Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: ScHWSZFv7dA9rR9ZRGr0QfRIGW1/AQefQozoMDK3px8=
Subject key identifier: D6:49:D3:BA:BE:1D:18:DE:CB:CC:59:81:A4:1B:00:67:40:D9:C9:1B
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019F11F7D91756D09E75DC3BA1DDE5503F73
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 1988
Signing time: Mon 29 Jun 2026 06:01:23 +0000
Manifest this update: Mon 29 Jun 2026 06:01:23 +0000
Manifest next update: Tue 30 Jun 2026 06:01:23 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: Is5MbjcnotV9SRjhowC+1CPgIJ10ORhNxSsZGHFUu30=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:11:f7:d9:17:56:d0:9e:75:dc:3b:a1:dd:e5:50:3f:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Jun 29 06:01:23 2026 GMT
Not After : Jun 30 06:01:23 2026 GMT
Subject: CN=d649d3babe1d18decbcc5981a41b006740d9c91b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:53:f5:7a:8c:9e:18:ee:c7:9c:36:e8:36:32:
b8:70:2e:3c:c8:30:97:66:04:88:6c:06:77:97:92:
dd:d0:dc:4f:7c:59:29:ec:b1:dd:26:dc:66:55:4a:
b5:48:0c:72:e3:8c:aa:98:18:70:c9:ff:00:14:c8:
89:fd:21:0a:59:ec:ec:a2:c4:05:b3:fd:e6:0e:32:
be:fd:c0:6c:36:04:47:8f:25:a4:a7:23:4a:5b:63:
ff:78:57:87:ef:e8:8d:61:38:44:75:1d:eb:01:68:
fe:f2:f6:db:9d:d4:8e:ff:85:7e:35:14:e3:75:b3:
45:ac:e5:cd:78:de:88:73:fb:e1:9c:2e:93:5e:79:
59:cb:cd:7c:13:27:bb:d7:74:58:5a:2d:92:9c:f5:
75:b5:cf:ca:a7:74:10:33:97:58:2f:60:cc:ac:46:
ff:41:e5:e9:7d:f4:fa:88:b9:6c:45:ed:0d:73:b7:
a0:0d:92:dc:54:e3:bb:c7:88:19:e8:f2:cc:0a:f0:
07:b8:00:f6:84:e0:42:76:2d:41:fa:f2:21:a8:7d:
0d:42:df:f7:de:ac:ae:22:9a:3a:41:44:04:3b:25:
d6:3c:55:c1:58:f9:72:49:29:23:83:9c:6b:55:c3:
5c:a5:2c:34:4a:b0:13:10:2f:a7:7c:74:92:d6:d5:
88:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:49:D3:BA:BE:1D:18:DE:CB:CC:59:81:A4:1B:00:67:40:D9:C9:1B
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:c5:e3:90:9e:e6:79:31:db:97:7a:de:47:85:aa:cb:35:c2:
06:70:ac:9d:0c:38:ac:9b:44:6c:fa:e9:6e:82:45:bf:0c:7a:
f8:24:a4:99:d0:95:6c:3d:c5:17:33:43:5a:30:28:88:fc:3e:
09:69:8b:a7:52:60:c0:88:03:5d:29:b1:8e:43:6a:b4:3f:bc:
88:cb:b5:3b:38:b4:e9:99:14:7c:05:77:30:ed:fd:b7:3c:ba:
6b:3a:c8:8c:36:1a:8d:9a:a9:ef:f0:a3:ba:89:9e:40:0b:94:
e4:b9:ab:7c:24:c3:db:7e:e6:b0:89:60:46:09:82:7b:f0:7d:
28:9f:56:07:c8:65:ff:d8:15:70:dc:ba:39:99:a0:0e:d5:2e:
4d:27:bf:f4:68:06:e9:d4:5f:5c:73:64:c3:84:46:a7:91:c8:
ee:31:18:60:40:fd:17:b1:51:24:93:dd:fa:f2:c6:25:87:e6:
d0:de:78:93:e2:4b:d7:7f:52:ac:78:6a:b7:01:ac:6b:ee:83:
67:a8:f0:eb:09:ba:7b:57:a5:36:01:5c:d1:f9:24:fd:ee:04:
36:8b:32:d5:2f:4c:1a:5d:fc:8d:c6:8e:36:00:2b:76:12:72:
3a:a1:7e:85:bf:4c:99:d7:0f:40:55:64:6c:b4:ae:33:a5:da:
b8:02:8f:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 11:43:42 2026 by rpki-client