Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier: ECQajh2mULwWw6Ktdpi5sUMxD6BP1sE+5JOgIOKzekw=
Subject key identifier: FA:5A:30:6E:32:DD:2C:2E:9E:F4:5D:CC:04:D7:8E:43:B2:3A:BB:4F
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019D9C2C713F2E7C78132B5FF7491D2A149B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number: 191D
Signing time: Fri 17 Apr 2026 16:00:51 +0000
Manifest this update: Fri 17 Apr 2026 16:00:51 +0000
Manifest next update: Sat 18 Apr 2026 16:00:51 +0000
Files and hashes: 1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
2: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
3: IHIfQbZzHM8wc2gcVh-Ji2h4a-E.roa (hash: TR+AIazXsIcucQtgRFsxaxlZiaoy33yf/3ur72DlsPc=)
4: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
5: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: JC3wLLgXeQcBi0AeXlYCAmYFb6JG1vSd0ElXMUIUvgc=)
6: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
7: cJQS8fS-O8i7V76vhCyJB9FEPWM.roa (hash: TgEJTeq8+mkc1QDXvsict0jWR8MmE1D2+GheMUVEGNw=)
8: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9c:2c:71:3f:2e:7c:78:13:2b:5f:f7:49:1d:2a:14:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Apr 17 16:00:51 2026 GMT
Not After : Apr 18 16:00:51 2026 GMT
Subject: CN=fa5a306e32dd2c2e9ef45dcc04d78e43b23abb4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:bf:5b:1f:e5:84:a6:de:af:b6:5f:8e:ea:9c:
1f:f8:68:d6:e0:fa:c1:01:88:5e:62:28:f4:ad:21:
46:02:46:91:ee:f1:f9:39:fb:42:c4:2a:45:0d:bd:
62:b4:b4:41:1c:30:d9:cf:69:f4:11:13:2f:c0:4c:
8d:f4:d3:2a:5c:47:fc:9b:54:21:a1:10:47:d1:86:
41:c3:84:fb:87:90:82:cf:36:fc:f2:b2:6c:9b:43:
af:03:a6:15:10:92:20:49:ec:3b:0a:88:b2:b6:46:
83:49:2e:1c:01:9c:db:b0:ee:f0:75:43:10:1c:fa:
8b:a6:e7:2d:5f:29:0b:8a:b4:73:3e:85:42:59:c1:
6e:46:bb:82:09:f1:4e:14:4c:d0:7d:dc:37:56:98:
74:d7:b1:52:91:9f:0b:9d:6d:7d:87:61:9e:fc:43:
ad:0c:15:a8:86:96:25:bd:ed:7d:fa:9c:75:dc:e5:
56:be:58:80:74:1b:de:8f:ac:69:64:a1:72:b5:fe:
19:00:16:10:98:2f:35:e5:0a:2c:cc:02:60:cb:59:
03:a6:f9:36:9f:90:a3:66:35:c3:39:15:a7:80:4e:
5c:e8:05:e2:ca:ba:df:89:d3:01:ea:b1:89:0b:a3:
bb:cc:18:05:86:79:1d:b6:93:f9:59:93:18:b6:02:
e7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:5A:30:6E:32:DD:2C:2E:9E:F4:5D:CC:04:D7:8E:43:B2:3A:BB:4F
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:ff:90:e6:6e:9b:b1:c1:45:06:05:ed:b3:88:b8:d6:d8:b0:
b5:e8:85:90:4a:7c:04:73:b4:75:72:12:6c:56:40:d8:e5:b6:
e7:cb:64:0c:24:51:35:98:f5:d5:4b:86:16:61:14:c2:86:2a:
f1:fe:10:ad:23:e5:6c:97:a9:ca:80:1d:d5:75:d4:0e:f9:85:
db:01:62:77:e6:b8:1d:10:40:8d:cc:2f:c3:d2:84:ca:7f:fc:
9c:78:0a:9c:c9:62:ff:8e:b8:bf:d7:57:a5:82:43:69:db:07:
4a:51:cb:6c:29:c6:81:2f:dd:3e:76:49:bd:b1:f8:74:89:23:
ec:85:ee:1a:d5:52:30:eb:d4:ff:d4:3a:48:a9:09:fe:0c:a0:
f7:e5:db:f5:45:4d:a4:35:35:66:af:94:c4:be:87:99:01:a5:
d6:eb:ec:83:e9:63:0b:3b:be:c6:1e:54:86:42:f6:98:4b:07:
92:c3:c9:d6:a5:5d:2d:a9:b2:43:16:ad:96:3f:9e:b1:f7:e4:
6b:eb:e3:66:da:14:93:12:05:b3:ca:da:a6:b4:94:b8:38:61:
26:46:d3:43:65:4d:cb:de:eb:94:78:dd:e4:0f:a8:f2:38:f2:
da:97:bd:ff:c8:e9:3b:01:fe:61:7a:e8:30:41:53:91:31:e9:
b2:af:e4:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:41:50 2026 by rpki-client