Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier: yoCAIiogRlwuGyTEoqX45NvdtKaPqlLnUAqJiOgPP8I=
Subject key identifier: A6:ED:40:8B:70:B7:FE:03:C8:02:C4:08:57:A8:FB:46:50:58:BA:5E
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial: 019D9E1BB5BA20C12393036A9467CB5019D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number: 125C
Signing time: Sat 18 Apr 2026 01:01:48 +0000
Manifest this update: Sat 18 Apr 2026 01:01:48 +0000
Manifest next update: Sun 19 Apr 2026 01:01:48 +0000
Files and hashes: 1: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: 4wNCUPT5TGTA+XNXA6MHGJg3Ltm0reDKJCKrBmX8AP8=)
2: Ylv10vSg516VZiCHF-V4XQ_Q1lM.roa (hash: n4eisXfR10vCp8bRVZ+o+LnCZlLeQphgEpVjncPOq/M=)
3: taxylqt92XTRMNCLEumj-gGuc9E.roa (hash: 0T0KeKHGFppSjei5UxW0JsFkblLexOctRs4/cKSBPqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 21:23:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9e:1b:b5:ba:20:c1:23:93:03:6a:94:67:cb:50:19:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Validity
Not Before: Apr 18 01:01:48 2026 GMT
Not After : Apr 19 01:01:48 2026 GMT
Subject: CN=a6ed408b70b7fe03c802c40857a8fb465058ba5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:76:1a:97:a4:d2:b2:06:de:d9:3b:18:c4:9f:
24:00:0e:c6:74:9a:e1:d5:f5:82:d2:1a:67:a3:45:
2e:d1:1b:b1:aa:2c:31:09:48:9d:c9:5b:9c:5a:ed:
76:30:bd:6b:41:0d:62:e3:5f:1a:dd:5f:ff:88:09:
93:8c:79:35:27:71:e7:3e:92:64:48:de:07:cc:39:
c9:a4:6d:1a:4b:66:5d:78:f7:ba:61:2a:e9:45:71:
ae:49:e4:53:f5:af:cb:60:1c:c5:14:37:bd:6c:d4:
f4:de:5f:a0:a3:f4:ee:bf:41:55:d8:aa:9a:de:a5:
2a:b9:b1:59:1a:96:ac:37:21:c2:a8:ae:3c:2a:9c:
c1:5b:43:d6:3c:06:a1:61:71:bd:62:70:48:76:78:
bc:52:67:15:bc:d4:23:da:cf:db:96:9c:1f:6d:26:
19:7a:33:07:0a:b6:e6:8c:8a:73:bc:32:ff:d4:3e:
d1:33:c1:3f:47:ca:ab:99:38:cd:26:11:a0:2c:e6:
a6:08:24:e1:7f:f0:5e:70:c9:c8:40:b0:fd:33:45:
c1:52:cf:d2:58:54:09:52:5a:c8:c7:d3:04:3d:fe:
2b:dc:0e:82:85:92:0d:bb:1c:15:69:57:6a:23:fe:
e5:c5:02:f6:da:0a:03:0e:58:cc:b0:49:13:7a:e1:
b9:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:ED:40:8B:70:B7:FE:03:C8:02:C4:08:57:A8:FB:46:50:58:BA:5E
X509v3 Authority Key Identifier:
keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:c6:7c:b9:23:ae:ce:09:62:a9:f0:31:75:98:8b:2d:ce:a3:
a0:78:4b:ba:b6:ef:ab:b9:e3:14:b2:ea:32:4b:61:39:e3:8d:
f2:ab:ce:23:6f:63:7d:a3:fe:1d:56:6e:0e:9a:b4:b8:ea:fe:
f1:66:e1:a1:56:80:d5:6a:24:aa:42:65:1a:55:e2:6c:92:a0:
24:9e:a1:96:33:c0:af:d0:d3:94:50:4a:e7:ab:8b:56:68:3c:
2c:79:51:4d:22:e0:9f:d2:1d:22:e3:9c:af:45:d8:ba:79:f7:
87:51:8d:76:f7:1b:38:c2:4e:b5:5a:51:84:97:4b:22:c6:a6:
c5:ca:a5:e3:1e:b1:14:46:50:4d:8f:bf:45:e5:67:6a:ad:2b:
4e:47:bd:22:7f:99:98:11:03:04:ff:16:f0:a8:7a:60:01:13:
9d:e5:80:97:9a:03:e5:f3:16:1e:ae:8c:e3:b0:bc:44:16:f6:
40:85:6f:d1:a0:14:cd:a7:98:c8:9c:86:61:e6:87:d1:cb:a9:
68:7d:74:14:61:2a:12:56:52:f1:e9:20:2e:be:d4:5f:69:d7:
fa:51:77:55:ad:07:14:d1:37:5a:c9:a6:69:22:06:41:6b:79:
18:22:21:70:af:a0:51:d4:0f:12:53:54:8d:16:3b:c7:8e:69:
07:72:e2:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2eG7W6IMEjkwNqlGfLUBnXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NGMyNjE3YTM3MmU0NjZlOThkNDI1MzJkZDBiZDhlNWNk
ZDk5M2QwHhcNMjYwNDE4MDEwMTQ4WhcNMjYwNDE5MDEwMTQ4WjAzMTEwLwYDVQQD
EyhhNmVkNDA4YjcwYjdmZTAzYzgwMmM0MDg1N2E4ZmI0NjUwNThiYTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynYal6TSsgbe2TsYxJ8kAA7GdJrh
1fWC0hpno0Uu0RuxqiwxCUidyVucWu12ML1rQQ1i418a3V//iAmTjHk1J3HnPpJk
SN4HzDnJpG0aS2ZdePe6YSrpRXGuSeRT9a/LYBzFFDe9bNT03l+go/Tuv0FV2Kqa
3qUqubFZGpasNyHCqK48KpzBW0PWPAahYXG9YnBIdni8UmcVvNQj2s/blpwfbSYZ
ejMHCrbmjIpzvDL/1D7RM8E/R8qrmTjNJhGgLOamCCThf/BecMnIQLD9M0XBUs/S
WFQJUlrIx9MEPf4r3A6ChZINuxwVaVdqI/7lxQL22goDDljMsEkTeuG59wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKbtQItwt/4DyALECFeo+0ZQWLpeMB8GA1UdIwQY
MBaAFDdMJhejcuRm6Y1CUy3QvY5c3Zk9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQt
YjhkYWQ2ZTVjM2JmLzEvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS8zODExMjUtMDI0OC00ZWJjLWE3NGQtYjhkYWQ2ZTVjM2Jm
LzEvTjB3bUY2Tnk1R2JwalVKVExkQzlqbHpkbVQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPMZ8uSOu
zgliqfAxdZiLLc6joHhLurbvq7njFLLqMkthOeON8qvOI29jfaP+HVZuDpq0uOr+
8WbhoVaA1WokqkJlGlXibJKgJJ6hljPAr9DTlFBK56uLVmg8LHlRTSLgn9IdIuOc
r0XYunn3h1GNdvcbOMJOtVpRhJdLIsamxcql4x6xFEZQTY+/ReVnaq0rTke9In+Z
mBEDBP8W8Kh6YAETneWAl5oD5fMWHq6M47C8RBb2QIVv0aAUzaeYyJyGYeaH0cup
aH10FGEqElZS8ekgLr7UX2nX+lF3Va0HFNE3WsmmaSIGQWt5GCIhcK+gUdQPElNU
jRY7x45pB3Litg==
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:14:09 2026 by rpki-client