Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
File: N6MHIGgl2WIY507NCN0t2d3A-dc.mft (raw, json)
Hash identifier: 7ZssHA+hSvUeFfrqG+KIbdcP5EYBkYeCd5BRgopCs38=
Subject key identifier: 3D:73:25:00:04:FD:FC:C5:BA:9E:0C:12:E2:9B:A0:B8:2E:F2:EC:E9
Authority key identifier: 37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
Certificate issuer: /CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Certificate serial: 019CA945FF96575BDCBF0D92442B2030FE21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
Manifest number: 76
Signing time: Sun 01 Mar 2026 12:01:02 +0000
Manifest this update: Sun 01 Mar 2026 12:01:02 +0000
Manifest next update: Mon 02 Mar 2026 12:01:02 +0000
Files and hashes: 1: N6MHIGgl2WIY507NCN0t2d3A-dc.crl (hash: QyDkcGfaEE2WrCg1DvEuJlp+x5Q6CbWD2eAZEyuWjs8=)
2: jn26WWDJNok0WB-ErAFuUy2elf4.asa (hash: DLCEuMdVSLKR9MFxk0n1ZJhQudY2esHq/andUpUt3co=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 06:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:45:ff:96:57:5b:dc:bf:0d:92:44:2b:20:30:fe:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a307206825d96218e74ecd08dd2dd9ddc0f9d7
Validity
Not Before: Mar 1 12:01:02 2026 GMT
Not After : Mar 2 12:01:02 2026 GMT
Subject: CN=3d73250004fdfcc5ba9e0c12e29ba0b82ef2ece9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4f:c4:c7:4e:86:83:b8:87:65:f8:0f:52:45:
85:d2:e4:5b:30:e4:7f:bb:bd:93:9e:b3:56:d2:1e:
ea:f1:53:98:45:53:d5:b2:4b:9e:fb:97:13:09:2c:
32:89:04:41:f8:32:66:de:ee:16:c6:7d:79:3e:53:
19:b3:09:16:42:94:88:ec:62:b4:e9:1f:69:9f:8c:
ee:52:65:7c:80:ea:b9:2b:a7:3b:4c:9f:cf:30:5d:
1e:41:b7:f0:37:6c:b3:0b:7c:ca:ed:97:3c:b0:f4:
8d:cb:c8:5e:3a:39:7c:98:4e:66:c9:a1:75:16:bb:
50:d7:05:d1:c5:c7:ec:3b:3a:2f:db:bd:96:f3:1d:
47:12:a2:90:20:0f:01:0d:b1:17:07:a5:9e:35:97:
32:fb:89:a0:5b:59:b8:ba:4f:15:3b:db:af:76:a2:
e3:04:66:51:bf:d7:45:e5:45:0f:bf:15:98:b0:52:
f8:e9:fa:92:1e:6b:10:e1:3e:fe:03:79:15:b3:96:
6e:2b:0a:c2:56:32:d7:3a:ca:a8:fb:7a:af:5a:93:
58:1f:2e:30:b5:0b:0e:e7:4d:79:81:b6:96:59:78:
19:07:c5:85:de:83:1a:28:fa:01:b9:92:f8:99:d3:
31:00:31:60:68:51:41:2b:76:ef:d2:c0:cf:21:7c:
28:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:73:25:00:04:FD:FC:C5:BA:9E:0C:12:E2:9B:A0:B8:2E:F2:EC:E9
X509v3 Authority Key Identifier:
keyid:37:A3:07:20:68:25:D9:62:18:E7:4E:CD:08:DD:2D:D9:DD:C0:F9:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6MHIGgl2WIY507NCN0t2d3A-dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/a25d49-53a5-4da5-8a34-428a532acef0/1/N6MHIGgl2WIY507NCN0t2d3A-dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:c5:e7:94:10:28:93:d3:fe:f5:bc:41:ad:f4:d3:13:85:be:
8f:25:77:dc:5d:a6:1c:10:16:f7:92:f9:f4:58:db:93:95:05:
8d:e9:62:9e:50:cb:ed:4f:24:89:09:8e:60:4b:3a:d8:9d:6f:
40:76:14:a7:59:31:50:0e:f6:38:72:43:f2:99:a6:a2:06:61:
ef:83:c1:01:df:f2:1c:d6:b9:2e:b4:ec:dc:b8:a0:61:2f:fa:
fa:a9:ba:a6:8a:24:ef:54:55:be:74:9f:78:40:29:32:7a:e8:
76:39:f4:45:72:36:e8:f7:c8:e8:a1:87:3f:af:7b:57:b8:7a:
e9:d3:b4:2d:bf:ed:6c:19:fb:3d:7e:c8:fe:48:96:f5:b3:c2:
c8:6c:56:c5:7b:72:31:67:c8:39:f7:c7:bf:03:d9:86:e5:4c:
87:a4:17:9f:de:ba:e8:ca:41:61:cb:d8:b9:07:03:59:e1:d5:
a0:df:74:5f:6c:d6:3d:19:e2:36:a9:06:a7:34:a1:27:99:34:
a2:78:ec:dd:9c:ac:d6:90:db:31:e5:b8:09:5b:e1:26:31:8b:
fa:a7:ae:98:c7:87:36:fb:a9:71:d8:ee:48:25:93:3e:a7:e3:
43:f7:56:98:1e:81:fb:38:ab:4a:08:64:1a:2d:cd:2f:11:d3:
a5:02:b6:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZypRf+WV1vcvw2SRCsgMP4hMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YTMwNzIwNjgyNWQ5NjIxOGU3NGVjZDA4ZGQyZGQ5ZGRj
MGY5ZDcwHhcNMjYwMzAxMTIwMTAyWhcNMjYwMzAyMTIwMTAyWjAzMTEwLwYDVQQD
EygzZDczMjUwMDA0ZmRmY2M1YmE5ZTBjMTJlMjliYTBiODJlZjJlY2U5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvk/Ex06Gg7iHZfgPUkWF0uRbMOR/
u72TnrNW0h7q8VOYRVPVskue+5cTCSwyiQRB+DJm3u4Wxn15PlMZswkWQpSI7GK0
6R9pn4zuUmV8gOq5K6c7TJ/PMF0eQbfwN2yzC3zK7Zc8sPSNy8heOjl8mE5myaF1
FrtQ1wXRxcfsOzov272W8x1HEqKQIA8BDbEXB6WeNZcy+4mgW1m4uk8VO9uvdqLj
BGZRv9dF5UUPvxWYsFL46fqSHmsQ4T7+A3kVs5ZuKwrCVjLXOsqo+3qvWpNYHy4w
tQsO5015gbaWWXgZB8WF3oMaKPoBuZL4mdMxADFgaFFBK3bv0sDPIXwoIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD1zJQAE/fzFup4MEuKboLgu8uzpMB8GA1UdIwQY
MBaAFDejByBoJdliGOdOzQjdLdndwPnXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQt
NDI4YTUzMmFjZWYwLzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC9hMjVkNDktNTNhNS00ZGE1LThhMzQtNDI4YTUzMmFjZWYw
LzEvTjZNSElHZ2wyV0lZNTA3TkNOMHQyZDNBLWRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUMXnlBAo
k9P+9bxBrfTTE4W+jyV33F2mHBAW95L59Fjbk5UFjelinlDL7U8kiQmOYEs62J1v
QHYUp1kxUA72OHJD8pmmogZh74PBAd/yHNa5LrTs3LigYS/6+qm6pook71RVvnSf
eEApMnrodjn0RXI26PfI6KGHP697V7h66dO0Lb/tbBn7PX7I/kiW9bPCyGxWxXty
MWfIOffHvwPZhuVMh6QXn9666MpBYcvYuQcDWeHVoN90X2zWPRniNqkGpzShJ5k0
onjs3Zys1pDbMeW4CVvhJjGL+qeumMeHNvupcdjuSCWTPqfjQ/dWmB6B+zirSghk
Gi3NLxHTpQK27w==
-----END CERTIFICATE-----
Generated at Sun Mar 1 14:40:18 2026 by rpki-client