Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: l9Scv1MpAD2F03L728OiSBIE+tqejqxL8i4qbuXfMN8=
Subject key identifier: 0F:AA:5F:F3:35:46:93:BC:20:19:6D:58:BB:A8:CD:05:61:57:A3:5A
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 019D9AAC2B144917BDA4B9F188A854013700
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: F3
Signing time: Fri 17 Apr 2026 09:01:07 +0000
Manifest this update: Fri 17 Apr 2026 09:01:07 +0000
Manifest next update: Sat 18 Apr 2026 09:01:07 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: 9ICWKHwy+0U4xvRhjvJaK6pnfSFVhORBOJef/7zo16Q=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:2b:14:49:17:bd:a4:b9:f1:88:a8:54:01:37:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Apr 17 09:01:07 2026 GMT
Not After : Apr 18 09:01:07 2026 GMT
Subject: CN=0faa5ff3354693bc20196d58bba8cd056157a35a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6e:ac:53:07:23:31:80:0c:00:41:aa:ff:1e:
15:6c:cd:64:fa:51:d2:b1:75:a5:ed:65:9c:54:99:
29:74:8a:c2:42:d9:f9:97:68:35:27:59:a9:0b:4b:
f8:2c:19:f3:6e:e5:c3:5a:c9:96:e7:0d:26:33:c3:
a5:93:79:59:0f:82:bc:54:5c:88:49:e3:36:75:37:
e7:96:50:d0:a7:95:39:38:24:c5:6d:70:bc:b4:0a:
69:ca:a9:7f:ab:64:87:5e:78:cd:7e:f0:54:9b:61:
3e:41:ef:3f:ab:75:74:76:f5:39:63:4d:71:c4:c2:
24:84:c7:bd:26:c6:5d:9f:88:8d:97:5d:c7:0b:0b:
f9:dc:9f:05:ec:3b:20:3e:cc:db:8f:82:72:4e:02:
21:67:92:44:1f:7f:e0:43:38:49:2d:f6:57:2f:f4:
85:28:90:cb:1c:fb:57:16:ef:3e:bf:00:ec:ee:4f:
f8:80:d7:8b:99:c4:c5:18:2a:3f:fb:27:78:48:ea:
13:f6:9c:2d:40:68:18:59:b7:e7:c6:24:93:e4:1c:
5b:69:b0:fc:d2:a6:78:ab:df:b8:23:11:22:21:74:
29:a3:a9:a2:73:94:a1:88:bc:97:40:0e:da:b1:8c:
65:25:a2:86:ac:f7:f2:00:cc:f5:4f:d3:62:51:ba:
87:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AA:5F:F3:35:46:93:BC:20:19:6D:58:BB:A8:CD:05:61:57:A3:5A
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:60:a5:da:22:f4:db:43:21:93:6c:ef:78:fe:e6:03:1e:cb:
a9:aa:07:1c:d4:81:f3:98:6b:05:1a:42:c2:89:cc:ee:43:2c:
53:46:6e:dc:2a:f4:30:26:4f:ef:7e:2e:ea:26:b9:16:fc:a8:
e9:79:1e:80:82:33:a3:1d:68:06:4f:ff:3b:66:c3:01:67:8f:
2e:7d:44:dd:3f:16:45:e7:cd:d2:95:3a:83:76:df:36:46:85:
78:e3:18:db:51:82:97:b9:4b:f1:61:09:0c:4a:37:11:6b:3c:
6e:ed:a0:19:6f:ec:2e:9e:31:00:ff:aa:57:6d:ec:7b:e4:da:
5d:5d:c4:1b:f9:92:5b:5b:c9:97:76:96:6c:5b:2a:a4:b5:d3:
3c:6d:09:e0:48:d1:9e:de:54:a6:81:2a:83:35:38:a4:f1:75:
82:34:05:da:2b:86:34:d8:fa:2e:b4:b2:3a:93:66:86:55:d1:
b7:5c:1f:02:a4:83:40:92:37:41:f4:12:40:ba:e9:51:6c:0e:
3f:3a:c8:b2:d3:08:94:f1:e1:9a:33:8b:f8:f8:6d:9d:c7:c8:
ba:ec:3b:40:a3:a3:91:7b:6e:ae:34:4f:64:4f:cd:59:8c:9c:
2c:a6:7d:ae:6f:61:29:8b:9f:2e:e1:ab:30:3d:74:b8:72:52:
db:d5:37:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:22:25 2026 by rpki-client