Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
File: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft (raw, json)
Hash identifier: W7Xp3vyZQRU34uEIubszjmaWsx2Wle5kEPvIfTLHZnw=
Subject key identifier: CF:C1:23:11:9E:6D:A1:0A:35:F1:E0:0B:B0:C3:E9:76:7B:50:52:D5
Authority key identifier: 37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
Certificate issuer: /CN=375fd9954e7d5d359f93f521821d8516953c9d36
Certificate serial: 019CAB6BEB8E6932EA3572CE33715B4AF28E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
Manifest number: 17D5
Signing time: Sun 01 Mar 2026 22:01:42 +0000
Manifest this update: Sun 01 Mar 2026 22:01:42 +0000
Manifest next update: Mon 02 Mar 2026 22:01:42 +0000
Files and hashes: 1: N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl (hash: kOTvzDvLWIq/TmWrxwQp/Cw0s2u0JKgrvmkqp6B35Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:6b:eb:8e:69:32:ea:35:72:ce:33:71:5b:4a:f2:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375fd9954e7d5d359f93f521821d8516953c9d36
Validity
Not Before: Mar 1 22:01:42 2026 GMT
Not After : Mar 2 22:01:42 2026 GMT
Subject: CN=cfc123119e6da10a35f1e00bb0c3e9767b5052d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:b4:82:d9:46:d7:28:7b:f4:7f:66:24:3b:07:
9b:76:a6:34:c1:43:b3:b3:71:7d:3c:11:99:78:42:
c7:41:c6:7b:6b:27:c1:89:45:d7:73:d2:19:df:42:
b0:25:63:38:54:74:9b:90:82:3e:b0:8f:69:6f:fd:
60:4e:64:1d:6e:ff:17:41:9b:fc:ff:6a:78:5a:9b:
fe:b6:95:e6:19:d9:fd:f1:4e:d2:e8:39:e8:4b:39:
a9:e6:bc:23:3c:0e:7d:0a:6f:cb:8c:2a:26:27:06:
c5:0e:48:71:50:50:14:bf:c3:42:a9:3e:56:d5:5b:
e3:34:15:ff:79:f9:29:0f:10:1e:63:76:d5:ad:91:
6b:7d:e1:67:d1:cf:4f:16:3d:27:c0:40:5d:8e:8c:
37:c3:e0:86:ee:25:18:3d:81:18:8d:cb:c0:41:d9:
95:a1:a4:d6:c8:bb:c4:77:be:ae:4d:8f:aa:58:c4:
f0:1f:92:6f:e1:e4:af:e3:ff:3c:25:24:32:62:49:
35:33:ee:24:2b:d8:eb:69:7c:ba:6e:4d:88:8a:d8:
ee:a8:0f:e4:e0:66:4f:31:4e:d3:99:48:8e:25:68:
af:2f:0b:3c:4e:37:22:35:e5:07:86:bb:42:52:67:
1f:cf:42:06:b3:31:aa:fc:2c:dc:b6:9c:8c:e4:59:
0c:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:C1:23:11:9E:6D:A1:0A:35:F1:E0:0B:B0:C3:E9:76:7B:50:52:D5
X509v3 Authority Key Identifier:
keyid:37:5F:D9:95:4E:7D:5D:35:9F:93:F5:21:82:1D:85:16:95:3C:9D:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/0130a9-a9c3-43a4-9d87-851d577d16ab/1/N1_ZlU59XTWfk_Uhgh2FFpU8nTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:08:f7:17:15:06:5e:5f:0d:71:e7:ba:43:c2:dc:7c:be:b8:
73:a4:e9:78:ba:cb:04:3a:2a:88:13:4e:a0:1b:01:7f:d3:bf:
1a:e0:aa:25:f6:31:bb:3a:d7:e2:28:48:48:ee:c6:c9:27:09:
dc:be:9f:9d:4b:9b:8d:a3:fa:75:e1:e9:96:66:34:df:ef:3f:
bd:5c:06:3a:c1:0c:bb:58:40:92:ec:ef:39:0e:f7:99:63:8f:
8a:90:69:b0:7e:d3:e8:6f:42:87:68:6a:2b:a9:55:38:42:96:
8d:a0:a4:1b:01:81:84:f7:19:df:bb:24:4f:33:eb:b2:42:45:
80:e0:a5:ee:e9:f6:e1:69:d3:7c:9c:36:53:dd:41:2b:5b:c2:
e2:38:d0:e3:df:5f:a0:bf:61:a0:c7:4d:62:f7:3e:ff:24:56:
d8:2f:fd:3c:c7:2f:93:8b:e7:fb:a1:20:4f:36:ad:7a:0d:31:
8d:e7:11:35:23:31:f0:bd:31:80:99:57:81:d2:dc:b3:5a:05:
31:82:f0:5e:04:ec:8b:9f:ec:1a:ef:3a:9f:22:3b:07:42:2e:
b7:d6:b7:18:cf:19:7f:9f:3a:f5:a4:d5:a6:77:fb:8f:94:f4:
47:64:dd:54:c2:74:43:3b:bb:b6:d1:49:da:c5:9a:e1:2b:95:
40:0b:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:06:50 2026 by rpki-client