Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
File: N5fgOfAlolqm6ZI5HZJCYGmbpns.mft (raw, json)
Hash identifier: KYrc6YElV4m2hKApPsJwXgXK/i+/bS6hgt86PEOpE80=
Subject key identifier: C2:A3:B9:8F:50:71:30:91:BB:D9:CE:6D:B2:8B:C1:52:7A:F6:F5:A9
Authority key identifier: 37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
Certificate issuer: /CN=3797e039f025a25aa6e992391d924260699ba67b
Certificate serial: 019CAA5929D0B8FC272EDB6DF5149C73E842
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
Manifest number: 11C0
Signing time: Sun 01 Mar 2026 17:01:35 +0000
Manifest this update: Sun 01 Mar 2026 17:01:35 +0000
Manifest next update: Mon 02 Mar 2026 17:01:35 +0000
Files and hashes: 1: N5fgOfAlolqm6ZI5HZJCYGmbpns.crl (hash: 2ciVAfmGM1g3s4Uu0yjuC5Ze44V6AwFGiFXdw58eVZc=)
2: NIPM7aKL5uexVcL90KLAP5wDjZQ.roa (hash: 9ZYrM11j7nntBzeZqvmkRCiHqz1k+TWVJfFzgJNUNng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:59:29:d0:b8:fc:27:2e:db:6d:f5:14:9c:73:e8:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3797e039f025a25aa6e992391d924260699ba67b
Validity
Not Before: Mar 1 17:01:35 2026 GMT
Not After : Mar 2 17:01:35 2026 GMT
Subject: CN=c2a3b98f50713091bbd9ce6db28bc1527af6f5a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:30:a4:93:f4:27:7b:66:1c:15:7a:e9:13:
99:85:9b:13:22:5f:43:bc:ea:26:f9:56:eb:2b:18:
f7:1b:86:68:a5:a3:50:f4:8f:14:af:a7:9d:c6:ff:
19:f6:82:95:49:86:dd:b2:fd:a1:f1:42:e5:89:f2:
30:b1:f4:67:e0:fa:3b:39:db:1c:51:df:2e:ca:72:
d8:fa:c5:d1:24:d5:6a:92:38:50:98:f8:c2:08:42:
f6:43:65:32:4a:b8:dd:c8:44:96:12:ee:0c:eb:1b:
e6:eb:57:43:9c:85:11:66:1d:45:f8:0b:00:79:52:
2b:28:06:1e:7b:8c:61:d6:d0:af:6b:22:8e:3e:8d:
bd:e2:f9:01:12:75:34:97:f7:b2:f3:ca:62:60:1f:
24:10:de:04:e7:22:3e:c0:b1:48:16:24:30:f8:7a:
42:a7:03:87:6b:b2:c3:2c:55:77:a7:6f:3b:92:7d:
e3:30:ee:ad:da:7a:f2:12:53:db:ff:0e:b4:14:29:
ef:1d:db:2b:8d:3a:41:23:71:22:83:3a:87:2a:c2:
fc:4d:04:97:dd:78:0e:cb:d1:b1:30:5a:f2:f4:c1:
96:b5:cb:60:1f:6b:c1:47:a0:c1:00:36:9b:1d:93:
44:bb:f9:5a:03:b6:b6:fc:14:d5:80:fb:dd:17:55:
3b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:A3:B9:8F:50:71:30:91:BB:D9:CE:6D:B2:8B:C1:52:7A:F6:F5:A9
X509v3 Authority Key Identifier:
keyid:37:97:E0:39:F0:25:A2:5A:A6:E9:92:39:1D:92:42:60:69:9B:A6:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5fgOfAlolqm6ZI5HZJCYGmbpns.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0abb8a-9798-4bf8-bae1-c1c05cdb7841/1/N5fgOfAlolqm6ZI5HZJCYGmbpns.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:b2:6d:7e:f8:84:dc:75:01:a0:3a:35:c6:9e:86:ea:83:d6:
3a:f2:c0:01:b8:34:79:5d:b9:20:63:0c:e6:22:8a:89:17:5d:
56:0c:49:d7:99:de:11:ca:2f:6a:57:f4:50:ef:75:2e:f4:24:
e8:9e:07:1b:04:a7:da:6b:76:79:dd:47:3d:90:df:a1:49:39:
d7:7c:b5:af:60:f3:6b:85:1d:0f:21:05:2e:11:22:7c:5e:c4:
94:93:a5:4f:26:94:e1:5a:20:43:3d:9c:1b:4e:06:f5:00:b2:
30:1b:af:76:a6:41:36:56:0a:5d:5a:fd:bf:e3:6c:7a:f4:7d:
03:e3:31:72:61:5e:9d:94:33:67:0d:5d:2c:b5:c9:47:95:b7:
a4:51:3b:d3:f5:a0:8e:be:47:d8:03:15:28:49:2a:04:72:27:
7e:5b:50:b3:62:94:f5:9c:7a:53:8d:7c:ef:c3:74:69:bc:00:
0c:25:26:9f:8d:a8:e8:ac:45:5d:37:e1:45:81:61:29:10:bc:
7a:fd:81:79:3e:18:a6:ff:b5:c6:bf:df:52:4a:31:b2:62:d8:
8f:9d:2e:80:59:19:71:3e:f6:a3:8b:f7:9f:1f:30:1b:26:69:
cf:96:97:53:5b:7e:59:03:eb:ee:b2:e2:d0:ba:e0:1e:07:38:
52:f4:b9:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:49 2026 by rpki-client