Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: 2CJxOgOB8RtJN6Rl0OagTYhRqv6u63+on28eHTgxVOo=
Subject key identifier: 26:8B:7F:D2:D6:F9:C6:E4:1A:4F:80:4C:89:F0:26:14:D7:3B:05:04
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 019EC224E5B8759C49EF6316815DAC04F0C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: 018C
Signing time: Sat 13 Jun 2026 18:00:58 +0000
Manifest this update: Sat 13 Jun 2026 18:00:58 +0000
Manifest next update: Sun 14 Jun 2026 18:00:58 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: EZmXjo2H3B1D2gGKABkxaRjceTdoHvwAy/rjD5oag/c=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 10:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:24:e5:b8:75:9c:49:ef:63:16:81:5d:ac:04:f0:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Jun 13 18:00:58 2026 GMT
Not After : Jun 14 18:00:58 2026 GMT
Subject: CN=268b7fd2d6f9c6e41a4f804c89f02614d73b0504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f6:3e:c6:13:7f:60:e8:1f:79:66:a4:83:67:
11:4c:1e:a0:7b:01:84:f8:db:b6:b4:6d:54:b3:13:
e8:a8:61:bf:1b:29:9e:c7:41:5b:93:df:f4:b9:ff:
18:0c:11:97:78:8f:51:a0:05:61:3e:c3:eb:24:d6:
9f:d3:7c:22:1d:0b:a7:39:25:0a:36:44:4e:b1:81:
3a:89:54:08:03:1a:31:0d:ea:d5:10:dc:f0:cb:39:
d9:4b:59:13:7f:c2:c3:64:88:1c:05:c4:81:7c:2f:
95:0f:18:71:4a:be:39:a9:db:ff:78:fc:0d:9e:ec:
0b:f3:6e:ca:26:85:e9:0c:94:ab:1b:4b:36:0e:20:
d5:67:a5:a2:31:1a:9e:f7:d8:d0:e6:0c:7e:b8:55:
44:92:f1:fc:56:6e:f6:c6:52:e1:57:08:88:02:c3:
1f:60:d8:47:81:9f:cc:7a:b9:01:68:3c:7f:96:20:
04:87:fc:41:ae:91:a2:44:aa:e2:03:ae:1e:40:9c:
ff:db:32:7c:4b:a8:5b:8a:ae:81:74:cb:2b:5f:d8:
57:9d:10:b7:9c:12:fe:20:c8:1f:da:a0:c4:b7:0d:
11:06:24:77:3e:e1:94:29:ff:ee:2d:51:a7:55:85:
18:d6:10:fb:a2:f1:6a:3a:84:33:52:d9:5e:d6:05:
fd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:8B:7F:D2:D6:F9:C6:E4:1A:4F:80:4C:89:F0:26:14:D7:3B:05:04
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:13:2f:fb:da:80:45:db:88:50:85:dc:ce:58:30:26:da:12:
74:cb:af:0d:e6:f9:01:44:99:9d:91:1a:2d:6b:fd:28:5c:fc:
74:40:d4:74:78:20:b5:9d:a5:f4:da:0e:84:24:5a:28:2e:bb:
28:a5:ab:61:d0:2f:08:79:d1:a4:c4:ec:fc:1d:fe:0d:74:ba:
cc:b6:0d:75:b2:e0:ce:0e:04:fe:28:2d:20:9f:22:dd:ba:3a:
8a:ef:c2:90:07:24:9f:4b:f1:c8:d6:6d:82:1d:2a:36:ab:78:
b9:b5:a9:41:a0:83:02:b4:a3:b5:89:75:88:10:1e:21:31:70:
5f:f5:ef:69:53:45:18:4c:02:22:8a:3b:3c:40:53:ae:85:cc:
97:72:6b:db:f0:fa:66:fe:80:a4:76:24:aa:e8:b7:3b:d4:cf:
e4:eb:40:b1:19:ed:5c:a9:4a:98:7a:22:3d:5d:3d:5d:43:d9:
f6:41:27:0d:41:c2:ee:26:6c:56:60:cd:9c:23:16:b2:c3:ef:
f4:bc:74:3a:3e:b9:a2:b2:92:a1:51:a4:5f:e6:3b:9c:10:e0:
44:13:49:9a:f3:a3:36:cb:3a:4e:05:e6:0a:53:b1:be:f4:a9:
c4:a9:52:3d:ce:b0:85:5e:ed:b6:8d:31:77:3b:45:4b:6b:dd:
4c:d6:a4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:44:33 2026 by rpki-client