Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
File: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft (raw, json)
Hash identifier: 80MHxiI5faiziMBnq3y8rHcie4Liej0LcAv3+m+mn3U=
Subject key identifier: 88:FA:26:92:55:F5:F6:45:32:CC:BB:91:10:FF:9D:1A:D2:FF:93:41
Authority key identifier: 37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
Certificate issuer: /CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Certificate serial: 019CACB56B14FA7FC37307F5016C0DAD6680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
Manifest number: 11DF
Signing time: Mon 02 Mar 2026 04:01:36 +0000
Manifest this update: Mon 02 Mar 2026 04:01:36 +0000
Manifest next update: Tue 03 Mar 2026 04:01:36 +0000
Files and hashes: 1: N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl (hash: B1Y6ebHDSr1WSijSZTBe+M/EXEnk9QgWxms43tJbzc4=)
2: Ylv10vSg516VZiCHF-V4XQ_Q1lM.roa (hash: n4eisXfR10vCp8bRVZ+o+LnCZlLeQphgEpVjncPOq/M=)
3: taxylqt92XTRMNCLEumj-gGuc9E.roa (hash: 0T0KeKHGFppSjei5UxW0JsFkblLexOctRs4/cKSBPqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:6b:14:fa:7f:c3:73:07:f5:01:6c:0d:ad:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374c2617a372e466e98d42532dd0bd8e5cdd993d
Validity
Not Before: Mar 2 04:01:36 2026 GMT
Not After : Mar 3 04:01:36 2026 GMT
Subject: CN=88fa269255f5f64532ccbb9110ff9d1ad2ff9341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:c0:90:67:23:ff:31:db:fa:e4:dd:50:fb:3b:
46:24:e2:e2:d5:f8:4a:4c:98:ac:ab:30:db:d6:9b:
2d:f5:23:3d:f0:aa:50:37:10:5b:51:c2:8b:88:de:
3c:7c:ac:f2:37:f8:c3:1f:c4:7c:7a:60:e4:45:6f:
c0:d8:c5:2c:17:8c:c0:9b:58:b3:db:09:c2:0b:1e:
bb:c4:8b:d2:77:a8:78:dc:2b:96:b9:d5:93:a9:6c:
6d:48:f9:f4:38:e2:b0:3d:53:5a:34:a0:3a:3a:14:
a7:b7:ee:ee:7e:26:75:e8:6c:98:73:b3:b8:e6:b9:
0c:94:f3:63:43:ae:21:9b:7a:84:78:a5:13:a1:0b:
79:d2:68:85:32:54:78:f7:69:23:b7:9a:a3:e7:bb:
77:8a:e3:38:3a:bf:40:37:3b:d2:f5:d6:3f:b9:60:
fc:0e:01:2b:58:ff:a6:39:a7:a4:e1:53:ff:ce:7d:
c7:a1:f1:65:74:44:53:35:ce:7c:eb:a4:21:a6:e8:
0b:99:1f:ca:bb:4f:9b:0e:ec:3d:7d:88:02:e6:20:
e7:36:74:f1:d8:a8:11:91:5f:eb:49:e0:dd:43:22:
e6:68:20:db:15:8c:56:3a:93:e4:ac:26:cc:84:c1:
f7:eb:93:3e:13:fa:c8:3b:6d:23:66:a9:72:45:c3:
03:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:FA:26:92:55:F5:F6:45:32:CC:BB:91:10:FF:9D:1A:D2:FF:93:41
X509v3 Authority Key Identifier:
keyid:37:4C:26:17:A3:72:E4:66:E9:8D:42:53:2D:D0:BD:8E:5C:DD:99:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/381125-0248-4ebc-a74d-b8dad6e5c3bf/1/N0wmF6Ny5GbpjUJTLdC9jlzdmT0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:ab:64:59:ab:08:05:c2:9a:b1:8b:11:6d:21:d4:d3:e1:01:
0d:63:c7:c1:b5:f2:87:94:1c:d1:ed:90:38:a9:f1:a6:8c:0e:
6f:bf:fd:cc:6f:d3:c6:f9:67:0d:4d:cc:ed:a3:24:c7:9f:b4:
27:1b:0f:2f:2a:c7:5e:ea:4a:5d:f5:a2:c1:eb:5e:ee:1d:6c:
72:a7:78:f4:89:ad:32:3c:df:ae:c6:c4:31:ef:05:ef:80:bc:
18:d9:91:c3:7f:ae:3f:c0:85:09:76:2c:46:0c:3b:e6:2e:80:
38:d6:c3:58:af:be:95:fd:b8:31:70:02:fe:87:4e:ce:0c:4e:
8f:06:87:fc:3f:a2:52:34:c5:34:71:f5:fa:8e:e9:1f:5d:e0:
b2:5c:d8:a7:87:4d:7d:cd:18:de:09:5a:3f:ad:9b:b6:05:4e:
97:07:10:6d:03:ad:63:10:f0:24:f1:2c:48:07:53:86:f8:5b:
c9:4e:85:aa:46:37:ed:57:ba:29:d2:39:75:f7:e4:99:8e:40:
60:08:67:73:24:8e:46:1d:45:25:53:c7:0c:b0:24:c6:28:13:
0b:f9:ca:93:31:78:75:d2:83:12:db:e3:7f:57:df:da:a4:12:
61:9d:5e:cf:16:c1:4e:f5:20:1a:06:b5:18:e1:91:33:5e:97:
d3:f5:b4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:50:05 2026 by rpki-client