Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: 312nBQi9ElYqFaDWIWZ3R5775pj/QfYez8e7Q8jqF5E=
Subject key identifier: 8E:69:9A:98:3B:F2:DC:53:59:7D:0A:68:F0:5D:CB:31:98:A3:57:A1
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019CAA21A9AAB91FD09AFD8E085245EFE7CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 07FD
Signing time: Sun 01 Mar 2026 16:00:58 +0000
Manifest this update: Sun 01 Mar 2026 16:00:58 +0000
Manifest next update: Mon 02 Mar 2026 16:00:58 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: /yXgtnMNfyHzT1SlLAEKNqZ+H3JRxDTNYfv1xId3H6w=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 16:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:a9:aa:b9:1f:d0:9a:fd:8e:08:52:45:ef:e7:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Mar 1 16:00:58 2026 GMT
Not After : Mar 2 16:00:58 2026 GMT
Subject: CN=8e699a983bf2dc53597d0a68f05dcb3198a357a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:44:3f:80:3a:26:82:55:97:3f:1f:8b:af:63:
ae:64:53:d1:d9:07:40:8d:fd:10:b0:49:4a:b7:67:
c0:5a:24:09:8f:b5:45:07:d3:e1:25:f7:17:7e:3e:
20:84:71:25:71:6e:c0:3e:c0:a9:84:d4:f5:27:72:
42:35:0a:32:1b:a9:72:9a:a4:91:35:21:c5:e0:8a:
76:1d:8f:9e:df:27:ae:97:58:54:d4:83:fd:6b:47:
72:e3:e5:09:f3:ce:48:70:0d:62:ff:db:91:6b:1d:
7b:26:c4:cf:cb:a5:68:48:70:28:90:09:63:58:be:
3c:b9:40:75:48:bb:58:17:48:02:8f:af:8e:83:8a:
83:75:4d:1b:ad:df:20:56:80:73:fb:e0:50:5b:f5:
68:7d:9e:6b:84:29:91:d2:12:aa:a8:fb:13:57:d3:
05:f3:82:03:78:86:b9:67:23:d7:79:24:aa:34:35:
b2:7a:94:dc:72:51:1d:7a:e8:20:1d:07:ed:90:8a:
f9:a0:16:2a:77:ba:b4:1d:e9:e8:f7:df:a7:c5:68:
65:ba:2b:43:9e:45:d9:36:81:1f:5e:47:8b:e2:92:
a3:57:2f:fa:3c:6a:6d:b4:24:2b:7d:84:4f:30:06:
9c:d0:06:75:3d:93:67:43:ad:3f:70:45:4b:80:bb:
61:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:69:9A:98:3B:F2:DC:53:59:7D:0A:68:F0:5D:CB:31:98:A3:57:A1
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:05:4d:cf:65:dd:5a:38:a2:b2:cf:61:f9:de:3e:b3:e9:0a:
c7:6b:ed:dc:50:cf:a6:85:60:76:f1:a7:4c:b0:1a:9a:75:c9:
e2:5c:ea:14:e6:07:54:4f:5b:d9:e9:57:42:93:65:b7:e2:ac:
f6:8b:b8:c4:28:94:94:21:05:15:3c:e4:45:8c:34:f4:72:09:
f1:54:78:d0:c9:5a:86:bd:a0:51:41:6f:d1:9c:9b:d8:13:8a:
90:80:23:1f:b0:34:47:d2:0f:20:35:22:a3:e8:3a:4a:f0:da:
25:cc:1f:d3:51:2c:d2:6e:a6:1e:01:14:07:0c:92:5f:2b:b1:
78:e3:26:1b:6e:e2:b3:9d:cc:32:2d:30:60:98:bd:23:46:6f:
24:fa:be:72:fb:98:35:c8:94:3b:65:37:f0:f5:35:4f:e0:41:
0f:b5:dd:b9:6b:a8:f1:0d:6c:1c:a0:8e:e4:47:24:f4:f4:66:
af:4a:38:00:6c:f3:b6:3d:76:4a:a9:f7:2a:f1:47:7d:45:c4:
52:fd:28:8a:69:db:21:3e:60:23:2b:c1:b2:c8:19:09:10:e3:
a7:a5:74:f9:92:34:66:56:69:2d:aa:b7:66:f9:0e:57:7f:f5:
fb:8e:33:81:97:df:d7:a7:4d:cb:15:0f:d1:30:e5:84:70:4f:
9e:1b:29:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:14 2026 by rpki-client