Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: hAJzsxxIVvTXozaKlCXrDmJfnscvy6hOCd5lO2ErwOM=
Subject key identifier: F7:0B:2A:DB:E0:DC:E2:13:EB:34:8F:E9:E1:18:C8:E5:2C:AE:4B:F7
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019D98F4D84BC42891CDDAE1A3197093C223
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 160D
Signing time: Fri 17 Apr 2026 01:01:16 +0000
Manifest this update: Fri 17 Apr 2026 01:01:16 +0000
Manifest next update: Sat 18 Apr 2026 01:01:16 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: 6ceqFnKwIRI0OrgwNLGX5dCg17LGnW+6mCMYdOCW3iE=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 01:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:f4:d8:4b:c4:28:91:cd:da:e1:a3:19:70:93:c2:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Apr 17 01:01:16 2026 GMT
Not After : Apr 18 01:01:16 2026 GMT
Subject: CN=f70b2adbe0dce213eb348fe9e118c8e52cae4bf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:97:39:ce:c7:4e:1b:09:03:b6:bb:96:45:a8:
d4:0f:e0:01:e1:fa:d7:82:ef:07:cb:9e:2c:bd:42:
08:68:8d:37:54:85:e1:f6:38:60:74:70:2d:8d:4e:
37:5b:87:12:0f:4a:42:72:84:f6:c9:ee:4c:27:21:
a0:a5:f2:14:ff:11:b8:93:3d:ce:68:f5:a2:88:b8:
42:3c:9c:53:c5:b3:5d:c9:76:65:30:ea:8c:d5:13:
d6:a3:5b:b5:f0:52:b1:82:ae:48:4f:a0:72:ab:58:
53:f1:d7:15:43:69:b5:84:28:ac:5b:01:d1:04:64:
4e:d8:a6:91:ed:4a:e5:ea:39:e7:2a:9f:d0:5b:36:
6b:dc:8c:2b:f0:95:82:76:1a:12:32:67:c7:24:4f:
83:21:e6:c7:5c:c9:f5:2e:1e:f2:4c:9f:74:0f:6c:
9e:eb:e6:92:e4:1f:9f:94:b3:23:a3:7e:cc:21:40:
97:a8:2a:dd:f7:ba:d0:30:8a:02:b6:28:dc:4b:48:
0f:a5:d9:7b:52:5e:b4:e6:31:7c:62:ee:0d:89:38:
0f:cd:4a:2e:04:03:4c:ae:6d:8c:cb:14:db:f0:32:
6a:eb:f4:c2:f3:b5:d3:cf:34:4f:49:5d:56:ca:1a:
5c:25:3c:f2:af:d9:27:1c:f5:05:88:c6:f9:b2:23:
f9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:0B:2A:DB:E0:DC:E2:13:EB:34:8F:E9:E1:18:C8:E5:2C:AE:4B:F7
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:c4:1c:b6:03:0e:65:21:77:02:27:3f:40:f7:7b:2c:49:07:
68:7a:3a:25:3d:ca:8e:7b:ae:d1:65:1d:8b:e1:b4:0e:7c:0b:
eb:ca:8a:02:18:aa:fc:47:ba:18:5a:bb:33:67:00:8a:38:54:
6f:27:af:55:4e:4b:28:3e:da:70:b5:82:71:d4:41:02:ea:7e:
05:c3:c2:88:d7:0b:a0:ce:23:69:1c:0e:90:f5:39:30:e0:88:
ab:c4:64:bc:89:d1:10:ef:72:03:39:f8:d4:42:a6:05:7f:9f:
63:52:19:d4:8f:c2:2b:8a:e4:6c:cb:32:30:66:df:9f:66:5e:
40:05:a9:28:1e:8b:92:cb:20:f9:45:20:27:af:2d:76:6a:01:
4a:69:e5:4f:c3:7f:46:bf:7e:a2:1c:bc:c5:cb:9f:3c:a3:0c:
fa:1b:ac:1e:68:0a:fb:66:bf:82:60:af:84:fc:c3:13:41:63:
a9:c5:39:0d:9b:e9:30:39:81:5d:1d:18:5c:4d:a4:86:5d:59:
a2:d3:42:8e:64:56:1c:4d:69:52:58:bb:3c:63:c2:8c:64:b4:
27:9b:5e:e9:ef:3e:6e:98:7f:4e:0d:c5:52:c5:38:ea:0c:f1:
de:7f:f9:3e:b4:f1:e1:dd:c8:6f:7d:69:60:fe:63:d7:44:45:
e9:a9:23:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:03:30 2026 by rpki-client