Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: 6x2toPwP2ozQ6VGsClnKZ6XUPnUj9XaQa6/OrrtO6t8=
Subject key identifier: F9:EA:3B:C4:51:B8:25:67:47:07:C4:D7:FB:2F:60:78:FD:02:F6:66
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 01A0C40E3B89056506DA9CB6265005BF0181
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 17B1
Signing time: Mon 21 Sep 2026 13:01:02 +0000
Manifest this update: Mon 21 Sep 2026 13:01:02 +0000
Manifest next update: Tue 22 Sep 2026 13:01:02 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: F9OdlCZxNiLDYgK9ckpswC4C2XcxBvgDVvMUB9BgeFk=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 13:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:0e:3b:89:05:65:06:da:9c:b6:26:50:05:bf:01:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Sep 21 13:01:02 2026 GMT
Not After : Sep 22 13:01:02 2026 GMT
Subject: CN=f9ea3bc451b825674707c4d7fb2f6078fd02f666
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:d9:ba:57:22:3d:a3:83:6d:46:8a:d3:6f:f7:
64:18:5a:c6:87:6e:c6:f0:8f:f1:c9:e7:31:8a:90:
4b:58:ee:33:39:1f:ad:c6:71:af:bd:1e:8c:0b:e6:
ca:b3:11:a4:31:f9:6e:7d:4b:28:b2:6f:db:0d:b7:
d7:4c:cc:2b:95:1c:7e:a0:21:d1:2d:b4:4c:c7:03:
e4:de:47:fa:2d:1f:c5:30:d9:cd:7f:75:27:61:4b:
e3:92:3d:76:4e:20:da:d2:47:6a:99:1c:5e:32:78:
e4:ab:af:04:64:67:c3:af:21:c4:0a:ac:9c:72:65:
70:5e:5d:71:df:bb:f8:7b:06:8b:ab:49:c0:7a:99:
4b:3f:bc:1e:a0:8a:f5:1e:88:fe:e1:04:02:de:bf:
52:bb:11:de:c4:5c:13:b2:c3:59:be:ce:6e:fe:e5:
06:ff:c3:14:a0:4e:f0:ed:91:71:41:13:b5:5f:9f:
93:78:af:15:30:74:42:81:18:d0:a0:a5:22:51:10:
65:36:f2:c4:3c:f5:70:66:5b:8b:52:15:38:43:a9:
b3:64:8a:4b:da:6f:b4:af:ec:12:a5:98:aa:79:60:
21:6e:36:fe:e4:dc:a0:ba:08:41:30:5c:60:c7:7b:
c4:eb:07:c7:dc:bb:c9:99:95:bd:25:eb:10:62:03:
bb:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:EA:3B:C4:51:B8:25:67:47:07:C4:D7:FB:2F:60:78:FD:02:F6:66
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:07:b4:d6:12:74:3d:52:0f:c8:c2:f7:01:51:5a:95:91:ee:
e2:5a:3f:31:ec:59:90:c7:06:16:d0:19:4b:55:95:0a:ea:f6:
88:48:46:e2:ad:55:62:15:5a:ef:9f:5b:f9:03:96:58:db:33:
c1:c6:65:04:56:4d:65:c0:b2:f7:bd:c7:47:b9:ae:c0:81:ae:
be:74:4b:3f:7e:e5:6a:76:16:96:20:96:c2:bf:b9:88:46:9b:
fd:e8:10:39:92:18:44:24:02:0e:1a:87:49:78:56:c1:5c:b0:
3b:b8:d8:a1:04:9f:c7:46:ea:80:5a:f9:25:c3:ad:49:96:fc:
34:e7:8c:ea:e2:9f:cb:8e:db:86:42:52:27:33:c8:1c:a2:8b:
58:ef:7f:35:f0:cd:90:e8:e5:c7:6a:d4:c7:82:78:9f:c6:1e:
db:47:cc:2f:0d:8a:82:f1:0b:0f:c8:db:28:0c:25:b8:48:39:
48:c3:e6:58:2c:07:7a:45:32:aa:67:db:b7:a4:e2:ff:c2:c5:
40:2e:9a:e5:c3:87:61:0a:75:86:f2:ef:74:1d:91:e9:68:24:
aa:8f:67:87:45:4b:a6:93:a7:cf:8b:19:65:e4:64:a3:90:4c:
41:66:91:fc:c0:34:cc:6f:7f:cd:14:f2:12:17:5b:1a:a9:6e:
99:07:7f:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 22:23:43 2026 by rpki-client