Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: fxceLKXUQWii+Q44K4YwVkJZlLrtvRGfrPyLSrF7xNI=
Subject key identifier: 7B:4C:FD:77:90:28:12:1E:FA:0D:91:90:5F:F3:43:50:22:2A:B3:AA
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 019D38D370BA26D4EA63E11C8CCC5D39E9DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 06B5
Signing time: Sun 29 Mar 2026 09:01:14 +0000
Manifest this update: Sun 29 Mar 2026 09:01:14 +0000
Manifest next update: Mon 30 Mar 2026 09:01:14 +0000
Files and hashes: 1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=)
2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: JQnHmiZ9T5G3PbEGrzSGLVLIi3ZVndrBkLE0ov2GeWo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:70:ba:26:d4:ea:63:e1:1c:8c:cc:5d:39:e9:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Mar 29 09:01:14 2026 GMT
Not After : Mar 30 09:01:14 2026 GMT
Subject: CN=7b4cfd779028121efa0d91905ff34350222ab3aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:aa:c1:42:22:1e:f4:6e:ba:99:89:21:43:fd:
aa:7a:28:ca:14:9d:5e:f8:8b:b4:b6:c3:25:67:e0:
ca:c1:6d:fa:f7:e9:75:c0:20:df:2c:1e:cb:1b:7c:
45:2b:da:88:e7:a0:ff:09:ad:a5:51:a6:ac:e2:08:
b6:79:cc:cf:90:ce:73:c7:8a:35:5d:5f:89:ae:05:
70:52:e1:c8:19:1c:75:69:ec:70:1f:68:ef:22:6d:
23:12:fb:49:ce:38:e1:ce:2b:f5:eb:25:4f:f1:04:
66:ce:e0:db:e8:5e:c9:bb:7d:92:5e:2d:67:8a:54:
9a:ba:55:71:a2:ae:38:72:d6:8f:99:97:41:7a:77:
19:87:b4:65:41:4d:e2:03:b3:9d:14:b5:7c:77:bf:
22:fc:f1:90:43:32:8d:df:b3:88:b6:cd:17:f4:1f:
12:e7:6d:22:5f:a4:70:31:c9:98:8b:9a:ef:c5:b0:
20:ec:36:b0:bc:6c:1a:79:51:55:ba:ec:dd:34:36:
aa:bb:1b:80:43:8c:22:9c:0e:d5:df:19:b9:7b:a8:
e6:3a:c7:dc:48:f2:a5:7a:ac:11:69:c0:af:32:16:
a9:8f:5a:a4:39:4f:e9:88:85:c2:db:e9:59:37:c2:
e3:98:48:d4:5b:3a:02:45:44:f6:cf:7c:b0:af:62:
ef:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:4C:FD:77:90:28:12:1E:FA:0D:91:90:5F:F3:43:50:22:2A:B3:AA
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:fd:4b:cd:3a:8a:d2:38:13:8f:0e:aa:c5:58:b4:15:09:b6:
36:8c:03:4d:29:d8:13:1f:11:20:bf:41:d7:58:18:a7:3b:c3:
fc:71:9c:af:4a:02:8c:df:3d:65:f9:fa:ea:4f:45:88:a9:0b:
ce:85:69:cd:94:79:de:96:31:2f:e2:2b:14:49:a9:5b:07:87:
1c:ad:a6:67:5e:f0:d0:2f:36:d5:30:f8:90:d5:90:4b:de:f6:
7c:70:a4:10:36:a4:55:73:e9:32:a0:33:6a:da:f8:a1:1e:54:
7f:24:54:55:e5:3a:7e:db:b6:a3:d7:b2:5f:26:15:a6:80:86:
08:ff:66:1f:f5:8c:98:e4:17:80:97:63:a0:23:5f:08:4a:45:
26:59:26:81:9f:df:92:9c:18:39:f0:ac:9c:05:ed:53:48:e3:
82:da:f4:07:6b:33:27:bb:6d:1f:21:c8:b5:80:0a:6b:d5:15:
04:56:bc:dc:f9:06:b9:c9:f7:39:33:67:2f:4a:e9:c4:9c:0f:
14:5a:7f:2e:0e:eb:80:82:69:64:b2:9a:18:d0:81:0f:6e:48:
80:2a:f2:cf:cb:c9:4e:28:3a:7f:87:75:02:53:cb:a1:8d:72:
2f:70:9f:af:69:92:1b:a2:1c:0d:e0:47:2f:bd:8c:02:a5:2e:
a7:c9:da:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0403C6JtTqY+EcjMxdOencMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTNkYmM1ODI5ZWM1MDBiMzM0MjZhMTg4ZDAzOTkzOTVi
ODA2YWEwHhcNMjYwMzI5MDkwMTE0WhcNMjYwMzMwMDkwMTE0WjAzMTEwLwYDVQQD
Eyg3YjRjZmQ3NzkwMjgxMjFlZmEwZDkxOTA1ZmYzNDM1MDIyMmFiM2FhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKrBQiIe9G66mYkhQ/2qeijKFJ1e
+Iu0tsMlZ+DKwW369+l1wCDfLB7LG3xFK9qI56D/Ca2lUaas4gi2eczPkM5zx4o1
XV+JrgVwUuHIGRx1aexwH2jvIm0jEvtJzjjhziv16yVP8QRmzuDb6F7Ju32SXi1n
ilSaulVxoq44ctaPmZdBencZh7RlQU3iA7OdFLV8d78i/PGQQzKN37OIts0X9B8S
520iX6RwMcmYi5rvxbAg7DawvGwaeVFVuuzdNDaquxuAQ4winA7V3xm5e6jmOsfc
SPKleqwRacCvMhapj1qkOU/piIXC2+lZN8LjmEjUWzoCRUT2z3ywr2LvqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHtM/XeQKBIe+g2RkF/zQ1AiKrOqMB8GA1UdIwQY
MBaAFDdT28WCnsUAszQmoYjQOZOVuAaqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMt
MDM3OTkzMGY4Mjg2LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8zNDE1MDgtYTBhYS00MGM5LWFlMGMtMDM3OTkzMGY4Mjg2
LzEvTjFQYnhZS2V4UUN6TkNhaGlOQTVrNVc0QnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/1LzTqK
0jgTjw6qxVi0FQm2NowDTSnYEx8RIL9B11gYpzvD/HGcr0oCjN89Zfn66k9FiKkL
zoVpzZR53pYxL+IrFEmpWweHHK2mZ17w0C821TD4kNWQS972fHCkEDakVXPpMqAz
atr4oR5UfyRUVeU6ftu2o9eyXyYVpoCGCP9mH/WMmOQXgJdjoCNfCEpFJlkmgZ/f
kpwYOfCsnAXtU0jjgtr0B2szJ7ttHyHItYAKa9UVBFa83PkGucn3OTNnL0rpxJwP
FFp/Lg7rgIJpZLKaGNCBD25IgCryz8vJTig6f4d1AlPLoY1yL3Cfr2mSG6IcDeBH
L72MAqUup8naEQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:10:40 2026 by rpki-client