Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
File: N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft (raw, json)
Hash identifier: SCSt4uwfQSpxmt3CrLmafbUlBVEAVMV3N/waFsyzeOY=
Subject key identifier: 29:69:7D:3B:96:97:2F:73:7A:3A:38:94:EB:A6:16:E6:04:D3:3A:45
Authority key identifier: 37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
Certificate issuer: /CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Certificate serial: 019CAC46BC0639246010DD8E545476187152
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
Manifest number: 0DD1
Signing time: Mon 02 Mar 2026 02:00:42 +0000
Manifest this update: Mon 02 Mar 2026 02:00:42 +0000
Manifest next update: Tue 03 Mar 2026 02:00:42 +0000
Files and hashes: 1: N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl (hash: YsxZLfS1LJaZVEbc6vx510617VNLbSN7wINvgVJwuOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:46:bc:06:39:24:60:10:dd:8e:54:54:76:18:71:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3790f71faa43c9af5a0dcf603fd0b2a78c224a93
Validity
Not Before: Mar 2 02:00:42 2026 GMT
Not After : Mar 3 02:00:42 2026 GMT
Subject: CN=29697d3b96972f737a3a3894eba616e604d33a45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:b9:ae:e1:c6:3d:ff:12:e7:25:ce:7f:cf:
07:6f:c3:6b:0c:06:6f:1e:82:8d:00:e1:27:05:96:
23:67:64:34:fb:af:a9:cc:e2:ed:b6:78:6b:cc:23:
89:aa:db:12:7b:08:e6:ff:12:fc:dd:ba:1e:04:86:
bb:8a:3c:75:ad:f9:9f:e0:ac:ce:9a:64:1d:6e:81:
0b:1f:38:1e:29:cc:38:da:c9:b6:92:e8:bb:4c:9d:
2a:43:79:82:79:75:06:54:03:ea:f6:f5:b7:e9:0a:
79:bd:29:25:b8:ff:8f:c2:7c:91:94:69:da:79:1a:
e7:a9:72:d5:88:55:68:17:d8:5d:68:99:02:60:44:
6d:1d:36:44:10:19:84:cb:75:55:85:a7:75:21:8b:
db:7f:3a:1b:00:95:3e:9e:5b:5e:bf:53:38:15:5e:
88:6f:44:66:db:d5:cc:9b:ba:53:a4:00:ab:23:37:
78:0f:bb:b6:c9:64:88:50:ea:1b:40:4a:cd:d1:9b:
db:a4:b3:3d:59:24:a4:c6:34:a7:a3:ad:20:11:2f:
76:cd:57:92:7d:69:16:8d:44:b7:7b:cd:ba:be:a3:
40:5e:7f:ae:72:27:8e:72:35:20:3f:d5:b3:6d:06:
89:61:60:2f:98:9b:af:01:cd:f8:07:f7:21:31:46:
b4:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:69:7D:3B:96:97:2F:73:7A:3A:38:94:EB:A6:16:E6:04:D3:3A:45
X509v3 Authority Key Identifier:
keyid:37:90:F7:1F:AA:43:C9:AF:5A:0D:CF:60:3F:D0:B2:A7:8C:22:4A:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5D3H6pDya9aDc9gP9Cyp4wiSpM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9b1928-9929-4ee8-9f35-077b29730ce6/1/N5D3H6pDya9aDc9gP9Cyp4wiSpM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:58:62:13:f7:36:65:49:99:ae:4e:cf:cc:d6:2d:7c:b9:2f:
5c:56:d5:9c:c8:1a:5b:a5:ec:8d:8e:5a:f7:87:29:c5:7a:50:
67:46:90:33:fe:e4:87:a6:8b:2d:ae:49:70:be:c8:f0:a6:11:
49:53:26:4b:e2:94:77:88:de:58:77:38:8c:b7:02:08:bd:26:
d4:87:7b:5c:6c:d1:9a:c8:f5:5c:05:1a:63:0e:7e:e3:4f:36:
fd:3e:4b:d8:58:38:8d:a8:0e:cb:69:69:ec:ae:74:44:86:07:
f4:77:46:6d:cf:c5:6e:eb:f2:d4:17:ff:d8:9e:78:30:a8:c3:
c9:8c:24:a7:66:99:85:aa:68:02:fd:7a:f0:57:d9:c6:29:7d:
0b:3d:b9:25:b6:dd:ec:86:80:23:23:fe:9d:e7:92:eb:19:16:
67:12:48:2a:1a:84:9d:89:8c:91:e1:d0:22:3c:63:a4:a3:99:
ff:02:ab:d0:a1:7f:43:66:28:83:b0:77:67:f1:6e:25:45:46:
f0:8f:10:2e:e8:17:b0:6a:4c:26:f2:f5:d1:b0:98:ca:27:29:
0c:ff:de:56:99:52:48:ce:1d:33:19:60:73:ac:47:e2:e4:39:
97:0a:cf:85:5e:4c:84:ef:28:51:33:4d:8d:97:14:29:55:4a:
ca:e6:3c:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZysRrwGOSRgEN2OVFR2GHFSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTBmNzFmYWE0M2M5YWY1YTBkY2Y2MDNmZDBiMmE3OGMy
MjRhOTMwHhcNMjYwMzAyMDIwMDQyWhcNMjYwMzAzMDIwMDQyWjAzMTEwLwYDVQQD
EygyOTY5N2QzYjk2OTcyZjczN2EzYTM4OTRlYmE2MTZlNjA0ZDMzYTQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwu5ruHGPf8S5yXOf88Hb8NrDAZv
HoKNAOEnBZYjZ2Q0+6+pzOLttnhrzCOJqtsSewjm/xL83boeBIa7ijx1rfmf4KzO
mmQdboELHzgeKcw42sm2kui7TJ0qQ3mCeXUGVAPq9vW36Qp5vSkluP+PwnyRlGna
eRrnqXLViFVoF9hdaJkCYERtHTZEEBmEy3VVhad1IYvbfzobAJU+nltev1M4FV6I
b0Rm29XMm7pTpACrIzd4D7u2yWSIUOobQErN0ZvbpLM9WSSkxjSno60gES92zVeS
fWkWjUS3e826vqNAXn+ucieOcjUgP9WzbQaJYWAvmJuvAc34B/chMUa0RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClpfTuWly9zejo4lOumFuYE0zpFMB8GA1UdIwQY
MBaAFDeQ9x+qQ8mvWg3PYD/QsqeMIkqTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUt
MDc3YjI5NzMwY2U2LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Mi85YjE5MjgtOTkyOS00ZWU4LTlmMzUtMDc3YjI5NzMwY2U2
LzEvTjVEM0g2cER5YTlhRGM5Z1A5Q3lwNHdpU3BNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeFhiE/c2
ZUmZrk7PzNYtfLkvXFbVnMgaW6XsjY5a94cpxXpQZ0aQM/7kh6aLLa5JcL7I8KYR
SVMmS+KUd4jeWHc4jLcCCL0m1Id7XGzRmsj1XAUaYw5+4082/T5L2Fg4jagOy2lp
7K50RIYH9HdGbc/Fbuvy1Bf/2J54MKjDyYwkp2aZhapoAv168FfZxil9Cz25Jbbd
7IaAIyP+neeS6xkWZxJIKhqEnYmMkeHQIjxjpKOZ/wKr0KF/Q2Yog7B3Z/FuJUVG
8I8QLugXsGpMJvL10bCYyicpDP/eVplSSM4dMxlgc6xH4uQ5lwrPhV5MhO8oUTNN
jZcUKVVKyuY8Rg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:57 2026 by rpki-client