Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
File: N1UunJZN5v9U4JnHEVXBod7IpzA.mft (raw, json)
Hash identifier: pOIbTBMGy5raK5E1Wm1BSe3msZQmC421SjFAvcUBU3Q=
Subject key identifier: 1C:65:E2:C3:D9:5F:D8:4E:34:D2:B6:62:87:8D:F1:1A:57:41:99:87
Authority key identifier: 37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
Certificate issuer: /CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Certificate serial: 019D389C563DC2CBA8D9780D6096B43988C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 08:01:02 +0000
Manifest this update: Sun 29 Mar 2026 08:01:02 +0000
Manifest next update: Mon 30 Mar 2026 08:01:02 +0000
Files and hashes: 1: 2l0GtVQPrSMldc422HjTQSRdXVk.roa (hash: I2BTLtTZzbsnuRGEuGg3P61ep2ZFLBTas3um/pZvHuU=)
2: N1UunJZN5v9U4JnHEVXBod7IpzA.crl (hash: oiKiFrVhzXjFeTnUwDYxQjl426sIuYM83C+6sJm5Z/4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9c:56:3d:c2:cb:a8:d9:78:0d:60:96:b4:39:88:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37552e9c964de6ff54e099c71155c1a1dec8a730
Validity
Not Before: Mar 29 08:01:02 2026 GMT
Not After : Mar 30 08:01:02 2026 GMT
Subject: CN=1c65e2c3d95fd84e34d2b662878df11a57419987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:67:aa:54:60:13:0a:b5:81:fc:2d:9f:90:4a:
78:03:a9:77:6d:d9:a0:65:54:62:62:e3:ba:e7:ca:
78:92:1c:dc:25:99:0d:52:74:cc:4e:15:ca:4c:af:
a1:e3:bc:68:10:1d:49:2b:61:52:f0:83:c9:e3:4a:
18:d9:8f:1b:cd:3b:a3:73:95:46:df:6e:dc:ec:46:
c3:0d:51:d8:06:86:01:15:d0:a6:08:ce:48:f3:b9:
24:21:ed:6e:a0:ee:41:bb:f2:08:8c:fa:6d:ab:33:
7b:7c:b2:71:cd:eb:ce:89:22:6b:73:02:07:18:b3:
3c:b7:b9:03:9d:64:8c:e6:60:47:a5:75:5c:d8:83:
e3:7a:00:41:46:55:70:ff:b2:12:a3:ee:62:7f:96:
8a:e0:3e:a4:eb:57:68:8b:e9:23:f2:d6:15:70:d2:
67:23:07:20:0d:55:ab:cf:ba:1d:e5:24:9b:da:53:
b0:be:06:bf:73:e7:51:5f:90:4f:77:c5:53:6f:8b:
38:19:92:e9:5c:0b:b5:db:ff:9f:fd:83:11:ea:4f:
13:67:8a:50:f8:83:a0:5c:91:5e:58:e3:aa:5d:64:
ab:ed:7d:a8:03:ab:61:66:14:5d:a4:d8:6d:0d:7f:
04:df:a3:e8:ba:eb:6b:17:75:93:23:20:c1:e4:06:
65:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:65:E2:C3:D9:5F:D8:4E:34:D2:B6:62:87:8D:F1:1A:57:41:99:87
X509v3 Authority Key Identifier:
keyid:37:55:2E:9C:96:4D:E6:FF:54:E0:99:C7:11:55:C1:A1:DE:C8:A7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1UunJZN5v9U4JnHEVXBod7IpzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/dc43fb-4656-4af9-aad2-ee28a65c8a22/1/N1UunJZN5v9U4JnHEVXBod7IpzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:a5:32:cf:62:3a:b4:1a:d2:52:cf:62:29:01:40:e6:50:51:
0d:db:35:d7:6a:36:39:31:67:ac:c9:13:4b:ca:34:d3:0d:f3:
0c:5f:c3:92:37:6b:52:4a:2c:cd:5b:60:fe:d9:35:d2:2c:1f:
7a:58:04:74:72:16:e7:cf:c3:3f:ac:54:5e:6c:b1:2c:ee:61:
5e:8f:29:38:af:81:79:72:19:99:72:95:27:cf:39:ee:93:59:
66:b5:fb:dd:96:3c:b1:c7:44:2a:8b:88:24:60:bc:cf:ee:e9:
16:e3:13:29:03:cb:44:39:8d:89:64:c0:88:5c:55:63:4b:f1:
f5:09:66:37:05:2b:9b:21:b4:2d:d0:83:8f:4e:ed:54:0c:9a:
b8:6b:0a:6b:c4:f3:39:55:1f:50:7e:22:65:40:42:81:77:42:
67:6d:13:56:55:9b:3d:83:9b:3d:40:0a:45:f1:29:f7:59:eb:
c7:25:61:55:53:93:2d:b3:10:ce:52:59:e7:cf:d4:f0:fa:a6:
84:da:03:34:4f:60:1b:ea:b5:07:be:de:d9:1c:24:e0:42:dd:
14:fd:71:58:f2:cd:39:96:8b:70:80:73:a7:28:dc:95:d2:89:
2a:16:4c:be:a5:02:be:4f:d8:0c:e7:7f:08:4b:4c:f0:07:c5:
7e:ab:85:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:33 2026 by rpki-client