Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier: KExfeD9RJIHZgDafD8uCUSYHywfHrYi5uUbNgv0C2/M=
Subject key identifier: DA:B6:2F:C1:27:0C:A6:0F:2F:8F:C2:0E:02:D5:FB:83:7A:F9:B4:89
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial: 019CAAC643CFA9635FD6374104A416288B33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number: 17D7
Signing time: Sun 01 Mar 2026 19:00:46 +0000
Manifest this update: Sun 01 Mar 2026 19:00:46 +0000
Manifest next update: Mon 02 Mar 2026 19:00:46 +0000
Files and hashes: 1: Kjv5ZqAKlQ-u26S6yymzYFVvtRA.roa (hash: sOevRBDCcbgFby2Me1gEDOPKrFjBhZ/Oz4Fc5/D3wtA=)
2: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: jkCvFJ2YAVCRF1q9rG52ymVnBlI/Vz8PwumW/LRBP4E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:c6:43:cf:a9:63:5f:d6:37:41:04:a4:16:28:8b:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
Validity
Not Before: Mar 1 19:00:46 2026 GMT
Not After : Mar 2 19:00:46 2026 GMT
Subject: CN=dab62fc1270ca60f2f8fc20e02d5fb837af9b489
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:95:3c:51:b1:cd:c5:dd:d9:9b:7d:d0:1b:ad:
79:f2:89:17:c9:b2:d2:3d:97:83:61:f8:82:3e:c2:
36:9e:db:0d:9e:e3:d1:25:1e:07:d5:d4:49:95:ff:
4b:67:b5:1e:54:05:38:0c:22:f5:f0:cf:01:f0:8e:
db:f4:81:cf:93:d0:8a:5f:96:b8:4b:0a:78:68:08:
b1:23:87:ee:1c:7c:c3:90:57:cb:b1:89:42:ab:fa:
c0:71:24:af:d9:42:01:05:20:c3:3c:2c:3a:8d:c9:
b1:de:f8:80:b2:3e:bd:eb:fe:32:cd:7c:18:30:8b:
73:d2:3a:a8:97:ec:31:40:42:34:03:33:f6:0f:ee:
b9:04:c3:74:b7:c7:f1:79:a4:2a:2d:29:c1:55:e3:
f6:52:29:d9:51:98:d8:22:54:51:1b:42:5f:3e:9a:
81:08:f4:e3:1c:9d:75:06:dd:98:68:08:11:ce:23:
aa:13:c2:22:5f:d6:59:97:93:6a:c3:d3:71:38:6d:
88:bf:32:00:ed:a4:0a:27:2a:01:e3:e7:d8:1e:4c:
2f:bb:20:4d:75:5d:70:8d:70:c9:51:cb:b4:ad:96:
58:e9:3d:01:9f:c6:ac:db:75:40:27:83:64:70:05:
6d:10:c3:0d:b3:0b:16:8d:1c:f2:13:a6:63:43:fb:
01:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B6:2F:C1:27:0C:A6:0F:2F:8F:C2:0E:02:D5:FB:83:7A:F9:B4:89
X509v3 Authority Key Identifier:
keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ab:25:8a:bc:4e:f1:46:6f:9f:d9:07:9d:04:8f:c5:25:b8:
eb:d9:38:d7:4f:46:ba:6a:85:dc:b3:ac:ba:34:ee:e4:7e:b8:
39:6b:4c:b1:e5:2e:a4:6a:d2:c6:d0:f6:d9:72:1e:af:fe:bd:
9b:8a:26:64:1a:6b:2d:94:b0:3c:c1:72:22:ee:58:a6:de:52:
da:00:4c:b2:0e:89:2a:97:7a:61:9f:a7:07:f8:6a:38:5b:44:
73:90:5a:4d:8d:63:cb:e5:ac:33:1f:dd:5d:52:cc:21:12:37:
97:59:8d:34:a2:88:d5:b7:31:a2:54:aa:d8:1c:f8:12:40:f1:
e6:03:8e:4d:f7:71:5d:73:73:2e:00:94:c1:e3:24:47:9e:2d:
30:bd:40:4b:44:5a:25:0a:cc:52:a9:b0:f7:ad:3e:e1:ec:09:
83:02:33:2c:39:a6:c9:e0:8a:94:f4:b5:51:8b:35:ee:95:59:
98:39:b0:8f:f4:d3:ea:6c:3d:43:fb:27:e7:78:19:6f:b9:89:
ba:95:ff:b6:3c:a9:12:59:0c:56:db:27:5a:4d:9a:c8:c5:d2:
6e:ec:6d:a7:f7:51:82:94:6a:77:4f:01:be:d4:66:eb:97:23:
a4:50:a6:b5:0e:8c:67:2a:06:67:5f:43:f8:ee:6b:cf:46:b1:
aa:d4:a4:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 03:58:32 2026 by rpki-client