Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: 5/2M3ExXPtOPjBQ2udfdK6w4+EwYU8yvHPlOnpWrRFQ=
Subject key identifier: 1A:4A:E5:26:22:1F:FB:42:E6:7B:80:5E:6B:41:25:AD:49:74:E2:0A
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 01A15742591661F4FDBEEBCB4EAEF794EABF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 1AB5
Signing time: Tue 20 Oct 2026 03:02:08 +0000
Manifest this update: Tue 20 Oct 2026 03:02:08 +0000
Manifest next update: Wed 21 Oct 2026 03:02:08 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: gs+Q6F/tU1qTh4pEGt65lstcvlNdKGkbEDpSHDTtyho=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:57:42:59:16:61:f4:fd:be:eb:cb:4e:ae:f7:94:ea:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Oct 20 03:02:08 2026 GMT
Not After : Oct 21 03:02:08 2026 GMT
Subject: CN=1a4ae526221ffb42e67b805e6b4125ad4974e20a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:30:e2:b4:f7:0b:eb:48:07:b8:d8:43:55:af:
ff:37:f8:5b:cb:05:08:1a:7f:9b:8d:f0:54:d2:c8:
d5:04:50:cf:eb:90:09:d3:c8:5b:2c:92:3b:42:a1:
41:6e:96:d6:7e:8f:4a:08:47:92:c9:4e:69:d4:0e:
0c:ea:f6:ec:2b:ae:69:e6:be:d1:a8:c0:05:28:bc:
a4:68:21:cb:3c:0b:66:e2:39:b5:a5:3a:92:43:f4:
4f:ad:84:59:6d:b0:c2:d1:41:c6:c3:a5:0d:4a:16:
b8:6b:8f:81:ec:79:2c:72:e3:b5:6d:35:00:ea:b9:
20:a3:66:98:4a:4b:21:4e:92:f9:53:7d:33:2e:fc:
82:10:92:54:42:68:fb:83:bf:6b:41:c3:be:da:19:
8d:b6:a1:90:1e:94:d6:ae:62:f1:00:53:c9:5f:56:
10:7d:9f:19:be:b5:33:54:9e:7a:1c:33:ed:8d:50:
83:9a:3c:91:43:8d:b8:93:b3:83:6e:92:62:0d:0e:
4f:16:77:38:62:e0:b1:6f:b0:75:48:41:66:f1:be:
d4:cc:05:f7:a1:0d:04:ee:e8:17:af:b9:aa:5a:eb:
2a:6b:47:39:60:6c:ac:a8:ed:dd:9d:e7:74:b3:71:
d3:94:d7:1c:30:27:13:72:c7:c0:c3:30:46:0e:58:
24:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:4A:E5:26:22:1F:FB:42:E6:7B:80:5E:6B:41:25:AD:49:74:E2:0A
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b8:10:b7:6d:40:1a:d3:0e:75:f4:35:4b:75:0d:2b:01:1e:
6e:e0:78:1e:30:70:23:ee:87:d2:90:6e:26:18:52:f7:52:49:
e9:e8:38:db:4f:bd:36:8b:8c:1f:ab:6e:86:05:eb:ea:8d:e4:
27:f6:ca:3a:ff:69:d1:95:57:66:af:14:25:68:53:68:5b:26:
90:f4:3e:fe:04:f6:15:2e:61:bf:0c:b1:80:d3:c9:4d:d9:0e:
01:de:eb:b7:58:b7:bf:82:ba:a9:36:a4:f3:a9:ca:73:37:9e:
52:11:d1:ed:fe:2b:d6:7b:80:f8:e0:6b:32:b7:b1:17:a0:e0:
47:25:62:ab:58:fd:0c:0b:ba:29:e3:7e:51:66:29:d4:ae:49:
92:31:71:b2:1a:8d:75:6b:d7:b5:fa:84:7b:90:cd:f3:d4:0d:
18:0f:2f:b6:b9:0f:49:c0:75:c7:3e:3a:fd:28:12:49:dd:e7:
f3:80:e9:65:8c:65:54:45:40:43:a2:57:34:75:3a:6a:f6:52:
f0:5c:1a:da:83:1d:d2:35:13:82:9e:91:53:1f:92:58:cb:0d:
66:15:fc:72:2e:e3:e8:da:cb:ba:29:4d:4c:c9:c2:00:dc:79:
c9:10:da:bb:b7:a8:6b:31:00:b9:59:9b:e8:17:c1:67:1f:07:
74:03:e4:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaFXQlkWYfT9vuvLTq73lOq/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTViOGNkZmQxZDc5N2Q4NjA2NjBlMzRiZmExYTJhZDg1
ZmY5ZDkwHhcNMjYxMDIwMDMwMjA4WhcNMjYxMDIxMDMwMjA4WjAzMTEwLwYDVQQD
EygxYTRhZTUyNjIyMWZmYjQyZTY3YjgwNWU2YjQxMjVhZDQ5NzRlMjBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyjDitPcL60gHuNhDVa//N/hbywUI
Gn+bjfBU0sjVBFDP65AJ08hbLJI7QqFBbpbWfo9KCEeSyU5p1A4M6vbsK65p5r7R
qMAFKLykaCHLPAtm4jm1pTqSQ/RPrYRZbbDC0UHGw6UNSha4a4+B7HkscuO1bTUA
6rkgo2aYSkshTpL5U30zLvyCEJJUQmj7g79rQcO+2hmNtqGQHpTWrmLxAFPJX1YQ
fZ8ZvrUzVJ56HDPtjVCDmjyRQ424k7ODbpJiDQ5PFnc4YuCxb7B1SEFm8b7UzAX3
oQ0E7ugXr7mqWusqa0c5YGysqO3dned0s3HTlNccMCcTcsfAwzBGDlgkKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBpK5SYiH/tC5nuAXmtBJa1JdOIKMB8GA1UdIwQY
MBaAFDeluM39HXl9hgZg40v6GirYX/nZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUt
ODExNDRmZDAxNTY0LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS8zYTkwMjEtMjk1OS00N2U3LWE2MTUtODExNDRmZDAxNTY0
LzEvTjZXNHpmMGRlWDJHQm1EalNfb2FLdGhmLWRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbgQt21A
GtMOdfQ1S3UNKwEebuB4HjBwI+6H0pBuJhhS91JJ6eg420+9NouMH6tuhgXr6o3k
J/bKOv9p0ZVXZq8UJWhTaFsmkPQ+/gT2FS5hvwyxgNPJTdkOAd7rt1i3v4K6qTak
86nKczeeUhHR7f4r1nuA+OBrMrexF6DgRyViq1j9DAu6KeN+UWYp1K5JkjFxshqN
dWvXtfqEe5DN89QNGA8vtrkPScB1xz46/SgSSd3n84DpZYxlVEVAQ6JXNHU6avZS
8Fwa2oMd0jUTgp6RUx+SWMsNZhX8ci7j6NrLuilNTMnCANx5yRDau7eoazEAuVmb
6BfBZx8HdAPkcg==
-----END CERTIFICATE-----
Generated at Tue Oct 20 05:55:18 2026 by rpki-client