Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier: lZEv1lVRYqnkWzdq7Ow13Vm66RBHXn9L0GCznSk8Yf8=
Subject key identifier: 12:FD:C1:E4:B4:BB:8C:F0:C9:85:32:FE:F6:13:95:27:CC:5C:22:77
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019CACEB883735D99EB0815B9323DCB713F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number: 189E
Signing time: Mon 02 Mar 2026 05:00:42 +0000
Manifest this update: Mon 02 Mar 2026 05:00:42 +0000
Manifest next update: Tue 03 Mar 2026 05:00:42 +0000
Files and hashes: 1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
2: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
3: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
4: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: z7dw2hvxhIxwOBefmnI3SiKiHGgNtCDt2XdSM9u7FJk=)
5: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
6: cJQS8fS-O8i7V76vhCyJB9FEPWM.roa (hash: TgEJTeq8+mkc1QDXvsict0jWR8MmE1D2+GheMUVEGNw=)
7: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
8: u-q-dqUZfrGLai75I00e7EvfwoU.roa (hash: gEnjoqjF/bAb/lGEketEWU2NXK61zyC+xvdhQEz/IYQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:eb:88:37:35:d9:9e:b0:81:5b:93:23:dc:b7:13:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Mar 2 05:00:42 2026 GMT
Not After : Mar 3 05:00:42 2026 GMT
Subject: CN=12fdc1e4b4bb8cf0c98532fef6139527cc5c2277
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fc:74:73:1c:0e:dd:1c:99:91:cd:3a:2f:47:
5e:b5:6c:10:7b:f5:fe:c8:c2:b1:fb:f6:8c:b8:99:
a5:35:e0:f9:13:b2:d3:c9:14:ec:90:6b:23:ba:30:
bc:ec:57:43:37:62:f5:b3:ad:60:bb:4e:4f:9b:95:
85:fd:61:44:d2:f8:91:1e:48:04:1b:1a:43:86:44:
98:1f:ac:1f:aa:5f:01:d3:14:7d:b0:69:d0:29:b8:
c6:57:81:ec:6f:d1:e5:39:4b:c7:35:1e:80:e0:2b:
ff:80:b3:19:52:05:de:9b:a8:36:35:46:9f:9f:89:
1d:59:3e:29:82:3a:ae:90:0e:ce:14:55:2f:be:c7:
96:39:00:db:29:c8:f9:65:f2:00:42:24:e4:ed:05:
92:8b:09:d3:cd:45:ab:ec:4a:8e:aa:4a:63:e7:da:
9e:16:35:56:64:24:85:1b:db:17:54:1a:59:ce:66:
65:a3:59:c4:4b:a0:0e:ab:b6:e5:87:75:e4:3c:77:
95:04:e2:0b:6d:0c:1e:5a:8a:8a:e6:cd:fe:1f:f6:
7e:47:f7:9a:1c:67:fa:8c:7c:5c:b2:7a:fb:1c:2a:
61:7f:9f:42:8c:64:8b:a7:41:28:d2:01:27:85:a5:
8f:95:a7:9a:ce:4b:83:6e:d8:bc:ba:47:05:63:b6:
8b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FD:C1:E4:B4:BB:8C:F0:C9:85:32:FE:F6:13:95:27:CC:5C:22:77
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:d5:82:85:aa:0d:c0:87:0b:a1:d7:4f:c9:54:12:5d:f5:e8:
9f:c7:31:27:3b:de:2b:46:28:60:81:a3:4a:51:fc:47:bc:7c:
f2:e6:44:f7:1f:9e:b6:54:1a:0a:2d:bc:94:f7:1f:20:fc:37:
9f:61:34:61:52:a2:59:f1:b3:fe:78:2a:29:40:37:26:ac:43:
0a:60:99:7b:1f:16:b1:38:d9:0a:9c:6a:a2:09:b3:40:82:bb:
d1:45:fb:33:50:cf:94:7d:86:2c:03:b6:5f:4e:50:22:9d:c8:
1e:4c:ef:cb:9a:8a:0f:78:c2:48:fa:ae:ce:c4:cd:68:0c:7e:
40:61:86:9f:45:6d:f6:cc:5c:de:43:81:71:67:3b:8a:69:69:
c2:c9:26:a0:74:01:ea:89:bc:21:7a:5e:01:2d:8d:e3:d8:ba:
4e:30:78:69:22:67:52:91:06:f9:db:e7:e3:9b:4e:38:55:65:
2c:0b:d8:f1:9e:99:73:78:3d:ba:70:75:2c:a9:b4:b9:68:47:
26:16:c1:98:6b:5e:65:a1:68:08:0a:ee:1e:c4:f6:c4:31:5a:
1e:05:79:4d:8d:a7:6b:be:c0:75:54:39:a6:2f:33:3a:b7:5a:
27:69:11:1c:37:c2:01:47:38:68:ad:69:66:ff:33:bc:c0:b6:
82:f7:b1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:38:30 2026 by rpki-client