Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: eBSg/adWDfFMS/VB5fAR12IyuT9H43upeF+LnSBSeOM=
Subject key identifier: BD:9C:DE:7A:C9:50:52:6E:23:30:AC:8F:27:D0:E4:57:8F:1A:42:62
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 019D394093066AFA1234DC694A42C8A8A795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0F3B
Signing time: Sun 29 Mar 2026 11:00:26 +0000
Manifest this update: Sun 29 Mar 2026 11:00:26 +0000
Manifest next update: Mon 30 Mar 2026 11:00:26 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: usMs5cmoMhaoyPIb8WwYMS63FLKBEMA5IB/ihe54c7A=)
2: gXm46Hmm-qTO4hodxrSof3TLiNM.roa (hash: xq/l2oyKL3r2u7cjQoxp//Kygz431FReQyIA4fXa0hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:93:06:6a:fa:12:34:dc:69:4a:42:c8:a8:a7:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Mar 29 11:00:26 2026 GMT
Not After : Mar 30 11:00:26 2026 GMT
Subject: CN=bd9cde7ac950526e2330ac8f27d0e4578f1a4262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ad:fe:b9:b5:d6:2f:ae:15:1e:24:bb:8a:bf:
47:41:33:a0:80:24:d3:17:fb:d3:e1:fd:d5:4d:a0:
cc:ab:70:dc:f2:38:7c:5c:60:fc:94:d6:31:a0:37:
2f:2a:87:8e:4c:6e:b4:5e:e8:5e:47:91:fc:21:bf:
27:ea:8c:f6:24:6a:24:7d:da:44:cb:b0:c4:72:d9:
50:76:aa:ce:89:13:45:89:52:fb:c9:3f:3c:9b:a2:
32:d5:30:7e:ad:cf:85:79:99:f5:f4:91:e5:0a:ff:
cb:88:7c:01:39:ea:f6:46:e8:8a:77:f2:6a:77:14:
bb:c6:10:db:7a:84:53:6c:14:3b:1d:93:f8:9e:a2:
4f:07:65:04:ac:e8:9a:4d:7f:e7:65:6d:e4:2e:db:
33:1f:4f:6a:4f:d4:d5:41:86:7d:ee:c2:1e:67:87:
71:6d:f8:4f:32:1f:22:1c:27:63:74:0a:ce:f6:e0:
79:81:5b:eb:03:01:38:0a:af:45:3c:ca:e0:8b:e7:
5e:cd:90:cc:1a:14:b4:7b:95:b1:82:7c:8e:95:0a:
36:1a:46:a7:8e:4d:f7:5e:cf:0b:54:cc:32:c4:c1:
94:00:68:87:a9:5a:f1:9c:d1:fb:a3:de:e1:11:ff:
09:6d:18:4e:fe:ea:92:df:17:ab:fa:ea:e0:1b:56:
1b:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9C:DE:7A:C9:50:52:6E:23:30:AC:8F:27:D0:E4:57:8F:1A:42:62
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:05:a8:65:72:de:28:81:a1:f7:1c:ed:04:c5:69:3c:e9:de:
72:c7:0c:6c:19:60:b3:65:dc:38:56:c0:67:7f:6c:3b:f5:f9:
c7:04:0d:b1:9c:64:db:81:a3:73:12:11:f5:e0:94:a0:95:08:
81:1e:26:ef:e6:8c:96:38:6f:1c:4c:bd:86:3d:8e:18:6f:59:
bf:d8:ee:f7:f1:b1:0e:f8:02:e6:cc:96:41:39:6e:f4:9f:c3:
cb:57:27:b1:27:d0:44:45:d1:bb:b0:a8:b9:d9:5c:ce:b5:0c:
89:58:dd:d8:f5:c7:e1:13:cf:df:e5:da:40:1e:aa:50:65:70:
d2:5b:ba:b4:c0:1e:f4:1c:a8:59:33:fd:57:90:3f:40:9f:86:
5f:88:36:ad:b6:00:2c:d3:a7:9a:20:94:1e:9e:fa:67:bd:ea:
7f:34:55:d8:66:44:94:67:08:fe:d2:cf:c8:a8:31:c3:51:8c:
2f:39:1c:e3:55:0b:c6:3e:4f:c5:35:49:e3:69:0e:16:73:13:
d1:0f:d4:23:5a:77:db:55:59:60:78:37:ce:f4:1e:f3:2b:31:
f9:50:7e:39:39:0f:d0:58:b9:b4:26:73:43:51:b5:d0:2d:08:
75:6d:bd:c9:14:bd:85:60:ca:71:43:25:28:0b:54:87:ca:6d:
44:c5:c8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 16:59:18 2026 by rpki-client