
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
File: N0zC_9dpwY5ebw38mg6nT7P4wQg.mft (raw, json)
Hash identifier: /vPRM3s5HTIzfScUOWmVLPJZJlWPmjocyNrzIYNO3VQ=
Subject key identifier: 6F:D9:22:D9:69:6E:00:22:02:29:37:30:5B:DC:C2:B1:69:12:58:62
Authority key identifier: 37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
Certificate issuer: /CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Certificate serial: 019CACB4FF9AD446A2417DAE7E180B93FE9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
Manifest number: 0807
Signing time: Mon 02 Mar 2026 04:01:08 +0000
Manifest this update: Mon 02 Mar 2026 04:01:08 +0000
Manifest next update: Tue 03 Mar 2026 04:01:08 +0000
Files and hashes: 1: MwkMvskaQKovGIGmNj_lfd4XdPQ.roa (hash: gLPPmCzBA8LuL7uxWhDAFr4CxN8OOAgFXJiuqMmefYs=)
2: N0zC_9dpwY5ebw38mg6nT7P4wQg.crl (hash: fxI6P6DMTyZp4u/Tq8ApfdZSWXxgQwTI5GjgbSy9rQ4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:ff:9a:d4:46:a2:41:7d:ae:7e:18:0b:93:fe:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374cc2ffd769c18e5e6f0dfc9a0ea74fb3f8c108
Validity
Not Before: Mar 2 04:01:08 2026 GMT
Not After : Mar 3 04:01:08 2026 GMT
Subject: CN=6fd922d9696e0022022937305bdcc2b169125862
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:67:5d:ed:3d:94:2b:02:e7:97:75:81:d5:4d:
d9:3c:9f:01:01:cf:ca:86:e0:58:b9:24:d6:8d:75:
d1:79:c8:b9:3d:f8:3e:71:fb:f6:7d:ea:31:cc:91:
19:f2:2d:e0:f2:b5:ed:1e:1b:20:4c:36:c5:96:91:
04:f1:e0:0c:a3:cb:8d:d0:2f:ed:88:16:a1:30:20:
df:14:ae:fa:da:1c:8a:27:c2:2d:49:ce:e9:d4:c2:
64:ab:f1:9e:a9:9e:a4:13:91:ed:2b:00:36:ae:d9:
ff:7d:ff:64:e1:5e:b4:b0:d4:35:49:3d:d9:8c:64:
a9:47:2d:bd:3b:12:3b:52:58:c1:74:22:f5:5f:ad:
61:69:c7:50:79:d6:83:c5:d8:09:6b:68:db:eb:d6:
c0:5a:51:d2:ec:f8:4c:c7:e4:ba:61:98:a3:df:48:
ac:ab:e6:4e:d1:85:8d:e8:5d:f0:77:b7:42:5e:28:
83:61:fa:ff:55:be:ee:5c:56:8a:11:a1:3f:c4:9d:
03:5f:e1:9c:f3:ea:f1:c0:50:27:bd:c0:89:09:96:
ec:6d:06:d6:20:0a:4a:53:f2:24:1c:8a:e1:98:f3:
7a:93:ff:ce:f1:8c:a2:3a:c7:92:ca:65:24:0d:c2:
34:05:db:33:59:83:e7:e0:c6:ab:b8:a1:95:b0:d5:
cf:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:D9:22:D9:69:6E:00:22:02:29:37:30:5B:DC:C2:B1:69:12:58:62
X509v3 Authority Key Identifier:
keyid:37:4C:C2:FF:D7:69:C1:8E:5E:6F:0D:FC:9A:0E:A7:4F:B3:F8:C1:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0zC_9dpwY5ebw38mg6nT7P4wQg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/24c5a3-2a31-4b85-840e-26806ec35c20/1/N0zC_9dpwY5ebw38mg6nT7P4wQg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:50:33:b9:6d:62:5b:cb:c0:15:4a:6f:32:74:ce:f5:a9:dc:
11:04:bf:a0:c5:04:08:a9:d2:ec:44:e2:31:49:00:00:e8:7a:
d3:42:9b:ab:2a:13:66:ee:b4:ac:17:1a:dc:6c:e6:ea:25:14:
30:ae:4b:24:86:45:6f:37:cf:ce:fe:d7:10:6b:0b:43:bb:9a:
a6:3f:68:df:92:ac:65:27:e0:5f:ca:aa:15:8b:47:7b:a1:6b:
cb:64:36:5e:9b:c6:91:b5:db:bd:ba:a6:57:fb:bc:09:ca:63:
95:31:f3:5a:0a:3c:f9:5d:4d:e1:14:66:98:50:2b:91:bd:74:
d3:e0:c1:38:10:26:12:53:80:db:c9:27:27:9a:25:32:46:26:
b1:62:14:47:54:c3:a6:57:e7:9b:10:a3:58:7d:37:c0:0e:e9:
14:4d:96:6c:05:69:a6:c7:b0:1c:85:70:00:28:1c:96:77:42:
0e:44:c4:a9:24:95:44:62:a9:0d:e8:90:07:29:ac:d8:5e:41:
e7:77:79:41:90:66:50:fe:0c:f5:45:16:d6:5a:e1:49:38:75:
02:06:aa:42:70:e4:7b:24:e5:d4:f5:7b:fe:65:38:f5:b3:86:
ea:9d:cf:20:57:f2:55:4c:04:90:f8:20:cc:c3:ca:0b:69:30:
26:e2:d5:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:14:54 2026 by rpki-client