Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: 6KcND/RmSQorecJjYCDAjZ99ITQv8nPcdLdg0YVUXuU=
Subject key identifier: F7:0E:4E:EC:06:96:51:63:22:12:A4:36:49:DC:F3:1A:22:A7:5D:CA
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 019CACB4BB2E2F71044AAA11E226A9906104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 1848
Signing time: Mon 02 Mar 2026 04:00:51 +0000
Manifest this update: Mon 02 Mar 2026 04:00:51 +0000
Manifest next update: Tue 03 Mar 2026 04:00:51 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: d9ySKt4mMY+lDT67XugPn2YEb+Ux3zdsCPBUQrNU5LI=)
2: nTe4XS35nHxQSCG2D80P-vLwCdc.roa (hash: VFddyo3u6Vm8UnAzJlN5YGNR/ZyZRBkt6xiG3mZLyRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b4:bb:2e:2f:71:04:4a:aa:11:e2:26:a9:90:61:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Mar 2 04:00:51 2026 GMT
Not After : Mar 3 04:00:51 2026 GMT
Subject: CN=f70e4eec069651632212a43649dcf31a22a75dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:47:38:f5:2e:f5:12:b8:0f:12:98:c7:d1:c7:
8f:c6:67:11:55:64:6a:12:2b:84:9d:6b:9c:b4:9d:
d1:bf:ac:51:4f:dd:a7:94:16:00:50:fb:13:21:3f:
b7:62:0a:51:43:66:5a:11:dd:78:b8:9b:d3:77:c6:
48:78:15:dd:a3:9b:15:af:d3:dd:8b:86:07:78:e6:
f7:93:d8:02:73:67:6c:00:f8:c1:f8:ad:f6:4b:9f:
4d:b0:59:e2:88:4e:2b:f8:7c:12:42:3c:c2:00:b7:
e7:26:51:f1:33:fe:3f:57:31:3d:5e:05:b1:f8:f6:
83:16:c6:9e:2f:70:46:ea:f6:9c:97:9b:3e:c3:75:
90:39:39:cb:fd:cd:2e:20:ab:10:37:1b:44:09:1c:
3a:72:ca:f5:4c:e1:e3:4c:5e:b1:c0:45:bf:97:e4:
49:14:c0:74:a0:e5:4b:ac:1f:54:7b:2a:72:c5:07:
7c:d9:76:18:ee:1f:5c:6e:03:30:1a:57:9d:bf:8d:
e9:ce:8c:99:32:29:4a:ef:86:f4:41:5a:3f:fd:d9:
2e:95:c8:fe:10:f7:63:39:26:95:81:d1:06:a4:0f:
e2:e6:63:0e:a8:21:40:31:a6:34:ac:95:08:5e:e7:
8b:d5:41:54:6a:21:26:fd:84:6e:3a:85:ea:f4:44:
ab:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0E:4E:EC:06:96:51:63:22:12:A4:36:49:DC:F3:1A:22:A7:5D:CA
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:68:b9:28:5d:93:2c:c3:38:a7:3c:6b:9e:21:e4:fe:41:7a:
a0:23:4f:99:01:ca:2c:3a:71:31:6b:2f:bf:c1:1d:13:38:bc:
40:d8:c4:fa:e8:f9:b0:c0:48:56:6e:0f:5c:fd:4f:7a:01:a9:
c5:9d:ff:9b:a9:7b:9e:09:d8:d2:d6:5b:8c:9c:a5:fe:e6:4a:
a6:98:1e:f0:70:c9:1d:03:3d:fa:0b:3e:c0:6d:a4:20:1c:bd:
d1:f9:86:e4:08:79:77:4d:e7:cc:7d:88:68:e7:97:a8:94:8c:
13:de:20:b3:dd:96:17:3c:2f:19:4d:f2:5f:10:34:95:27:15:
af:57:da:a6:07:04:31:bb:3a:5e:e3:90:ba:48:05:88:c8:e2:
89:48:4f:9b:07:94:72:ff:23:3c:d2:65:e5:9f:30:95:bc:ca:
2f:97:fc:fe:97:af:09:40:d2:d4:46:30:66:80:74:f7:55:1c:
87:24:21:ad:10:f4:4f:f1:8e:28:c5:f5:32:38:a9:a4:9c:86:
78:54:24:ad:68:8b:ed:86:21:47:aa:68:96:80:a6:4e:dc:97:
18:be:1b:07:9b:a3:ee:64:a0:81:76:f0:ba:02:9c:22:53:10:
ee:09:1c:71:83:96:a3:d0:d8:6b:fc:ba:a6:8f:63:6f:01:ae:
ea:52:98:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:24 2026 by rpki-client