Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: Xd3qbMLKLf1oErz+Ff6T9aXmkE+4nOcz3zkqO/mwo9E=
Subject key identifier: D5:45:FE:A3:BC:6C:82:3C:A7:04:03:CB:0B:F8:54:0D:2D:0C:D3:BA
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 019FAA1A447769AB51B3AFBB033505578956
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 171F
Signing time: Tue 28 Jul 2026 19:01:15 +0000
Manifest this update: Tue 28 Jul 2026 19:01:15 +0000
Manifest next update: Wed 29 Jul 2026 19:01:15 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: rnr5pzjnt2zngb3z3ooK+HpGclHK5ijTVrv/XlhwjWY=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 19:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:aa:1a:44:77:69:ab:51:b3:af:bb:03:35:05:57:89:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Jul 28 19:01:15 2026 GMT
Not After : Jul 29 19:01:15 2026 GMT
Subject: CN=d545fea3bc6c823ca70403cb0bf8540d2d0cd3ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:7c:d6:56:4a:de:b2:f3:77:67:29:b6:f1:0d:
2d:81:60:37:8d:2a:cb:4a:34:e9:d3:c9:62:95:03:
6d:7b:22:67:25:64:a9:f5:c9:d2:06:99:b4:b1:47:
66:3c:af:c4:ec:50:02:bc:6b:12:31:14:e6:84:64:
81:46:c5:a3:ba:6b:4d:7a:7f:22:55:c9:0e:c1:ad:
a8:7e:48:0f:e7:3c:bd:f4:d6:a5:c9:f9:c4:84:56:
90:a5:6a:28:21:e3:38:46:ca:35:d1:f2:25:8c:3e:
79:ad:32:14:52:46:41:fe:82:19:6c:95:16:67:41:
9c:23:0b:49:a8:22:f9:6f:b5:14:47:10:e4:e7:08:
c1:0c:e8:f6:a7:1a:ad:e7:56:06:f0:66:dd:bb:68:
3d:06:56:94:b8:37:2b:58:21:72:80:7f:e0:af:c5:
ee:ff:3e:88:5f:cd:e2:22:61:b2:c7:4b:c7:7c:e0:
e7:ef:4d:1b:0f:20:7e:ec:91:1c:41:8e:14:8d:d0:
4e:8f:fc:a7:a4:87:2f:a6:8c:ea:4f:f1:b1:77:d3:
17:ac:b3:99:2f:53:a0:db:fd:bb:40:ba:7a:cb:a8:
da:89:e7:09:77:ba:aa:2d:ed:94:9a:41:46:96:c4:
43:e2:b3:58:8b:11:26:7b:e5:f9:1e:a4:55:ed:31:
76:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:45:FE:A3:BC:6C:82:3C:A7:04:03:CB:0B:F8:54:0D:2D:0C:D3:BA
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:16:d4:20:e1:bb:11:82:10:b7:1e:0c:b2:aa:a6:78:a5:e5:
78:be:21:67:fa:dd:a5:05:b7:c2:95:c9:cd:f8:00:1d:36:f9:
fa:c2:79:85:3e:cf:63:81:42:4b:c4:9e:9b:8f:a6:7d:79:78:
c9:7b:70:78:5d:7d:5b:a5:4d:29:fa:c6:a1:1e:d3:be:68:ed:
32:15:94:bd:33:34:c7:72:31:92:c6:7c:68:da:47:f5:b3:49:
41:4c:77:a8:ee:cc:a7:5b:74:2d:a4:cb:ca:e6:ae:4f:d5:7f:
fe:13:01:1b:79:b2:f4:4c:8b:09:c2:68:97:d9:05:74:80:b2:
b3:41:3d:05:37:ec:8b:92:95:53:90:db:6b:20:99:c1:09:03:
3b:b1:06:6c:f1:e2:b3:15:9f:33:67:9b:70:f5:59:b1:d2:98:
3c:75:8c:ed:31:31:0b:5b:91:5c:25:b2:6c:b7:a0:e1:fc:60:
ed:19:eb:69:d8:49:1d:41:e0:2b:09:7a:d5:57:0b:92:66:fe:
8d:11:15:cf:78:e4:29:89:b7:39:df:d5:09:e9:46:05:8e:42:
4d:ba:a5:35:9b:d2:09:63:65:11:cc:99:8d:ca:1e:7f:7b:19:
38:5f:e0:80:96:ad:08:d6:b0:01:25:72:d5:ee:5c:61:a5:2d:
9c:48:19:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:28:35 2026 by rpki-client