Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: N1hePlb8nVDdryG+nlSLYYFZfGQpbrIPtwTmoWwO62A=
Subject key identifier: 99:D7:9F:14:B9:11:69:17:D5:73:0A:F1:3D:D2:5B:78:2D:AC:07:16
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 019E4F58F9328E66B7725ECE03178C1A8FD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 1624
Signing time: Fri 22 May 2026 11:01:31 +0000
Manifest this update: Fri 22 May 2026 11:01:31 +0000
Manifest next update: Sat 23 May 2026 11:01:31 +0000
Files and hashes: 1: L4LHXK0GX3W-TkIYyV116VIxXoI.roa (hash: fcLNxKQ8yWrXIL5Wmszwu+qvpRuxr2NO+f0WZHV/MxY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: veNPBnj1Y9p8wfJ1undtuMI73UjqQ31eia3EXo+tIYI=)
3: n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa (hash: hXDmI2LoN2Vg0aHEdqhP1gGIgLWmSc2cb/qRIsBSYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:58:f9:32:8e:66:b7:72:5e:ce:03:17:8c:1a:8f:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: May 22 11:01:31 2026 GMT
Not After : May 23 11:01:31 2026 GMT
Subject: CN=99d79f14b9116917d5730af13dd25b782dac0716
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:5c:60:72:da:3e:35:62:67:cd:db:c8:26:4b:
f6:f5:c5:bb:e3:e9:ed:63:bf:73:e6:45:b9:03:26:
1f:1d:4e:53:7e:89:fe:aa:53:8a:aa:88:d3:84:87:
93:81:49:1a:0b:13:d1:95:1f:38:51:bf:7c:7f:83:
82:8b:c7:85:fd:3c:52:00:66:61:31:19:b3:6f:9c:
40:f6:9d:75:57:0f:87:5a:e2:0e:55:6f:c3:7c:3f:
ac:6c:04:9d:0c:9f:f3:c3:c4:8f:65:0e:44:a6:c1:
e9:e1:2c:bd:b1:23:6c:8b:76:e3:33:b1:5c:8a:3b:
dc:e4:10:56:13:ad:a7:a5:70:eb:ab:5b:60:7c:a1:
1b:36:1d:09:df:61:b5:90:b8:24:64:1c:0d:e2:a3:
69:2a:d3:41:c9:56:07:59:e6:b2:95:ab:7b:c5:e8:
17:8d:26:e9:49:0f:16:20:cf:e3:e8:47:90:5b:d2:
f9:fc:2a:8e:5e:6f:35:74:75:a9:e4:29:94:be:63:
cc:8a:78:9e:04:8b:44:3d:b5:5f:50:6a:95:c4:e7:
a3:43:86:6e:39:02:11:5d:5c:c2:86:17:cd:a0:ed:
be:74:93:8c:61:94:37:e8:f4:47:d6:3d:77:22:54:
7d:36:f4:91:26:3d:e6:ce:10:b2:de:ad:16:9d:67:
1d:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:D7:9F:14:B9:11:69:17:D5:73:0A:F1:3D:D2:5B:78:2D:AC:07:16
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:8b:b0:fd:7f:0c:8d:14:6b:35:ad:6b:a1:86:4d:93:9c:d3:
30:ab:80:94:6e:f0:44:62:68:96:b6:e2:df:41:28:d0:f5:d4:
05:5c:f4:e8:07:6c:8e:91:25:3b:44:67:d7:ea:ca:cd:bd:cd:
14:97:42:28:a0:ae:5a:56:43:a3:57:dc:44:85:0a:04:2c:3b:
3a:19:06:fd:44:e8:9b:9a:0d:9d:bd:c4:f6:b3:d7:1b:e7:75:
ea:fd:52:73:47:3b:24:dc:4b:93:dc:b3:d2:78:ad:12:d9:d0:
81:24:2f:24:b7:75:28:06:5c:df:c9:78:85:ec:ca:88:a4:23:
8e:31:e2:a8:e7:cb:de:b1:63:5d:cc:21:50:53:0d:12:ac:ce:
56:74:51:ca:0d:74:f3:7f:44:4b:b6:6f:47:03:31:58:0c:c3:
7f:8b:4b:6d:73:c4:db:4a:d3:05:d1:bb:ed:f2:45:3e:eb:fd:
8d:44:83:29:02:c3:b8:17:18:b4:16:ff:18:c1:d6:0f:f3:a7:
38:11:9e:82:90:fb:64:71:56:43:b2:0b:5d:ae:66:ff:4e:af:
98:bf:38:68:aa:c2:9f:3c:d8:56:9a:58:e3:b2:5a:99:1b:8a:
c9:7a:7a:3e:12:49:6f:f1:45:2e:66:82:1a:2f:3f:e3:70:fe:
8f:59:4d:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:09:46 2026 by rpki-client