Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: RJhoqCCNQQEBX4sBVrf6JlPxLCOi+nKjzcmAHhCPkv0=
Subject key identifier: DF:57:A4:E5:18:7B:79:32:B0:E2:40:17:5E:B4:F1:68:41:0E:05:D8
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 01A0016FE84D30AAF46CFFC6F6AD63F0C1FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 1A04
Signing time: Fri 14 Aug 2026 18:01:46 +0000
Manifest this update: Fri 14 Aug 2026 18:01:46 +0000
Manifest next update: Sat 15 Aug 2026 18:01:46 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: HSweBGHSIwFhazjYYHr3hucKYkzeb2A30KSMZHZEyGs=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:6f:e8:4d:30:aa:f4:6c:ff:c6:f6:ad:63:f0:c1:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Aug 14 18:01:46 2026 GMT
Not After : Aug 15 18:01:46 2026 GMT
Subject: CN=df57a4e5187b7932b0e240175eb4f168410e05d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:a7:40:6d:68:c4:4e:a2:37:af:ed:d9:9c:e2:
5d:c7:e3:4c:56:f0:be:71:75:60:97:bb:1e:12:2e:
33:da:20:7e:d2:c1:2a:08:66:3a:16:28:b9:62:33:
e5:1a:21:2f:d0:c1:62:d4:9b:1b:97:37:20:52:54:
bc:26:da:26:af:e2:1b:44:b1:f5:10:00:bd:8e:e3:
98:65:57:07:2b:3c:57:d8:11:f3:c5:f3:d0:e9:44:
6d:92:7a:4b:bf:0b:be:74:31:e6:26:f8:97:9a:5b:
c5:ef:16:dd:d8:85:f5:44:20:05:24:aa:0f:27:d9:
52:ab:ce:f1:2c:c7:78:56:f8:d8:07:46:9a:73:61:
87:19:31:d8:8e:61:5f:86:10:23:56:e2:b6:e2:ed:
9a:75:87:a3:1b:3f:c8:a5:c4:81:77:04:79:38:cc:
41:21:7f:b1:f1:34:a2:a4:ab:a8:7a:fb:98:9a:d7:
d3:18:9b:cb:5d:53:ee:de:d8:b7:cd:96:2b:5e:36:
13:be:9a:d4:57:c2:b6:de:74:d2:73:cd:7b:61:bb:
0e:31:3d:9b:df:fe:63:bc:57:e7:6e:99:71:f6:48:
47:79:0f:31:71:65:be:29:59:e2:33:a3:52:91:fb:
d8:b4:d8:ec:c6:ac:3b:74:c1:39:b8:fc:aa:99:4c:
42:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:57:A4:E5:18:7B:79:32:B0:E2:40:17:5E:B4:F1:68:41:0E:05:D8
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b3:f9:51:bb:ed:41:8e:fb:d4:e1:8b:a1:12:e4:d5:a7:b9:
f5:b0:bc:1a:d3:5a:3b:30:4d:93:4b:33:85:11:ca:16:54:61:
05:4d:cb:cf:a2:73:76:70:9e:6b:53:c3:9f:aa:d7:7a:ac:2d:
5a:0e:b5:e1:4d:ad:2b:be:c5:09:e5:aa:77:75:58:9d:c2:09:
02:88:d8:6e:09:3b:a1:a8:76:52:fc:66:30:aa:8d:64:da:dc:
12:0c:f5:a2:13:e5:da:de:c5:26:d9:71:5d:aa:d8:6e:04:f7:
54:be:b7:71:14:d3:70:65:48:2e:67:d9:4e:49:3a:ff:b6:53:
98:69:75:7e:51:d8:04:94:4d:50:5f:5c:d7:38:b0:bc:89:ee:
82:a3:8b:33:ff:80:06:63:55:49:d2:d8:9b:88:5a:a6:43:49:
92:1a:25:d2:39:17:ff:2f:48:ff:8c:64:9d:03:b6:45:ac:64:
86:18:1b:ea:cc:ad:86:d2:ef:fc:97:b5:f9:e3:4e:e9:77:ea:
24:b2:5a:be:d1:b2:ec:21:d3:16:93:b7:44:26:cf:90:17:bb:
90:63:00:ac:1b:48:20:f3:58:f1:5c:a0:01:ca:32:49:35:3d:
5a:c6:0f:5c:cd:63:e5:b8:59:ca:08:5c:2a:e2:ff:d2:ca:1e:
6d:0e:3c:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:34:49 2026 by rpki-client