Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: rFetin5oS2Ul1LlgMmovwVl6g3KqOltO8H9od39j9dI=
Subject key identifier: E2:DD:8F:1F:1D:02:2E:4B:F5:02:38:E2:3C:4A:5F:A4:86:BC:9B:E3
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019D37F6FC65E4119BB31C44165C562DF6B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 1204
Signing time: Sun 29 Mar 2026 05:00:26 +0000
Manifest this update: Sun 29 Mar 2026 05:00:26 +0000
Manifest next update: Mon 30 Mar 2026 05:00:26 +0000
Files and hashes: 1: 9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa (hash: J/ckLwZzEt0PQV77vngn+NxdBjiE32bwHDQ3p9KUBfE=)
2: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: 4Qfqu+Wi8RntJ+2q86YJ/itbNnpl6leLnsi4t/yuTes=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f6:fc:65:e4:11:9b:b3:1c:44:16:5c:56:2d:f6:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Mar 29 05:00:26 2026 GMT
Not After : Mar 30 05:00:26 2026 GMT
Subject: CN=e2dd8f1f1d022e4bf50238e23c4a5fa486bc9be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:ff:8a:19:0f:e0:53:e0:8a:37:bc:fe:0b:8b:
99:ee:8e:d0:42:a3:31:00:d4:3b:c4:d9:12:0d:54:
85:d9:e5:2a:c1:4d:4f:d7:4e:d7:be:47:d4:69:f6:
d1:a5:9c:3d:1c:86:10:49:f0:e1:40:70:c5:56:34:
f7:e4:28:ed:30:07:72:80:91:bf:74:29:ce:e1:5e:
09:96:1e:d1:c7:08:12:4f:d0:79:22:3e:0a:ba:37:
7d:76:10:c7:26:73:4a:d6:d1:d3:5b:00:1c:d7:1f:
10:04:74:de:5b:0e:e7:96:84:5d:b8:1c:f1:52:bd:
24:55:f4:2b:53:65:4d:59:50:87:65:28:81:87:00:
59:1a:4e:3f:48:a6:e5:01:af:22:f1:e7:22:91:10:
e8:e4:bc:d8:45:24:dc:0f:45:96:64:0f:89:bb:cf:
bb:be:a2:73:7f:77:e1:0c:32:d9:89:8e:45:65:05:
c2:bc:8b:9a:7f:24:45:89:26:69:d0:36:c6:d6:0b:
0c:fb:54:e6:b3:a7:7f:6b:41:05:28:d7:fe:8a:d3:
d8:4a:94:25:4b:18:29:ad:2a:06:50:2c:63:aa:fa:
80:e9:66:04:61:22:7b:2e:21:ce:cf:b0:bd:5a:bb:
ff:ae:9e:25:9a:76:34:e2:e9:ef:f3:79:72:75:3b:
76:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DD:8F:1F:1D:02:2E:4B:F5:02:38:E2:3C:4A:5F:A4:86:BC:9B:E3
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:f1:51:43:c2:19:1f:f6:19:bb:4b:e8:cc:9e:b4:6f:94:20:
ce:84:6c:ec:e6:38:79:05:51:ae:fa:6c:50:d9:1b:7e:db:b4:
01:70:2c:b2:15:02:73:1a:60:fe:c0:21:c3:a5:4c:08:d8:2f:
89:4f:6a:ce:2a:2d:8a:51:25:20:77:73:5c:94:f1:65:31:68:
cf:2a:7f:25:c2:09:b1:29:88:44:e0:32:1a:e8:ca:f0:9f:f9:
7c:57:0e:e2:53:9d:ce:ba:e7:3f:c2:a1:ae:52:84:f7:30:d3:
39:50:f0:ef:0d:e4:e9:ee:4e:4b:23:fc:88:fe:60:a8:0e:75:
26:d2:5a:1c:95:f5:e9:b2:7f:00:41:0b:1c:17:ad:9e:06:43:
45:f3:5e:95:f7:17:56:7e:1c:06:d4:53:44:2c:ce:55:72:d0:
6c:24:9a:7b:a2:4d:74:2c:23:9e:06:c4:1e:79:a5:18:a0:5d:
64:81:64:7a:90:99:4e:6a:49:5d:aa:2b:ef:13:94:64:ec:c2:
6d:7c:cf:d4:77:42:55:3d:e2:6e:23:58:53:f7:31:9c:d4:b6:
06:f3:a0:a1:3a:eb:36:21:de:9e:d7:b4:de:ce:46:e0:fa:52:
56:0d:0a:35:6a:3d:51:f1:42:cf:84:cb:55:cb:39:c7:70:8c:
ea:db:54:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:28:27 2026 by rpki-client