Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: hYbOJl6w6fFUD+Y899eaZLraA3ZPqobqEytgs+4/9I8=
Subject key identifier: 64:28:28:12:1E:A3:E1:8A:F6:36:F2:E6:D8:4E:20:67:61:AF:32:18
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019CADFE059B6A3157BB7D660A8C48012E59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 0FCE
Signing time: Mon 02 Mar 2026 10:00:31 +0000
Manifest this update: Mon 02 Mar 2026 10:00:31 +0000
Manifest next update: Tue 03 Mar 2026 10:00:31 +0000
Files and hashes: 1: 2AG4E7qAt_4fZev1XlJEGets8GQ.roa (hash: pOb52T7TL8V2yMfYjqzg4zNYa3sfzX3jMEvSLA8/EMM=)
2: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: PdiwZvNTLj1A3SThuNoqQO0flGeoRaqXvVP1H37HBQk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:05:9b:6a:31:57:bb:7d:66:0a:8c:48:01:2e:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Mar 2 10:00:31 2026 GMT
Not After : Mar 3 10:00:31 2026 GMT
Subject: CN=642828121ea3e18af636f2e6d84e206761af3218
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f0:46:fb:18:c5:93:ce:27:4a:a6:95:6d:36:
9c:fc:cc:69:3b:71:fb:d2:ff:14:ea:45:af:43:9d:
c9:cc:5d:db:46:0b:88:eb:0d:42:44:23:54:22:61:
05:51:bd:a8:90:fe:54:51:d5:5d:d8:e5:8d:30:64:
5b:57:3a:dc:00:bd:fc:a8:df:0e:87:e2:2e:c0:b4:
e2:3c:fc:9d:5f:78:2c:9f:02:50:bb:29:03:c6:c8:
af:2a:cc:44:9d:1f:68:e2:54:9e:76:28:09:30:4c:
89:2e:ef:e5:5f:fb:df:e8:a8:1a:97:15:7d:11:f6:
ac:31:15:ea:85:f9:3d:f6:0e:b0:28:35:a4:02:49:
c7:f7:fd:a3:38:5d:19:90:fb:ca:25:f9:a7:2a:31:
7b:0e:e8:64:a6:55:66:2d:dd:6b:77:ee:b6:58:50:
b3:18:1a:e9:5d:3d:6d:c8:54:f7:f0:22:f4:c3:0e:
32:ce:03:85:2b:36:42:99:a2:5e:9c:30:66:0d:c1:
69:94:56:82:b8:32:e8:ca:6f:93:39:23:c0:9b:55:
66:17:c0:e7:79:98:7f:69:0f:16:80:63:bc:a1:db:
7d:86:3d:e6:b9:fe:9c:0c:e4:81:40:ff:6d:f1:97:
16:29:f1:a5:14:51:eb:a0:53:65:25:71:ae:45:c3:
f7:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:28:28:12:1E:A3:E1:8A:F6:36:F2:E6:D8:4E:20:67:61:AF:32:18
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d4:e3:ae:a6:22:ca:56:ec:81:20:d1:b7:6d:ce:a8:66:d1:
57:d7:ce:f8:57:41:6b:2b:55:06:7d:3b:28:69:4a:f9:4a:2d:
f9:c0:c7:8d:0e:0f:d9:bc:7f:e4:a1:a1:62:4e:a8:61:49:e9:
c3:fb:6d:8c:27:21:de:14:91:88:21:bb:75:6c:8a:a1:07:ab:
4b:c9:45:92:4b:36:13:3b:12:5a:e4:43:53:6d:fa:be:93:c3:
c8:6e:6f:68:0e:b6:24:22:d1:78:1a:14:46:7c:8d:71:34:6f:
7a:37:87:02:cf:6f:0e:36:7c:c7:a7:2b:d7:01:a4:42:3b:f8:
1e:a6:8e:d5:6e:d8:fa:06:69:cd:9a:83:e7:f0:0f:07:1a:93:
98:87:01:8d:00:85:d8:48:a2:ef:32:e6:31:19:d0:d4:de:7e:
fc:5c:1c:09:34:f2:3a:30:35:6e:25:11:8f:3c:43:0d:af:21:
83:d0:bd:0c:10:a4:84:56:8b:ca:47:29:88:29:a7:46:6d:a9:
b3:d0:5a:e7:81:77:3b:9d:f9:e3:ac:74:0f:23:d4:54:a3:ff:
49:b5:4d:38:2d:b2:45:20:7a:b8:93:8a:47:0b:6c:f8:6e:ce:
38:2c:fe:6f:d2:60:c7:bf:f5:f0:3a:b7:83:c2:b1:ed:f7:1d:
06:09:62:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyt/gWbajFXu31mCoxIAS5ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3N2JkMTBmN2Q5MDZjMTMxYzhjOWUyZmM3MzE2NDE2ZGY0
YWUyMjQwHhcNMjYwMzAyMTAwMDMxWhcNMjYwMzAzMTAwMDMxWjAzMTEwLwYDVQQD
Eyg2NDI4MjgxMjFlYTNlMThhZjYzNmYyZTZkODRlMjA2NzYxYWYzMjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvBG+xjFk84nSqaVbTac/MxpO3H7
0v8U6kWvQ53JzF3bRguI6w1CRCNUImEFUb2okP5UUdVd2OWNMGRbVzrcAL38qN8O
h+IuwLTiPPydX3gsnwJQuykDxsivKsxEnR9o4lSedigJMEyJLu/lX/vf6KgalxV9
EfasMRXqhfk99g6wKDWkAknH9/2jOF0ZkPvKJfmnKjF7DuhkplVmLd1rd+62WFCz
GBrpXT1tyFT38CL0ww4yzgOFKzZCmaJenDBmDcFplFaCuDLoym+TOSPAm1VmF8Dn
eZh/aQ8WgGO8odt9hj3muf6cDOSBQP9t8ZcWKfGlFFHroFNlJXGuRcP3zwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQoKBIeo+GK9jby5thOIGdhrzIYMB8GA1UdIwQY
MBaAFDd70Q99kGwTHIyeL8cxZBbfSuIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzct
NWE5YWM3ZjM5MDIzLzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8yMDgxMjktZDA4Ni00OWQ0LTlkYzctNWE5YWM3ZjM5MDIz
LzEvTjN2UkQzMlFiQk1jako0dnh6RmtGdDlLNGlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtTjrqYi
ylbsgSDRt23OqGbRV9fO+FdBaytVBn07KGlK+Uot+cDHjQ4P2bx/5KGhYk6oYUnp
w/ttjCch3hSRiCG7dWyKoQerS8lFkks2EzsSWuRDU236vpPDyG5vaA62JCLReBoU
RnyNcTRvejeHAs9vDjZ8x6cr1wGkQjv4HqaO1W7Y+gZpzZqD5/APBxqTmIcBjQCF
2Eii7zLmMRnQ1N5+/FwcCTTyOjA1biURjzxDDa8hg9C9DBCkhFaLykcpiCmnRm2p
s9Ba54F3O53546x0DyPUVKP/SbVNOC2yRSB6uJOKRwts+G7OOCz+b9Jgx7/18Dq3
g8Kx7fcdBglioA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:47:54 2026 by rpki-client