Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
File: N_k-RoBmZm0Fu1TFSr41Al023v4.mft (raw, json)
Hash identifier: FLKWthIlhWu98v3sO/h2woz24lHpowRAo6EI0ZM+z3A=
Subject key identifier: CD:98:08:C9:76:4B:10:31:19:FB:4A:FE:36:7B:D8:9C:ED:73:A9:FB
Authority key identifier: 37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
Certificate issuer: /CN=37f93e468066666d05bb54c54abe35025d36defe
Certificate serial: 01A06D95F0E0788AA01128B53D220A28552C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
Manifest number: B2
Signing time: Fri 04 Sep 2026 18:02:18 +0000
Manifest this update: Fri 04 Sep 2026 18:02:18 +0000
Manifest next update: Sat 05 Sep 2026 18:02:18 +0000
Files and hashes: 1: IpOk2-baAJmBq3G0sGeE5MDiPGw.roa (hash: DK5qUCU0NDdVm+egXm1v6a3rNwDmd+BapaCsSxr03wQ=)
2: N_k-RoBmZm0Fu1TFSr41Al023v4.crl (hash: 0yBfG7wu8ipqo8c9zCLSRkYSpBn9Z8E4gYg1zemVNPg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6d:95:f0:e0:78:8a:a0:11:28:b5:3d:22:0a:28:55:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f93e468066666d05bb54c54abe35025d36defe
Validity
Not Before: Sep 4 18:02:18 2026 GMT
Not After : Sep 5 18:02:18 2026 GMT
Subject: CN=cd9808c9764b103119fb4afe367bd89ced73a9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2c:52:12:a4:98:13:3f:1b:9f:e3:cb:4d:d5:
50:5e:0a:3a:aa:b2:ff:cf:ee:bc:6a:c8:92:96:f3:
aa:f4:e6:c5:35:50:44:c2:be:4f:ee:e0:8c:f7:d0:
43:95:e1:54:f2:aa:3b:23:3a:89:c2:1a:e0:0f:a1:
88:d4:51:aa:41:05:76:55:4f:b1:15:9c:d5:68:89:
38:e3:4e:49:aa:46:39:23:ef:69:ff:1f:88:9d:1e:
f1:e8:66:21:14:fd:64:2c:15:93:be:d5:15:d0:9e:
b8:14:07:d0:dc:d9:9b:c3:a6:b6:37:8d:60:47:a3:
de:ba:43:00:7b:fc:56:f8:45:2b:e4:2d:86:1d:47:
3b:2b:35:87:a3:6b:8c:d0:04:5e:f8:04:42:25:ea:
9e:82:98:27:db:00:28:e0:ac:b3:2e:50:50:68:c0:
d7:01:12:d0:0a:46:ec:cf:15:60:15:34:fd:16:82:
06:c3:e9:db:be:5c:07:74:58:f8:2a:8f:3e:8b:8d:
93:ad:84:23:bc:21:b2:5f:fa:b9:83:fa:3f:13:94:
8a:39:ca:74:b3:ed:8b:53:cb:68:05:ed:26:c7:5b:
be:97:a4:65:bf:81:e3:c5:ba:b2:fb:9d:48:1c:d6:
5d:6b:dd:a2:ed:c3:d6:9f:55:9b:77:82:62:bc:39:
74:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:98:08:C9:76:4B:10:31:19:FB:4A:FE:36:7B:D8:9C:ED:73:A9:FB
X509v3 Authority Key Identifier:
keyid:37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:34:d9:1a:48:a5:06:b5:18:9b:c4:05:3e:48:88:d1:8f:37:
62:46:17:38:cb:37:ee:d5:1b:18:be:0d:14:65:05:32:4c:8d:
94:67:5a:20:b6:39:ed:33:ae:99:6b:84:24:ca:8c:68:32:c9:
9a:af:ef:27:33:7e:23:12:72:a0:fd:e8:a0:2e:5b:df:0e:08:
79:bd:0d:2e:34:ce:17:a4:73:c5:00:6e:fa:71:ba:38:fa:af:
12:92:4c:3e:42:b9:68:9f:98:15:f1:b6:ff:6d:6b:8f:30:2c:
2f:93:81:48:85:84:6e:84:1b:dd:7e:ed:a5:1f:fa:09:88:c6:
5c:e0:25:21:49:e0:29:5c:f6:cd:51:24:8c:5c:ad:47:29:d9:
a7:fd:57:a3:26:48:f2:be:43:df:8a:f6:c5:a7:c2:b2:ec:23:
ca:ed:56:f0:bb:71:9d:d4:a9:38:58:31:c3:18:44:ee:ce:4c:
6f:f4:01:c1:97:da:6c:7f:53:a7:70:2b:20:48:a4:e1:f7:57:
c4:a5:c6:1c:aa:4d:de:62:48:80:59:06:26:c6:b7:b3:0c:20:
38:b5:86:ef:52:ff:01:aa:b7:ab:1c:52:1f:51:a1:59:e6:44:
b5:0b:e8:1a:b9:fa:16:8f:9d:be:ed:5f:c3:3f:f4:15:6e:60:
a8:4b:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:55:59 2026 by rpki-client