Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
File: N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft (raw, json)
Hash identifier: tCkzqgg9GTfIc8RX3VKBAzB2wkKqLQemDoSrsy80foc=
Subject key identifier: C2:D0:53:BA:13:EC:8F:D4:12:46:F8:3A:8E:8F:8A:12:08:96:D6:1E
Authority key identifier: 37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
Certificate issuer: /CN=37778681361b1fff87ce398402efa63869e5bfd1
Certificate serial: 019CAAC63C141EE85617CCC9C7A822D08F7B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
Manifest number: 0DF3
Signing time: Sun 01 Mar 2026 19:00:44 +0000
Manifest this update: Sun 01 Mar 2026 19:00:44 +0000
Manifest next update: Mon 02 Mar 2026 19:00:44 +0000
Files and hashes: 1: N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl (hash: TthAEBKbKYahmmrn3EOy+smbtAFgh3o3gC7qerBeWYQ=)
2: U1i2p1mwMwcMPAenuBEHdijiIZE.roa (hash: AHlcD8BHVzzh2oESK4HUkXMAua5AnRRE5iMN+WNNbdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:3c:14:1e:e8:56:17:cc:c9:c7:a8:22:d0:8f:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37778681361b1fff87ce398402efa63869e5bfd1
Validity
Not Before: Mar 1 19:00:44 2026 GMT
Not After : Mar 2 19:00:44 2026 GMT
Subject: CN=c2d053ba13ec8fd41246f83a8e8f8a120896d61e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:ef:92:bd:6c:83:ee:8b:ea:3a:48:f9:ca:25:
fd:c7:ea:c1:69:92:5a:31:fe:29:25:b9:48:0d:23:
d3:7c:8b:e9:50:4f:49:28:06:cd:c9:1c:4d:61:8d:
44:19:65:95:e3:15:87:33:45:83:01:55:fa:c0:a2:
71:2c:12:43:89:de:dd:2b:59:47:22:91:2b:a9:c1:
49:11:d9:8b:5c:38:2d:18:0c:f1:99:76:c8:57:1a:
74:8b:d4:c6:fe:94:7b:5b:c3:06:b6:c6:b4:a6:4e:
db:80:22:23:66:51:58:fa:8e:98:08:f2:78:c6:ec:
20:9c:01:bd:98:22:ca:5d:d9:75:2f:f0:53:5d:eb:
5f:99:21:16:0a:8a:ec:68:6f:2c:34:05:3f:7d:62:
b7:5b:b4:97:cd:94:5d:09:e9:19:c2:30:00:da:fb:
73:79:77:98:be:d2:fa:a0:69:65:49:04:14:e6:0f:
e0:fc:d2:02:17:44:18:8a:90:ab:51:4c:35:02:6b:
b5:72:98:5c:e3:cf:17:4f:12:be:d9:52:42:60:4f:
61:35:9f:50:dc:a3:f2:ad:ea:85:73:b8:51:80:95:
03:bb:cd:3d:55:ce:88:ac:27:15:aa:e0:28:df:13:
6b:d3:a6:72:a0:07:ff:38:09:34:8e:17:e5:12:69:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:D0:53:BA:13:EC:8F:D4:12:46:F8:3A:8E:8F:8A:12:08:96:D6:1E
X509v3 Authority Key Identifier:
keyid:37:77:86:81:36:1B:1F:FF:87:CE:39:84:02:EF:A6:38:69:E5:BF:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N3eGgTYbH_-HzjmEAu-mOGnlv9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/660cca-c1aa-4558-ad1e-e53f904a1f58/1/N3eGgTYbH_-HzjmEAu-mOGnlv9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:2c:27:ce:43:4c:78:54:98:36:f8:63:5f:22:50:e2:7c:0a:
c2:bd:9c:96:89:39:4d:2f:90:dc:c3:e4:0d:af:1e:87:5f:9b:
16:50:46:0e:96:41:41:95:3d:0d:86:a3:26:9d:91:f7:62:bf:
69:82:0e:c5:3f:dd:f3:d2:70:9e:58:0d:45:29:43:7e:5e:69:
98:f2:68:6a:96:39:7f:63:24:8b:18:55:fd:b5:cd:2e:fc:9d:
0d:f7:e6:1a:cb:04:f7:6e:0e:9d:78:11:7d:7b:4f:f4:98:52:
a4:71:cc:43:f5:b1:51:50:59:4d:f1:63:5d:6e:8a:96:d2:e6:
69:26:a7:0a:ab:29:2b:6a:9e:1f:6b:6c:64:8c:94:51:4e:9a:
90:f7:28:59:98:f5:e5:8a:26:13:ad:d9:e4:df:05:d3:c7:78:
0e:9e:be:b9:19:2f:3d:58:dc:da:e5:16:0d:0b:2e:29:b5:cf:
a4:04:4e:9e:92:f3:86:1f:a3:53:c3:cd:36:e4:3d:11:5b:68:
01:49:4c:a5:e9:25:c6:21:d9:19:1e:80:d1:7d:af:6f:5f:24:
ca:56:bb:31:7b:9a:e2:d2:26:e4:f8:04:1d:99:fd:39:ea:60:
1b:df:fe:4e:a2:2e:1b:66:90:f9:65:99:e1:0d:c3:b2:53:d3:
ad:5a:29:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:43:38 2026 by rpki-client