Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: WEIj3FAcxUT6rhad1GpaSTH5pB8Ar5fDdxmmAeRS3yk=
Subject key identifier: 20:AD:4F:9B:72:4B:70:8E:D8:D1:5C:38:46:D2:3A:DF:22:18:A0:95
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 01A0C77D10ABE1277D0BA452AD7D700E13A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: 0298
Signing time: Tue 22 Sep 2026 05:00:57 +0000
Manifest this update: Tue 22 Sep 2026 05:00:57 +0000
Manifest next update: Wed 23 Sep 2026 05:00:57 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: DOIdc9BT8EJ1g9dPnGK4sqP8N8i/GfRacn2G6j7UcDE=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:7d:10:ab:e1:27:7d:0b:a4:52:ad:7d:70:0e:13:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Sep 22 05:00:57 2026 GMT
Not After : Sep 23 05:00:57 2026 GMT
Subject: CN=20ad4f9b724b708ed8d15c3846d23adf2218a095
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8e:aa:3d:94:79:e9:c5:37:40:54:19:a2:61:
de:ab:4f:90:b2:29:d0:12:3a:6b:af:8d:5f:ec:47:
f7:19:53:90:f9:ee:d5:3e:2f:6e:1c:51:02:e4:36:
3a:6c:47:df:62:30:36:cf:17:5e:9c:c7:2d:58:8b:
60:7d:5d:21:f3:eb:be:26:e1:2f:86:2d:70:1a:2b:
88:43:8c:f1:23:70:ae:27:4f:c6:66:06:3a:fa:e2:
a1:9d:d1:0a:7f:bf:8a:29:af:88:41:a3:e6:da:d2:
56:fd:d2:9b:fc:a4:3e:25:49:7a:16:d4:9d:21:e6:
fe:3b:cd:82:c3:c9:01:d7:6e:9e:33:c3:80:0c:48:
13:86:c5:5c:b7:b3:ce:f1:5a:45:c7:92:60:04:33:
00:47:dd:28:2e:c1:73:a6:66:58:82:8f:03:45:6b:
04:7a:81:41:e1:73:23:49:30:f0:ef:c5:98:21:69:
43:2e:b3:92:fd:0d:6e:7e:f9:09:39:b9:e1:4b:df:
e3:56:ff:ab:2d:76:63:82:d3:99:31:b4:7f:4b:d2:
7b:a5:20:a3:4d:b9:59:cd:f9:e5:c8:0d:59:2e:ee:
00:3b:c8:5b:30:90:ff:56:77:e3:c3:66:80:57:94:
87:41:c4:db:81:bb:f3:97:10:c7:a3:dc:14:9c:9f:
b3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:AD:4F:9B:72:4B:70:8E:D8:D1:5C:38:46:D2:3A:DF:22:18:A0:95
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:c5:90:50:cb:16:bf:2e:01:65:1f:f4:34:5a:c1:b2:66:3c:
5a:2d:18:7c:b8:69:9b:a3:8e:37:40:88:c3:e0:e3:ff:6c:82:
de:58:39:8d:68:5d:d2:c3:a6:a8:97:af:29:f6:52:27:03:84:
11:3a:48:5f:f8:71:ba:af:66:64:a7:12:4d:53:2c:dd:03:4c:
85:6b:70:58:e7:93:bb:41:e3:9f:99:a3:73:c5:36:57:d5:c4:
e6:9e:85:8b:01:4e:8d:34:3e:47:84:0b:dc:4b:cc:8b:2b:f9:
4f:f4:3d:d9:e1:4e:b3:b3:29:44:9a:03:fe:bb:2b:d8:63:59:
dd:09:81:82:6d:7f:a8:38:64:e2:a7:30:e0:5f:ab:4a:77:c3:
e9:fe:4c:b7:de:04:2c:ff:c0:6d:be:4e:6e:6f:72:c3:d1:33:
1b:87:59:c4:c2:4c:fb:e6:3e:ef:94:28:c4:a1:44:07:4b:ea:
e6:e5:4b:6a:ef:70:89:82:f8:f0:97:e8:11:04:cc:43:b7:34:
f4:b7:6c:5c:94:32:ef:c3:32:49:a7:e5:6f:f2:a0:8d:5d:e4:
7c:70:8c:9a:df:3a:26:9a:aa:fc:f9:54:09:4c:4c:8a:b8:f1:
e5:76:e4:08:33:33:92:06:6a:ae:ad:64:79:70:4d:10:44:e5:
62:12:ae:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 07:53:10 2026 by rpki-client