
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
File: N5SayE0LhpEPT9PPWWKSfYNFCus.mft (raw, json)
Hash identifier: j+Pj3CdjQIAgJ4V5EQR/cxa6JXDoJV7lCBv2pqVCY1Y=
Subject key identifier: 98:53:03:6F:DC:B7:3E:69:99:22:4A:0F:47:26:D6:79:58:CB:70:11
Authority key identifier: 37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
Certificate issuer: /CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Certificate serial: 019CAD5974007B7F510E135741BCA4CD2E98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
Manifest number: 1855
Signing time: Mon 02 Mar 2026 07:00:46 +0000
Manifest this update: Mon 02 Mar 2026 07:00:46 +0000
Manifest next update: Tue 03 Mar 2026 07:00:46 +0000
Files and hashes: 1: Bn04BFcMPFN1TqHi3csM-ALPIfs.roa (hash: +INhzeZUw2CmtEj9Af/bdJ+8Ap6m7pDf8RJiS9DpoYM=)
2: DQfM8H6WtevT9OTpqjzrSvRshz4.roa (hash: XQFiObFKRxqaZwBbqwYCnX/4N71hlkX9gE2Ecl5B+eM=)
3: Ifvi8Rkz_RCT_kQAOoUbVtgRD7U.roa (hash: GmJT3KMSt6Tc17lIuj5c/Jso9piZJloJhb9qCB+XTkU=)
4: N5SayE0LhpEPT9PPWWKSfYNFCus.crl (hash: OBvvj9Z/IIPaPgDhLcBkUulpR4kkfAErHvEFPz6F3XI=)
5: PUKkt35cHiKGiJvSjqXEn6uVP7Y.roa (hash: Bmwa3jnfP0hJvyVvtY0byaw0ncITKSVJhGUCxBAyHJ0=)
6: eRkG__v-agv3NMIcUwrG_j0F1S4.roa (hash: qxtO1OQQFM2+lJPuzN9yMsque6yNP09ybveH8spKwIw=)
7: g6ci3WfJTG-Y86iSe60tqhYMX8g.roa (hash: YfCrk+xs8TI3rk14RXIEUL8LFbz6foR+U1kA+FdbRuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:59:74:00:7b:7f:51:0e:13:57:41:bc:a4:cd:2e:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37949ac84d0b86910f4fd3cf5962927d83450aeb
Validity
Not Before: Mar 2 07:00:46 2026 GMT
Not After : Mar 3 07:00:46 2026 GMT
Subject: CN=9853036fdcb73e6999224a0f4726d67958cb7011
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:12:69:8b:f6:ad:93:8d:4f:05:e0:88:71:66:
ee:0e:00:2b:5d:e9:a3:fa:26:fd:f8:63:e2:de:b0:
80:6b:4b:76:8e:af:31:11:6a:e9:42:a4:e1:e3:c5:
06:18:d0:41:17:e9:c5:a7:b7:b1:be:3c:c5:59:31:
66:d1:51:a2:b7:fd:b9:d9:c2:0a:3d:54:30:dd:21:
86:48:9b:91:1c:ad:00:60:79:48:1f:d9:15:2f:29:
65:43:8e:8b:a0:2e:43:48:48:c3:cd:57:19:80:c9:
dd:ed:25:4e:df:99:a5:d6:4b:36:5d:7f:1a:15:ab:
49:91:59:de:ce:b2:5e:77:38:02:2d:ab:66:a4:6b:
0f:0e:07:09:09:4f:86:c6:a2:f5:97:8b:7d:94:56:
00:ff:21:72:c9:45:f8:0f:2c:e9:f3:4b:3f:38:18:
e4:76:77:77:29:f8:ac:ac:b4:9d:d9:14:45:f7:64:
32:93:dd:e0:da:f7:b9:47:f3:70:5c:39:f8:f2:eb:
16:b7:be:26:53:51:53:87:26:e1:9f:48:34:77:66:
cc:8c:55:93:c0:71:22:b7:8f:86:39:7b:4e:59:0d:
da:80:32:d3:37:f4:16:5b:bf:18:3f:5c:6a:6f:3e:
a8:0c:73:2c:1a:f1:02:12:f3:00:8c:ca:5d:d0:e2:
e5:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:53:03:6F:DC:B7:3E:69:99:22:4A:0F:47:26:D6:79:58:CB:70:11
X509v3 Authority Key Identifier:
keyid:37:94:9A:C8:4D:0B:86:91:0F:4F:D3:CF:59:62:92:7D:83:45:0A:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5SayE0LhpEPT9PPWWKSfYNFCus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/c28ea4-059c-49dd-9278-a4db396c8987/1/N5SayE0LhpEPT9PPWWKSfYNFCus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d6:7a:61:f0:e6:9a:ad:30:40:e2:84:d1:fa:02:30:ee:2e:
35:90:09:c3:a7:be:9c:28:94:3a:12:c3:91:fa:94:71:03:dd:
4e:76:74:7a:d2:ba:74:74:f3:0e:ae:6a:64:07:85:74:e2:d2:
37:ef:d4:4a:34:5b:40:0e:34:7d:08:9b:34:d9:15:b1:da:13:
bc:ec:4b:3d:60:aa:b6:4d:c6:94:3c:bd:ed:24:fb:02:15:b1:
7b:34:e5:e4:e3:a1:94:07:bc:ed:e8:13:b3:e8:b5:25:50:2b:
5f:30:58:b3:c8:96:93:30:92:2f:d9:ef:02:0d:3f:72:fa:ee:
22:27:5b:55:d0:84:b3:6e:f9:a0:37:0f:c6:7d:0d:d1:48:b8:
c3:dd:c3:18:22:b5:0b:83:3c:29:f5:2a:dd:43:97:ae:e4:d3:
35:9f:c2:a6:4f:7a:87:1d:80:6c:18:56:47:b4:ee:bb:d2:6e:
f5:5b:19:f2:d6:33:4f:f9:53:aa:fe:32:b1:87:8e:a1:7e:1d:
f8:be:4d:ae:7c:cb:3c:ac:55:65:23:27:a2:23:05:af:85:de:
53:41:82:16:b9:1b:55:1a:1d:d4:b6:79:97:04:09:5c:17:87:
0f:be:fa:13:d2:e5:26:7d:84:f3:c6:9f:42:02:38:6a:f1:48:
05:1d:af:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytWXQAe39RDhNXQbykzS6YMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OTQ5YWM4NGQwYjg2OTEwZjRmZDNjZjU5NjI5MjdkODM0
NTBhZWIwHhcNMjYwMzAyMDcwMDQ2WhcNMjYwMzAzMDcwMDQ2WjAzMTEwLwYDVQQD
Eyg5ODUzMDM2ZmRjYjczZTY5OTkyMjRhMGY0NzI2ZDY3OTU4Y2I3MDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyhJpi/atk41PBeCIcWbuDgArXemj
+ib9+GPi3rCAa0t2jq8xEWrpQqTh48UGGNBBF+nFp7exvjzFWTFm0VGit/252cIK
PVQw3SGGSJuRHK0AYHlIH9kVLyllQ46LoC5DSEjDzVcZgMnd7SVO35ml1ks2XX8a
FatJkVnezrJedzgCLatmpGsPDgcJCU+GxqL1l4t9lFYA/yFyyUX4Dyzp80s/OBjk
dnd3KfisrLSd2RRF92Qyk93g2ve5R/NwXDn48usWt74mU1FThybhn0g0d2bMjFWT
wHEit4+GOXtOWQ3agDLTN/QWW78YP1xqbz6oDHMsGvECEvMAjMpd0OLlYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhTA2/ctz5pmSJKD0cm1nlYy3ARMB8GA1UdIwQY
MBaAFDeUmshNC4aRD0/Tz1likn2DRQrrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgt
YTRkYjM5NmM4OTg3LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9jMjhlYTQtMDU5Yy00OWRkLTkyNzgtYTRkYjM5NmM4OTg3
LzEvTjVTYXlFMExocEVQVDlQUFdXS1NmWU5GQ3VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtZ6YfDm
mq0wQOKE0foCMO4uNZAJw6e+nCiUOhLDkfqUcQPdTnZ0etK6dHTzDq5qZAeFdOLS
N+/USjRbQA40fQibNNkVsdoTvOxLPWCqtk3GlDy97ST7AhWxezTl5OOhlAe87egT
s+i1JVArXzBYs8iWkzCSL9nvAg0/cvruIidbVdCEs275oDcPxn0N0Ui4w93DGCK1
C4M8KfUq3UOXruTTNZ/Cpk96hx2AbBhWR7Tuu9Ju9VsZ8tYzT/lTqv4ysYeOoX4d
+L5NrnzLPKxVZSMnoiMFr4XeU0GCFrkbVRod1LZ5lwQJXBeHD776E9LlJn2E88af
QgI4avFIBR2v9w==
-----END CERTIFICATE-----
Generated at Mon Mar 2 15:49:29 2026 by rpki-client