Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
File: N6TS5C8jYsLm71K4Lxn35WN1fgw.mft (raw, json)
Hash identifier: erodD19xIzBfDUfxzCM0krVvNVUzM/+G4bO1f/jFKzA=
Subject key identifier: FD:EF:BE:FC:4A:93:60:E2:1D:24:15:E0:C9:B0:DE:06:43:0D:61:CD
Authority key identifier: 37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
Certificate issuer: /CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Certificate serial: 019CAA8F66AFAE8FAE41B6A32567C12D0A6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
Manifest number: 0571
Signing time: Sun 01 Mar 2026 18:00:50 +0000
Manifest this update: Sun 01 Mar 2026 18:00:50 +0000
Manifest next update: Mon 02 Mar 2026 18:00:50 +0000
Files and hashes: 1: N6TS5C8jYsLm71K4Lxn35WN1fgw.crl (hash: hVP4nEuvKWBDXvAhPxg7RNrqCtvCJfR5MNcRrGB+6eM=)
2: hWAbyKyK9HUdwJJVOcCYiigixTw.roa (hash: O5+GZw1ap4xPYqP6LKxKRJNgM1qV+6v6h/lOF45px/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:8f:66:af:ae:8f:ae:41:b6:a3:25:67:c1:2d:0a:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a4d2e42f2362c2e6ef52b82f19f7e563757e0c
Validity
Not Before: Mar 1 18:00:50 2026 GMT
Not After : Mar 2 18:00:50 2026 GMT
Subject: CN=fdefbefc4a9360e21d2415e0c9b0de06430d61cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:22:c8:7b:d3:cf:57:74:e6:8a:36:d6:a7:c5:
aa:84:66:82:07:3e:6e:c0:22:09:2c:b7:7b:79:c0:
df:89:a2:d9:7c:37:d5:64:a0:4e:17:ca:94:20:a1:
6e:04:79:22:0c:b4:f6:c4:eb:ed:17:df:8a:e9:82:
c6:f7:67:9b:e7:af:fb:40:52:35:8e:0e:be:23:88:
5a:79:10:fe:82:53:44:5c:3b:26:6b:d4:a7:2d:49:
f8:41:fb:ed:76:bd:a6:8e:dd:b8:b2:95:47:81:7b:
03:6e:fe:f9:4f:a8:7e:e8:a5:1c:85:f9:ec:1c:5a:
b3:3b:ed:03:58:03:1f:9b:15:09:e3:b8:94:f6:bc:
10:a2:de:08:61:d9:e0:5b:f6:19:4f:eb:5c:02:b4:
86:40:0a:c6:82:2d:31:e2:2d:28:43:e8:89:c1:cd:
ee:bc:4e:59:9b:57:88:85:03:01:68:9e:8f:ff:ef:
1f:6d:07:54:ab:b2:c9:75:b5:c1:43:83:70:70:72:
0e:9d:70:ac:ef:1f:a6:0b:75:1e:05:f3:ab:80:05:
20:f5:1f:63:0f:52:03:b9:81:fa:9b:c8:57:ed:11:
95:a2:54:b4:3c:64:57:5a:80:52:a0:28:d8:c2:db:
32:19:38:17:60:f3:9c:82:d8:a1:94:f4:4b:8f:8d:
88:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:EF:BE:FC:4A:93:60:E2:1D:24:15:E0:C9:B0:DE:06:43:0D:61:CD
X509v3 Authority Key Identifier:
keyid:37:A4:D2:E4:2F:23:62:C2:E6:EF:52:B8:2F:19:F7:E5:63:75:7E:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6TS5C8jYsLm71K4Lxn35WN1fgw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/25fb54-d467-4e90-a41f-91c0d8e7549d/1/N6TS5C8jYsLm71K4Lxn35WN1fgw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b8:cb:33:ca:40:ff:2f:35:23:99:81:26:60:c0:62:59:4b:3e:
15:2f:57:ba:c7:72:68:21:1a:a4:74:0d:7f:29:a9:1f:0c:6f:
58:46:7c:cb:85:0f:25:4b:bb:9a:fa:36:a6:dd:a0:11:57:26:
fd:63:4b:f4:81:02:43:83:ba:22:35:79:d9:d3:96:24:c8:16:
b2:f9:ae:16:d3:c1:83:15:e9:c5:27:89:0e:62:9e:3a:00:c1:
b9:a2:9f:33:41:43:df:3d:eb:8d:8a:66:c4:51:8d:96:6a:19:
ac:9e:68:a6:f7:0a:45:99:fe:45:24:73:c9:64:5e:c5:70:95:
43:ba:86:41:88:46:1c:7d:41:87:c5:34:f1:8e:b4:ba:a1:87:
0f:0e:13:0b:ec:df:90:6c:e8:3d:e3:25:dc:10:e4:8a:23:96:
86:90:e9:8f:c8:f9:35:b9:6b:b8:38:80:62:71:aa:a2:83:3f:
04:c1:03:94:1e:9d:43:7d:d8:af:17:5b:35:1b:a0:43:00:b7:
b6:4f:1d:70:03:db:b1:4d:2a:bc:c6:31:49:38:cc:7e:72:e6:
81:20:ff:68:c2:23:21:d3:3c:6f:25:a0:e8:45:fb:b1:af:18:
32:db:a8:94:5f:97:ea:49:5b:f7:13:2d:b5:d1:25:b4:b5:7a:
d3:27:6d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:57:00 2026 by rpki-client