Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
File: N8SLeJzH_-e-CURGQ_24a9tXP30.mft (raw, json)
Hash identifier: A4p6Dg7Z0l/Vus8s3yvGGIWkRKjEU4nkG35WWEuFkDo=
Subject key identifier: F6:84:3C:90:8A:10:00:A5:42:A1:9F:3C:25:14:BD:B3:C0:0B:A0:AD
Authority key identifier: 37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
Certificate issuer: /CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Certificate serial: 019CAA58644806537F7D3A6FE10FCEF88393
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
Manifest number: 0CDE
Signing time: Sun 01 Mar 2026 17:00:45 +0000
Manifest this update: Sun 01 Mar 2026 17:00:45 +0000
Manifest next update: Mon 02 Mar 2026 17:00:45 +0000
Files and hashes: 1: 4TPc3m07IptozaAS-Sg6u70wBY8.roa (hash: Ub9VBi2JJ0n1uK8GpU4txhHGzf/S6oXYoNYi6ksYIpM=)
2: N8SLeJzH_-e-CURGQ_24a9tXP30.crl (hash: oXzKCy5lT7KUm520H++8Wzd6HrOOhBh17ilQ/ECQKdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:64:48:06:53:7f:7d:3a:6f:e1:0f:ce:f8:83:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c48b789cc7ffe7be09444643fdb86bdb573f7d
Validity
Not Before: Mar 1 17:00:45 2026 GMT
Not After : Mar 2 17:00:45 2026 GMT
Subject: CN=f6843c908a1000a542a19f3c2514bdb3c00ba0ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:a7:b9:a5:65:33:6d:5f:ab:cf:3e:94:76:bd:
b9:44:a1:b7:87:52:f8:a0:22:01:76:08:89:08:59:
98:3f:30:bd:af:fd:e9:4d:7b:24:72:63:20:63:d3:
f2:8e:24:21:2a:b3:7a:a1:87:82:84:48:71:e8:c0:
a1:52:c4:03:cb:a3:c0:c3:0f:e8:80:26:18:d8:25:
58:69:4c:56:89:c1:cd:79:6a:84:8e:fd:9b:a9:61:
8a:c2:56:f1:82:eb:b4:b5:3c:c0:d0:de:8d:74:d7:
d5:66:f3:33:02:e9:7f:74:af:41:f8:8d:46:3b:1b:
5c:38:53:be:4a:cd:6c:fd:f2:ef:6e:e0:3a:a5:e3:
2f:ec:64:51:40:21:50:6e:18:c4:2d:5f:56:f2:db:
88:17:f5:d6:bb:e7:48:8a:e8:6e:0f:1e:8b:39:66:
1e:81:f6:a7:e1:e6:34:7b:e5:55:26:32:15:62:e0:
1b:c2:f7:3b:66:82:eb:7e:79:52:37:61:7e:e3:75:
4b:2f:48:f6:48:fe:d4:68:e5:6c:ef:ab:47:34:6e:
4e:c1:0a:03:b8:5b:7e:79:9c:ed:cb:69:56:10:42:
c9:76:c9:28:1e:f4:3d:b5:e4:a9:61:07:fd:98:84:
d2:38:36:4a:d5:ac:e6:52:87:cf:69:1d:71:40:f1:
29:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:84:3C:90:8A:10:00:A5:42:A1:9F:3C:25:14:BD:B3:C0:0B:A0:AD
X509v3 Authority Key Identifier:
keyid:37:C4:8B:78:9C:C7:FF:E7:BE:09:44:46:43:FD:B8:6B:DB:57:3F:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8SLeJzH_-e-CURGQ_24a9tXP30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/1d575d-7b22-47c7-a17e-8a136cb0dd5c/1/N8SLeJzH_-e-CURGQ_24a9tXP30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:a6:58:f6:55:53:f1:02:04:53:1d:e2:99:b9:95:8c:e5:c6:
f5:ca:c4:2e:c9:27:bf:e8:b3:7e:9c:43:70:36:b0:bd:dc:69:
c6:57:65:72:e1:53:27:97:3c:85:b7:99:2f:c2:6e:ee:63:44:
8d:93:39:a4:fd:bc:1b:27:74:df:8e:7f:7b:94:e6:fb:2e:31:
49:da:a3:59:1a:0e:45:0e:96:f9:e3:86:e4:c0:63:49:34:14:
91:8d:55:15:21:41:15:a5:5c:61:e4:ed:c2:b6:04:6c:5f:38:
dc:3e:b3:a7:06:ba:48:42:d3:91:4e:2d:2e:97:a4:c6:bf:57:
c7:1b:cf:4b:db:a8:f8:3c:13:40:84:cb:4f:6a:3c:c1:6b:c5:
7e:d9:d2:1f:3c:d7:8a:a1:f0:38:66:64:b3:6b:4a:bb:4d:f9:
14:c1:6c:80:ba:a5:51:3b:d1:09:55:e6:bd:dd:4c:77:17:9c:
ec:eb:19:cf:fd:52:21:21:f5:68:db:eb:77:35:8e:b2:5b:bd:
32:a0:46:14:3e:3f:c9:2b:b6:4a:b7:fc:b7:44:e0:c0:1f:bb:
e4:22:c5:d9:f1:be:a7:c9:9e:a9:bf:59:e7:b8:ec:52:19:f0:
e7:5c:d3:fa:98:06:23:b1:e0:3a:3f:d6:e0:a2:1c:d2:cf:7c:
16:1b:35:fe
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyqWGRIBlN/fTpv4Q/O+IOTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YzQ4Yjc4OWNjN2ZmZTdiZTA5NDQ0NjQzZmRiODZiZGI1
NzNmN2QwHhcNMjYwMzAxMTcwMDQ1WhcNMjYwMzAyMTcwMDQ1WjAzMTEwLwYDVQQD
EyhmNjg0M2M5MDhhMTAwMGE1NDJhMTlmM2MyNTE0YmRiM2MwMGJhMGFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4qe5pWUzbV+rzz6Udr25RKG3h1L4
oCIBdgiJCFmYPzC9r/3pTXskcmMgY9PyjiQhKrN6oYeChEhx6MChUsQDy6PAww/o
gCYY2CVYaUxWicHNeWqEjv2bqWGKwlbxguu0tTzA0N6NdNfVZvMzAul/dK9B+I1G
OxtcOFO+Ss1s/fLvbuA6peMv7GRRQCFQbhjELV9W8tuIF/XWu+dIiuhuDx6LOWYe
gfan4eY0e+VVJjIVYuAbwvc7ZoLrfnlSN2F+43VLL0j2SP7UaOVs76tHNG5OwQoD
uFt+eZzty2lWEELJdskoHvQ9teSpYQf9mITSODZK1azmUofPaR1xQPEpqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaEPJCKEAClQqGfPCUUvbPAC6CtMB8GA1UdIwQY
MBaAFDfEi3icx//nvglERkP9uGvbVz99MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2Ut
OGExMzZjYjBkZDVjLzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni8xZDU3NWQtN2IyMi00N2M3LWExN2UtOGExMzZjYjBkZDVj
LzEvTjhTTGVKekhfLWUtQ1VSR1FfMjRhOXRYUDMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqZY9lVT
8QIEUx3imbmVjOXG9crELsknv+izfpxDcDawvdxpxldlcuFTJ5c8hbeZL8Ju7mNE
jZM5pP28Gyd0345/e5Tm+y4xSdqjWRoORQ6W+eOG5MBjSTQUkY1VFSFBFaVcYeTt
wrYEbF843D6zpwa6SELTkU4tLpekxr9XxxvPS9uo+DwTQITLT2o8wWvFftnSHzzX
iqHwOGZks2tKu035FMFsgLqlUTvRCVXmvd1Mdxec7OsZz/1SISH1aNvrdzWOslu9
MqBGFD4/ySu2Srf8t0TgwB+75CLF2fG+p8meqb9Z57jsUhnw51zT+pgGI7HgOj/W
4KIc0s98Fhs1/g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:38:33 2026 by rpki-client