Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
File: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft (raw, json)
Hash identifier: e0sDoXytZ+AaBwqEUrCt93kTC8pCvYOuP+tWLzlma0E=
Subject key identifier: 8E:45:BE:27:3C:A7:E0:D5:85:BA:31:74:14:B7:A4:80:29:C1:0A:00
Authority key identifier: 37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
Certificate issuer: /CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Certificate serial: 019D9B876250872610CD2078F4AA2B6F9292
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
Manifest number: 1049
Signing time: Fri 17 Apr 2026 13:00:34 +0000
Manifest this update: Fri 17 Apr 2026 13:00:34 +0000
Manifest next update: Sat 18 Apr 2026 13:00:34 +0000
Files and hashes: 1: 2AG4E7qAt_4fZev1XlJEGets8GQ.roa (hash: pOb52T7TL8V2yMfYjqzg4zNYa3sfzX3jMEvSLA8/EMM=)
2: N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl (hash: uesLbZd3krANuX+fLMUIU7Jd+G28427VcuZEBT233jg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:62:50:87:26:10:cd:20:78:f4:aa:2b:6f:92:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=377bd10f7d906c131c8c9e2fc7316416df4ae224
Validity
Not Before: Apr 17 13:00:34 2026 GMT
Not After : Apr 18 13:00:34 2026 GMT
Subject: CN=8e45be273ca7e0d585ba317414b7a48029c10a00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e4:49:f6:64:3a:65:99:51:01:a7:c6:48:55:
a1:dd:49:2c:57:ed:5b:90:eb:91:88:b2:f8:c4:05:
b2:a9:7f:a7:bf:22:60:39:2d:23:3a:42:29:77:6f:
4f:26:10:f9:a7:12:79:dc:ec:a9:09:ae:6f:b3:77:
d0:32:cf:9e:2d:fa:dc:a2:2f:18:fb:3f:be:a1:40:
03:f1:5c:59:3f:8c:72:54:f0:59:16:25:67:ce:e8:
ed:be:b2:67:71:8e:2b:4a:9a:bc:e5:ec:21:7e:ba:
8f:f4:d5:f9:4b:bb:fb:af:5a:c8:22:6b:6d:82:e8:
6c:10:d5:22:ea:8d:f0:53:42:44:25:30:a6:1c:f7:
de:fa:73:e8:72:83:91:d1:7c:ee:73:db:f0:dc:0b:
40:d1:c3:58:b5:90:c2:a5:5b:54:81:7e:d8:82:05:
b9:ae:83:46:0f:67:e8:36:7a:6b:8a:f8:ce:2a:5b:
3a:de:ef:bd:70:b0:43:9e:2d:e2:66:c2:0d:89:6c:
f4:9b:57:b7:23:58:81:f2:ca:49:43:eb:52:2c:ea:
02:d9:c8:d2:55:90:9a:cc:37:0a:2d:e8:28:58:c1:
09:6c:d8:4a:c2:55:92:0b:20:d6:48:f3:75:dd:c8:
d2:68:ec:ef:4a:46:5c:79:2f:cc:83:ca:d9:50:54:
1c:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:45:BE:27:3C:A7:E0:D5:85:BA:31:74:14:B7:A4:80:29:C1:0A:00
X509v3 Authority Key Identifier:
keyid:37:7B:D1:0F:7D:90:6C:13:1C:8C:9E:2F:C7:31:64:16:DF:4A:E2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/208129-d086-49d4-9dc7-5a9ac7f39023/1/N3vRD32QbBMcjJ4vxzFkFt9K4iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:d2:81:9b:0c:ba:e1:7c:53:4c:49:da:c4:a0:40:37:69:f5:
f6:15:58:42:a8:86:5d:50:76:c5:c2:35:ea:98:b8:19:da:81:
0b:bf:e2:07:4e:c0:99:81:e0:6f:b4:73:c1:97:a5:a7:f8:8f:
be:08:ff:46:a6:dc:8f:f2:70:27:18:6f:47:d0:4d:f2:15:ff:
98:47:0f:cc:cb:a9:4b:95:ba:44:44:af:c5:b8:9b:17:44:53:
2d:b0:59:73:fe:cb:da:f3:cf:37:fe:72:31:a3:28:b5:af:3a:
41:59:12:cf:9b:06:67:63:ee:ea:aa:00:45:31:b1:ba:f8:6d:
2e:99:32:c4:7f:86:55:51:98:47:42:fc:cc:5d:74:5a:e6:4c:
26:61:cd:f6:e1:d6:d5:cc:2f:58:db:9f:5f:52:ce:ba:33:b8:
34:5a:a3:1c:b3:8d:38:7f:0c:5a:c0:b5:dc:c7:a9:f4:e3:11:
68:43:ab:0e:1b:32:2f:e7:0e:1a:58:dd:37:76:7b:11:d9:cd:
83:80:dc:fe:53:35:98:dc:37:86:9a:82:77:14:5b:c1:a7:61:
42:ed:e2:07:db:8d:fd:e8:6d:e7:f6:b4:93:99:54:fa:d3:5b:
9b:76:be:f5:29:f3:ce:03:45:a6:78:f1:10:5c:e1:38:ff:16:
42:51:a1:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:51:45 2026 by rpki-client