Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
File: N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft (raw, json)
Hash identifier: QKd+Dasw2R2XanAiqKdZR3CJGmEpy63CzQkGkqTiZww=
Subject key identifier: 33:A5:7F:40:9B:52:06:9E:D1:0C:4D:DB:6A:46:94:94:71:6D:F6:EE
Authority key identifier: 37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
Certificate issuer: /CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Certificate serial: 01A0C5FC9DDB3353C3AB66F122BAEBD8EEFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
Manifest number: 17B2
Signing time: Mon 21 Sep 2026 22:01:02 +0000
Manifest this update: Mon 21 Sep 2026 22:01:02 +0000
Manifest next update: Tue 22 Sep 2026 22:01:02 +0000
Files and hashes: 1: BRqvv0WLo99f8-G6ZIvnAk91o6g.roa (hash: qc6EEB2pPtQsZCtqVNu01mKKLXS0k3ijeSm0ChzNPbs=)
2: N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl (hash: tCpsViO8Rmv87nz9hZmLXjkm4GOlmdvjC5F3inYyyEg=)
3: WfrFEmCPRY6ziwxCZ5iAPeQrpwc.roa (hash: Mk5FHbgOkd1RMCXgBYHYmcVT6F73CxCfoHTOc1sFbTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 19:45:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:fc:9d:db:33:53:c3:ab:66:f1:22:ba:eb:d8:ee:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e751a11c1a7888fa58dbfc32c8959bc946303e
Validity
Not Before: Sep 21 22:01:02 2026 GMT
Not After : Sep 22 22:01:02 2026 GMT
Subject: CN=33a57f409b52069ed10c4ddb6a469494716df6ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:86:ed:60:94:6d:e0:ba:4e:95:ec:cf:a7:1f:
86:d4:6a:29:67:71:0e:7e:cd:53:87:78:8c:88:8b:
a7:90:a2:a0:6f:ba:90:ef:40:46:ce:c2:71:d0:32:
58:83:07:70:14:68:71:59:a2:a8:31:b4:cc:c9:2d:
40:3c:c4:51:49:82:1a:bb:69:3b:23:39:eb:7e:bf:
dd:bc:f1:af:be:c1:f4:a4:3c:2e:99:87:f5:b8:02:
45:28:87:e6:1a:69:bd:3c:01:52:f2:2a:ff:49:a9:
0b:1a:84:98:41:fe:88:59:7e:80:da:79:2b:4d:83:
91:ff:b4:3e:28:9d:3e:56:18:4d:72:69:cb:f5:ad:
c3:30:4f:3c:d7:08:3c:b1:94:17:f4:3c:e2:5f:81:
f9:b4:19:ed:97:26:cb:90:d8:6e:d1:7b:85:50:a5:
9b:92:96:59:d3:70:35:97:f9:cc:4a:bc:ce:62:10:
9a:3d:28:1f:b1:8f:08:6f:12:87:4a:46:e1:24:7e:
34:09:55:68:fe:0f:5a:07:cc:22:df:58:9c:d1:0b:
50:0c:c0:2f:00:4e:f0:5c:71:9b:98:a4:cd:bd:1a:
f7:6d:69:37:00:31:92:64:39:d5:80:4a:0c:47:06:
1e:48:68:b3:80:9e:47:61:34:fc:dd:3d:fd:25:78:
4e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:A5:7F:40:9B:52:06:9E:D1:0C:4D:DB:6A:46:94:94:71:6D:F6:EE
X509v3 Authority Key Identifier:
keyid:37:E7:51:A1:1C:1A:78:88:FA:58:DB:FC:32:C8:95:9B:C9:46:30:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-dRoRwaeIj6WNv8MsiVm8lGMD4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/6b0344-8229-4d25-b498-8ce7c4fc5e0b/1/N-dRoRwaeIj6WNv8MsiVm8lGMD4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:ab:87:47:35:df:fa:8e:14:69:a5:d4:54:ae:4b:13:8d:eb:
a7:02:59:0d:54:38:41:a1:ee:89:08:ef:8f:e0:58:89:25:c1:
3d:f9:af:a5:5b:57:ae:cc:f5:e3:5a:98:6e:60:6b:50:07:ec:
dd:3e:2e:6d:d2:7b:d7:09:ef:85:1d:92:6f:81:98:f9:f6:3d:
14:4f:e5:d6:3a:37:42:0a:6d:39:06:5a:3e:01:44:bb:01:53:
ba:49:37:56:85:74:41:d1:6c:8a:9a:2d:0b:35:83:63:a0:3e:
0c:e0:e9:3a:cf:c9:98:07:07:87:9f:9b:17:7c:81:df:d7:31:
d6:57:a2:24:a9:c6:8f:18:68:6e:61:f4:21:55:ab:4e:40:ed:
5f:67:51:35:62:bb:7e:23:c3:c6:67:f9:3f:5b:23:12:e3:b7:
6f:1e:4a:dc:d8:df:85:a5:6c:f1:ab:3d:fa:7d:78:a5:24:b6:
ed:df:30:1f:28:e3:82:c9:c0:6b:e8:30:05:a2:d2:21:cb:6e:
05:08:43:77:c7:96:8b:cd:13:c4:e7:c5:64:83:c6:2b:6c:dc:
26:36:b1:de:e4:78:d2:ba:cf:4c:0a:a6:d5:70:a8:16:7b:75:
7a:46:b1:16:a3:e8:9c:7a:13:9a:88:ed:b2:e3:01:dc:58:4b:
d0:e2:32:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDF/J3bM1PDq2bxIrrr2O77MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZTc1MWExMWMxYTc4ODhmYTU4ZGJmYzMyYzg5NTliYzk0
NjMwM2UwHhcNMjYwOTIxMjIwMTAyWhcNMjYwOTIyMjIwMTAyWjAzMTEwLwYDVQQD
EygzM2E1N2Y0MDliNTIwNjllZDEwYzRkZGI2YTQ2OTQ5NDcxNmRmNmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YbtYJRt4LpOlezPpx+G1GopZ3EO
fs1Th3iMiIunkKKgb7qQ70BGzsJx0DJYgwdwFGhxWaKoMbTMyS1APMRRSYIau2k7
Iznrfr/dvPGvvsH0pDwumYf1uAJFKIfmGmm9PAFS8ir/SakLGoSYQf6IWX6A2nkr
TYOR/7Q+KJ0+VhhNcmnL9a3DME881wg8sZQX9DziX4H5tBntlybLkNhu0XuFUKWb
kpZZ03A1l/nMSrzOYhCaPSgfsY8IbxKHSkbhJH40CVVo/g9aB8wi31ic0QtQDMAv
AE7wXHGbmKTNvRr3bWk3ADGSZDnVgEoMRwYeSGizgJ5HYTT83T39JXhORQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOlf0CbUgae0QxN22pGlJRxbfbuMB8GA1UdIwQY
MBaAFDfnUaEcGniI+ljb/DLIlZvJRjA+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgt
OGNlN2M0ZmM1ZTBiLzEvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS82YjAzNDQtODIyOS00ZDI1LWI0OTgtOGNlN2M0ZmM1ZTBi
LzEvTi1kUm9Sd2FlSWo2V052OE1zaVZtOGxHTUQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZauHRzXf
+o4UaaXUVK5LE43rpwJZDVQ4QaHuiQjvj+BYiSXBPfmvpVtXrsz141qYbmBrUAfs
3T4ubdJ71wnvhR2Sb4GY+fY9FE/l1jo3QgptOQZaPgFEuwFTukk3VoV0QdFsipot
CzWDY6A+DODpOs/JmAcHh5+bF3yB39cx1leiJKnGjxhobmH0IVWrTkDtX2dRNWK7
fiPDxmf5P1sjEuO3bx5K3NjfhaVs8as9+n14pSS27d8wHyjjgsnAa+gwBaLSIctu
BQhDd8eWi80TxOfFZIPGK2zcJjax3uR40rrPTAqm1XCoFnt1ekaxFqPonHoTmojt
suMB3FhL0OIy9g==
-----END CERTIFICATE-----
Generated at Tue Sep 22 03:19:40 2026 by rpki-client