Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: BJScJV7w7uyhlS0tJ8+GBwQ/jq7/Jn49+TLV7CMcH1w=
Subject key identifier: 92:9D:A9:EF:19:2F:60:EF:21:4E:75:8C:06:81:C2:90:8E:33:7D:64
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019D37F772752D2352BE098A6F3353A4D663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 1872
Signing time: Sun 29 Mar 2026 05:00:56 +0000
Manifest this update: Sun 29 Mar 2026 05:00:56 +0000
Manifest next update: Mon 30 Mar 2026 05:00:56 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: tlzieA0nRLFj1kX8D6hxA1AZtGvqwvf6+fIynDYdikI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:72:75:2d:23:52:be:09:8a:6f:33:53:a4:d6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Mar 29 05:00:56 2026 GMT
Not After : Mar 30 05:00:56 2026 GMT
Subject: CN=929da9ef192f60ef214e758c0681c2908e337d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:cb:ca:9e:ab:56:d9:1b:eb:8f:38:6b:8b:b8:
81:83:3e:8b:e6:ba:58:f0:35:f2:d9:dd:24:13:f6:
dc:b4:52:d4:50:48:55:68:f0:4f:bf:a1:1b:c0:a3:
23:b3:fd:46:71:da:0d:14:d1:b5:4b:9c:1c:b6:07:
99:82:e0:fe:5c:59:98:1c:24:3e:9a:f1:ac:7f:2e:
44:56:b4:9e:47:0d:8b:7f:46:e2:11:4a:34:17:fe:
c1:2f:a8:ae:df:53:3d:5e:a0:37:d3:fd:09:51:4e:
1e:08:12:d4:c8:5c:7d:16:d1:30:6d:c0:4e:f3:7b:
3d:5a:e9:af:96:3c:92:f2:9f:a9:52:db:ec:12:ec:
db:37:05:16:bf:48:8f:df:00:4e:f4:8a:4d:a8:af:
bb:e2:26:d6:76:ce:de:6a:8f:c7:ea:6f:05:6c:96:
1c:4b:13:e1:8d:45:65:43:80:b3:aa:03:3c:26:1d:
16:f7:b0:30:31:0b:03:0a:85:19:92:39:c5:2c:d6:
76:6b:c7:a2:fd:b1:e7:a6:8c:24:db:a0:e0:d7:83:
f5:c7:64:3d:f1:09:bf:e6:15:cc:4b:87:4d:43:80:
e4:ca:38:a2:2b:16:3d:24:52:64:8d:6a:91:5c:17:
5a:e2:c2:da:9b:de:af:11:38:50:90:aa:de:1b:54:
16:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:9D:A9:EF:19:2F:60:EF:21:4E:75:8C:06:81:C2:90:8E:33:7D:64
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:f5:bd:2d:bb:28:a8:d4:ae:2a:84:02:09:dd:64:cf:6a:2b:
a9:85:92:93:bf:98:56:1c:e7:dc:a2:86:ae:b4:dc:b1:33:96:
ff:39:7b:9a:92:f2:45:76:ab:50:f0:e4:3c:f1:e6:fe:06:c0:
68:62:a4:91:fc:36:6f:c5:02:82:13:16:41:76:7e:6d:42:d2:
15:3b:81:41:24:01:46:24:cb:e0:00:38:20:f9:7b:2d:ba:ba:
4e:cf:d5:13:74:13:85:3c:5c:ab:10:3b:8b:31:60:d4:a3:79:
0c:41:5e:34:3e:3e:47:fa:46:0a:73:85:7a:7f:96:b5:de:19:
87:c8:20:13:8a:ad:03:d4:97:8e:22:f2:2d:3d:48:a3:02:66:
06:10:35:0e:bd:4e:1e:57:49:1a:0a:23:51:47:9d:02:65:5e:
dc:a7:e9:75:d9:58:76:5a:3d:38:50:79:48:7e:65:81:9c:59:
e7:fb:2b:af:bd:da:bf:9b:c2:74:7d:45:e0:7d:91:f0:35:0a:
70:88:6f:7f:83:8b:06:33:c9:d6:02:5c:99:f9:69:cb:56:db:
68:d6:3b:ff:e5:b8:a8:48:89:ce:19:f9:f4:39:b1:7e:c0:d0:
4c:bc:84:af:4f:cf:8e:4f:4e:f7:ff:6d:57:dd:8e:b0:2a:80:
3a:95:91:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:25:24 2026 by rpki-client