 Mar 2026 09:01:29 +0000
Files and hashes: 1: LA-wi6A11ya7LBdprms18TeIogg.roa (hash: mGJUSbaGKL8VGDPcuUd8EHQTcLMU3S2Uwe+tVWxibH8=)
2: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: qfKFN7+N7Jdr+cJCcWAbzM3yAZ1mu97kHilxfYtHe6M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:ac:70:e6:93:7e:22:79:bd:b7:20:6c:42:4e:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Mar 29 09:01:29 2026 GMT
Not After : Mar 30 09:01:29 2026 GMT
Subject: CN=af1763df8ad00bdf2e1c47e2b7eedc1917b7c15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:bc:0f:76:f2:a9:17:a7:91:da:54:4c:27:e4:
24:51:82:ff:74:d4:84:a7:49:c2:ed:48:da:ed:7b:
9b:5b:7a:6e:4f:10:ab:63:d6:5d:09:f3:f6:2a:21:
7c:cb:05:60:c3:70:e3:ce:49:ee:00:79:22:4b:ca:
6f:61:10:07:08:d4:5a:98:81:30:bd:96:29:e5:d7:
9d:42:4c:f5:5c:1b:18:f6:62:d1:77:fc:17:6c:1c:
2f:e2:71:7f:d9:fa:80:3a:78:12:77:05:86:79:65:
46:bf:f6:88:78:d5:10:2b:e4:77:5b:02:fc:ab:93:
3f:75:6e:4c:f3:05:15:83:ca:54:64:43:72:8a:4e:
4c:39:89:33:07:d0:01:cd:21:fe:0b:2c:e0:b0:40:
ac:02:b4:1f:54:46:f5:8d:fa:6d:bf:fa:79:aa:5c:
b6:68:5a:47:ec:10:60:ff:8a:31:d3:65:b6:93:df:
12:de:ba:45:e5:6f:0e:51:3f:cc:e2:ca:db:b8:0a:
93:72:89:ab:c7:c2:87:09:3c:98:99:2c:09:76:7e:
6f:a6:61:a9:c9:e2:8a:7e:b4:e4:c1:b9:06:9a:b5:
a3:15:8e:6c:c6:b5:d3:94:7e:07:a2:47:57:35:0f:
58:05:9c:8c:08:6e:77:2b:47:64:e9:85:d0:b4:3d:
e2:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:17:63:DF:8A:D0:0B:DF:2E:1C:47:E2:B7:EE:DC:19:17:B7:C1:5F
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:c2:57:5a:9b:1e:e3:06:5e:fa:7e:72:02:cb:c8:88:00:ec:
d0:38:c5:f7:e9:af:d8:5e:5a:18:3e:96:01:d2:79:74:9a:2a:
4c:d1:c1:50:24:36:01:bd:e3:6d:bb:58:97:44:81:b0:56:3a:
bf:80:a4:80:90:d9:07:5d:f9:dc:ef:17:96:e5:cd:60:99:8b:
9a:5d:77:8b:1d:7d:4d:74:06:47:5a:9c:56:0a:ec:e0:86:bf:
77:78:3f:33:71:77:53:68:6b:12:55:e8:75:0a:38:a2:aa:7a:
b1:de:b6:16:a7:bf:de:fd:00:61:68:a4:6c:29:11:cb:7f:81:
7a:e4:6e:29:f7:13:f5:68:74:0d:0e:0a:8e:94:01:aa:a7:b8:
75:04:9a:3d:bb:5a:01:d4:27:e7:0d:1d:b6:b0:b8:a2:34:0f:
12:b8:17:44:87:39:30:6b:d2:1c:1e:6f:1f:9b:52:12:73:4f:
71:7a:eb:43:0e:31:39:a1:b4:db:24:c9:27:b1:4f:de:13:d9:
ab:bc:61:3b:fc:c4:87:26:a4:98:c3:1a:e2:ba:b1:70:d4:fa:
b1:08:9b:7d:d9:dc:e2:4a:6c:e5:bb:aa:90:2d:b5:48:f5:49:
3b:cb:2d:6d:e6:20:4e:a5:73:89:c0:af:58:ec:58:f8:75:07:
85:5f:96:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 13:43:17 2026 by rpki-client