Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
File: N0-NItIYTMfO2e6xPZSgX0u-DKc.mft (raw, json)
Hash identifier: QvquYWnFWgQDviIyndO+VceZqiVPs/Sx2NTYRDO8ER4=
Subject key identifier: 9F:A7:57:E8:64:08:03:82:5A:F6:00:14:79:BE:B5:D2:1C:55:E2:89
Authority key identifier: 37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7
Certificate issuer: /CN=374f8d22d2184cc7ced9eeb13d94a05f4bbe0ca7
Certificate serial: 01A17F2AF1073D8C92D00A76AE4E90FEC652
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
Manifest number: 51
Signing time: Tue 27 Oct 2026 21:01:22 +0000
Manifest this update: Tue 27 Oct 2026 21:01:22 +0000
Manifest next update: Wed 28 Oct 2026 21:01:22 +0000
Files and hashes: 1: N0-NItIYTMfO2e6xPZSgX0u-DKc.crl (hash: E/6no90tk5iobhtjYJZ0Kkash9/9FmzqK/f5AGk4mr4=)
2: RDXHjc00fOrRt3Yaj8OOOGP3IeQ.roa (hash: 7wQU77lcMx7zNIX5/jMinttVxkaBruMAvwo/yeRlBaU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 21:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7f:2a:f1:07:3d:8c:92:d0:0a:76:ae:4e:90:fe:c6:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f8d22d2184cc7ced9eeb13d94a05f4bbe0ca7
Validity
Not Before: Oct 27 21:01:22 2026 GMT
Not After : Oct 28 21:01:22 2026 GMT
Subject: CN=9fa757e8640803825af6001479beb5d21c55e289
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:5b:e4:bf:e4:f5:e4:76:4c:12:51:ea:9b:4c:
82:50:7e:95:3b:d9:a4:23:c2:77:b3:99:b7:b6:20:
2d:36:fc:68:bd:61:ca:b0:a4:72:d9:52:a3:b4:b4:
21:43:50:11:96:40:f1:ef:46:38:00:ee:62:35:39:
d6:e1:e0:06:59:fc:4e:2d:7b:50:0c:6f:d4:6e:56:
24:b7:6c:f2:40:d6:8b:b3:cb:db:c2:a0:11:73:c9:
b4:87:fc:30:ec:aa:98:b1:2a:6a:87:73:7a:5e:c4:
16:c0:8d:c2:4a:2a:a7:b7:80:8d:2b:64:4a:69:e3:
b1:2a:54:7e:67:9c:00:63:07:c3:d1:bf:c8:b7:63:
65:d3:4a:fa:4e:2f:28:fd:c3:6f:ff:84:83:66:5b:
c9:a8:43:4b:9c:18:58:ed:cc:b8:97:e7:c1:cf:56:
fa:0f:ab:9c:45:49:e3:e9:a0:7d:2a:37:c0:95:04:
62:3e:51:b1:60:8e:05:c7:24:ab:3a:15:de:74:34:
9e:f9:9d:27:e7:48:77:28:5a:6e:2a:27:cd:a0:23:
a5:ff:5a:22:57:8a:78:48:0f:02:83:ad:80:90:77:
8c:68:79:6e:de:5e:c3:26:39:94:86:f0:7b:f1:ea:
c2:aa:4f:f1:ad:1c:87:88:c3:08:39:11:bd:57:f0:
0e:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:A7:57:E8:64:08:03:82:5A:F6:00:14:79:BE:B5:D2:1C:55:E2:89
X509v3 Authority Key Identifier:
keyid:37:4F:8D:22:D2:18:4C:C7:CE:D9:EE:B1:3D:94:A0:5F:4B:BE:0C:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0-NItIYTMfO2e6xPZSgX0u-DKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/985aee-5e4c-42cc-8f24-9d559dc4c124/1/N0-NItIYTMfO2e6xPZSgX0u-DKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:e2:03:40:ee:a1:29:45:70:4b:6c:6c:3e:17:f6:0e:7f:b1:
d5:f2:0f:b9:51:9a:83:a8:fe:b2:fe:42:dd:d7:c5:7d:5d:82:
18:7d:96:c7:c6:0f:be:17:81:d5:9d:13:63:0f:08:ef:48:4f:
ac:50:a1:ac:a0:d0:1b:58:06:15:f4:72:27:e1:83:11:01:32:
10:6e:67:2f:f3:7c:2e:68:c6:1c:e8:bf:fa:12:8a:bb:b0:1a:
69:15:00:7c:37:f4:6d:1b:72:7e:31:74:71:f3:95:f4:30:5e:
66:d9:de:aa:dc:63:fa:ee:c2:68:d8:f5:f1:1a:0e:c2:3f:2c:
fc:07:cd:af:dd:85:cf:2a:1d:40:3e:c0:a7:2f:da:57:f3:8a:
69:f5:65:3e:4a:8b:e9:7c:fa:a3:41:42:f7:e3:89:d7:ee:ad:
ca:38:f2:98:46:8b:cd:cc:b4:0e:18:00:c4:08:12:3c:b0:ce:
c4:60:42:00:7c:d2:0f:9d:0a:6a:2f:ee:3d:33:df:d2:28:7a:
f7:ff:5d:97:ed:a4:e2:c5:65:f9:71:1a:48:3c:83:d9:d7:7d:
c1:09:da:42:7e:f9:67:d8:91:cb:53:6f:cc:66:07:64:9a:19:
8d:83:4f:ee:16:76:9a:76:49:36:55:44:32:25:f8:0c:4b:b7:
3d:5c:cf:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 00:45:10 2026 by rpki-client