Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: CfYcj6tNmYPJM/sZiO2pr8VY2uxNg3Fq0N405mlyyHk=
Subject key identifier: A1:C5:89:83:45:9B:71:9E:6B:C7:47:41:3A:3B:52:34:98:55:7B:2F
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 01A0E62D6F35548CCA6A7C6A9A059871C551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 0A37
Signing time: Mon 28 Sep 2026 04:02:12 +0000
Manifest this update: Mon 28 Sep 2026 04:02:12 +0000
Manifest next update: Tue 29 Sep 2026 04:02:12 +0000
Files and hashes: 1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: C97T7UPgO7JokUfvr2A/eEXBz1RnsEbF0zIJ1EwarcY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e6:2d:6f:35:54:8c:ca:6a:7c:6a:9a:05:98:71:c5:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Sep 28 04:02:12 2026 GMT
Not After : Sep 29 04:02:12 2026 GMT
Subject: CN=a1c58983459b719e6bc747413a3b523498557b2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:8e:db:fc:9e:0b:1d:4c:ca:12:6d:89:d7:
38:52:cd:2f:c5:ce:f8:f2:ce:14:da:1d:c4:47:c8:
c2:78:fc:7d:6f:c8:46:57:7d:e1:94:68:d7:eb:32:
96:b2:76:06:7a:d8:01:75:f5:c4:5a:3c:27:c0:02:
96:fc:4c:5d:6d:57:10:27:76:ac:89:a9:77:f9:3c:
c3:78:b6:10:ca:91:6a:f1:a6:ff:c2:42:98:12:ad:
9a:7e:14:86:00:99:f0:c1:b8:5f:47:15:a3:b6:5b:
7b:78:5f:ca:83:ab:1f:97:a3:1d:ca:bf:40:37:ed:
3f:05:0b:cd:9f:4f:c0:3e:0f:59:d1:14:03:c1:ea:
51:34:32:30:38:cf:ae:58:fe:59:51:51:46:bd:2a:
f2:9b:b0:1d:e2:cf:87:68:af:ca:c1:6c:14:c4:0e:
34:58:05:ab:e8:2a:03:0f:04:2d:6c:46:78:02:20:
9b:e2:d7:69:0c:46:71:ac:f2:ca:9d:92:fd:12:d4:
50:50:fd:44:38:6a:2b:a4:c7:ca:07:d2:cb:30:cc:
fa:ac:46:b3:44:03:88:3a:b5:c1:a9:5e:43:6b:cc:
0b:fc:12:f7:e8:50:86:8d:b3:44:36:aa:99:71:14:
98:d7:f3:d9:b0:7d:58:f4:8e:34:2c:f1:42:a5:29:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C5:89:83:45:9B:71:9E:6B:C7:47:41:3A:3B:52:34:98:55:7B:2F
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:46:ea:ae:17:ec:10:54:cf:f5:a2:4a:f1:0e:39:8a:7d:b2:
9a:b6:02:07:1c:4a:44:e5:6e:1b:ce:57:4e:5e:a6:cd:8c:18:
56:8a:d3:5b:1f:a5:81:c7:5e:a5:0a:b2:81:18:7e:a5:c8:ff:
14:6b:3a:e7:da:d9:f5:fe:7f:ce:3a:96:5c:7b:bc:b0:c7:a4:
13:48:84:e5:e8:91:35:dc:f6:e9:b2:3b:87:0d:a4:aa:f6:d2:
18:fd:9c:1e:67:86:aa:9e:6f:9a:86:09:8f:11:ab:85:70:fa:
fd:8f:05:2e:13:93:2b:7f:68:c1:09:41:87:dc:d5:85:ac:c8:
2c:65:bc:07:9c:e4:e5:c6:7b:a7:99:1b:d7:5c:51:d7:62:cf:
de:d0:1e:d5:6e:cc:a2:6a:93:8d:82:6e:94:5b:07:c7:d6:0c:
d2:d0:ef:a4:dc:0c:09:93:a6:d6:8f:aa:9e:f3:d3:75:15:d5:
ce:c3:c4:49:bd:be:9f:41:ce:fe:c1:f8:86:be:c3:11:d2:8d:
cb:78:05:00:ff:21:d3:2d:83:76:fe:e5:82:46:92:7a:1a:82:
45:a4:49:b7:15:23:92:04:33:7d:d7:5e:31:53:37:8d:05:ba:
78:b6:8e:8d:ae:8a:e0:3b:5d:ac:48:7a:dd:43:e8:d6:cd:67:
56:57:90:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 10:50:47 2026 by rpki-client