Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
File: N0u2qfskWk-vy41iHRx19Z1uyhk.mft (raw, json)
Hash identifier: sjrmBhBa4ioRPtVo5Ii6JT38nwvnOKPnv1YrYCap0sc=
Subject key identifier: 2A:94:62:1A:CC:CA:FE:46:44:58:D1:2D:BC:C8:A2:5F:7C:2B:24:64
Authority key identifier: 37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
Certificate issuer: /CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Certificate serial: 019CADC85E811A9F454498E10932B60A566A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
Manifest number: 06CD
Signing time: Mon 02 Mar 2026 09:01:55 +0000
Manifest this update: Mon 02 Mar 2026 09:01:55 +0000
Manifest next update: Tue 03 Mar 2026 09:01:55 +0000
Files and hashes: 1: N0u2qfskWk-vy41iHRx19Z1uyhk.crl (hash: DJd9Ct92trKFzwjiCC73rBQa/wsUS12DZo3631JBNqM=)
2: ptyQIs6zOdQaePAf0264xdbfsHE.roa (hash: zeWTG0uQV8YLaSyS7vNW/ey9XtXZbEHMRMH0ynFCKsc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c8:5e:81:1a:9f:45:44:98:e1:09:32:b6:0a:56:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374bb6a9fb245a4fafcb8d621d1c75f59d6eca19
Validity
Not Before: Mar 2 09:01:55 2026 GMT
Not After : Mar 3 09:01:55 2026 GMT
Subject: CN=2a94621acccafe464458d12dbcc8a25f7c2b2464
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2c:a9:1f:c4:71:68:72:4a:61:98:ce:73:31:
ff:4c:c3:78:56:17:f1:ff:b0:7d:71:3c:84:fa:de:
5a:08:03:93:8f:ac:ed:d2:58:76:19:0d:52:ab:68:
c5:d8:cd:56:ef:57:98:f9:4b:60:43:0a:6c:bb:4b:
03:f8:19:c9:a3:0e:0d:49:e7:2a:cf:d8:4e:c4:7a:
e1:c7:35:6c:63:09:fc:78:eb:04:e2:31:c0:17:a5:
e8:b0:94:85:c2:ba:1e:9d:54:a1:85:e7:ed:e1:8c:
03:31:d2:a2:a7:37:77:21:73:ff:a4:3e:ce:5d:2d:
0c:76:fe:80:b2:ec:77:50:9d:9e:fd:6e:37:b5:5d:
b7:c9:c0:8b:28:f8:b7:cc:24:12:dd:31:6a:b0:94:
40:26:52:ac:20:d2:78:33:fb:df:60:9b:e2:9b:72:
45:28:2c:3e:80:45:e3:97:2a:ef:42:13:f5:e0:f9:
d7:a6:2b:2f:7c:6c:1a:8f:75:4d:4b:c0:5b:90:d1:
0f:38:a8:af:9c:c2:6d:3e:fd:1c:61:60:20:01:c0:
b6:bb:62:be:b7:01:27:a7:d1:70:02:88:39:e9:1e:
7f:b7:71:4c:ae:9e:f5:23:78:42:09:7e:bc:92:fa:
04:d5:8a:cd:3c:76:e5:f8:05:d3:d1:62:00:6d:47:
5c:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:94:62:1A:CC:CA:FE:46:44:58:D1:2D:BC:C8:A2:5F:7C:2B:24:64
X509v3 Authority Key Identifier:
keyid:37:4B:B6:A9:FB:24:5A:4F:AF:CB:8D:62:1D:1C:75:F5:9D:6E:CA:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0u2qfskWk-vy41iHRx19Z1uyhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/b5dfcc-cd35-4837-b892-f226b144a89a/1/N0u2qfskWk-vy41iHRx19Z1uyhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:c7:22:e4:ee:28:c4:be:2a:27:d3:ba:b4:e6:6e:53:37:2c:
22:60:91:88:cb:a0:78:27:ab:2b:af:ef:a1:94:d1:b2:78:b8:
df:19:69:cb:88:3e:31:01:26:1c:6c:30:70:50:c5:fc:f4:73:
9a:e9:ef:e2:9e:74:88:1b:63:6f:d0:93:3c:42:89:8e:6b:32:
f7:93:10:29:9e:01:0c:80:45:1e:2b:a6:6e:e6:e0:19:fa:41:
bf:e5:2a:6a:b8:a6:20:bd:aa:a4:91:27:79:c3:b1:e1:0e:be:
23:81:f1:e6:03:97:77:d7:f8:0c:19:3c:7d:0a:9b:7a:eb:04:
4a:ba:ee:48:34:07:0a:af:59:2f:c6:d9:40:c0:1f:d0:f1:61:
e2:b5:61:1e:b4:ee:76:3b:20:48:01:85:fe:1a:d7:6f:44:48:
c6:10:fb:9a:e5:b3:c0:e4:01:09:6a:9a:01:5a:13:0e:98:8d:
24:43:7a:b5:46:26:d1:20:ad:1b:8b:9d:21:f3:e9:e6:28:2b:
67:1c:a3:df:59:c0:2b:7e:3f:70:62:d4:b4:95:5a:fb:55:09:
5e:7d:3e:7f:38:d3:10:04:8f:8e:c6:3c:cb:db:ec:9e:f2:73:
8a:5c:37:52:2f:fc:44:b4:50:9f:ca:59:44:71:39:6e:10:f2:
11:ad:99:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytyF6BGp9FRJjhCTK2ClZqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGJiNmE5ZmIyNDVhNGZhZmNiOGQ2MjFkMWM3NWY1OWQ2
ZWNhMTkwHhcNMjYwMzAyMDkwMTU1WhcNMjYwMzAzMDkwMTU1WjAzMTEwLwYDVQQD
EygyYTk0NjIxYWNjY2FmZTQ2NDQ1OGQxMmRiY2M4YTI1ZjdjMmIyNDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxyypH8RxaHJKYZjOczH/TMN4Vhfx
/7B9cTyE+t5aCAOTj6zt0lh2GQ1Sq2jF2M1W71eY+UtgQwpsu0sD+BnJow4NSecq
z9hOxHrhxzVsYwn8eOsE4jHAF6XosJSFwroenVShheft4YwDMdKipzd3IXP/pD7O
XS0Mdv6Asux3UJ2e/W43tV23ycCLKPi3zCQS3TFqsJRAJlKsINJ4M/vfYJvim3JF
KCw+gEXjlyrvQhP14PnXpisvfGwaj3VNS8BbkNEPOKivnMJtPv0cYWAgAcC2u2K+
twEnp9FwAog56R5/t3FMrp71I3hCCX68kvoE1YrNPHbl+AXT0WIAbUdc3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCqUYhrMyv5GRFjRLbzIol98KyRkMB8GA1UdIwQY
MBaAFDdLtqn7JFpPr8uNYh0cdfWdbsoZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTIt
ZjIyNmIxNDRhODlhLzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9iNWRmY2MtY2QzNS00ODM3LWI4OTItZjIyNmIxNDRhODlh
LzEvTjB1MnFmc2tXay12eTQxaUhSeDE5WjF1eWhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsci5O4o
xL4qJ9O6tOZuUzcsImCRiMugeCerK6/voZTRsni43xlpy4g+MQEmHGwwcFDF/PRz
munv4p50iBtjb9CTPEKJjmsy95MQKZ4BDIBFHiumbubgGfpBv+UqarimIL2qpJEn
ecOx4Q6+I4Hx5gOXd9f4DBk8fQqbeusESrruSDQHCq9ZL8bZQMAf0PFh4rVhHrTu
djsgSAGF/hrXb0RIxhD7muWzwOQBCWqaAVoTDpiNJEN6tUYm0SCtG4udIfPp5igr
Zxyj31nAK34/cGLUtJVa+1UJXn0+fzjTEASPjsY8y9vsnvJzilw3Ui/8RLRQn8pZ
RHE5bhDyEa2Zgg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:48:11 2026 by rpki-client