Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
File: N0CDrw__F2igfGVfH-OGAJxSLM8.mft (raw, json)
Hash identifier: tqzP/uW+K+P5Dg5hQXoE06bGhKaii03rxwdRbhk6Rr4=
Subject key identifier: 59:1C:4C:C8:F4:79:9B:E6:56:EE:44:61:BF:48:58:E6:D0:47:C7:68
Authority key identifier: 37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
Certificate issuer: /CN=374083af0fff1768a07c655f1fe386009c522ccf
Certificate serial: 019D9999AD03470398FB7632CF9638043741
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
Manifest number: 14A5
Signing time: Fri 17 Apr 2026 04:01:18 +0000
Manifest this update: Fri 17 Apr 2026 04:01:18 +0000
Manifest next update: Sat 18 Apr 2026 04:01:18 +0000
Files and hashes: 1: N0CDrw__F2igfGVfH-OGAJxSLM8.crl (hash: iC08oTo5neCT2CNV3YZYZp3Rsqq+sjJ+qjD0RxRLT8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:ad:03:47:03:98:fb:76:32:cf:96:38:04:37:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374083af0fff1768a07c655f1fe386009c522ccf
Validity
Not Before: Apr 17 04:01:18 2026 GMT
Not After : Apr 18 04:01:18 2026 GMT
Subject: CN=591c4cc8f4799be656ee4461bf4858e6d047c768
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:17:a3:76:25:c1:6e:69:5b:77:0a:f1:d1:9e:
be:2d:fe:59:ab:03:2b:1c:25:3f:25:39:35:9d:76:
5f:11:fe:56:8c:4f:c7:9b:a5:d2:8b:16:7f:53:1c:
f2:39:1a:d4:1f:9b:b2:2c:30:32:22:cc:f3:14:c4:
9b:86:f5:53:d3:89:3d:26:ad:2b:d0:2f:98:ab:dc:
50:67:c9:5e:a9:c3:75:2f:cf:80:35:d0:57:49:ba:
d4:8e:3f:75:89:26:33:f4:a0:56:ff:fb:0d:c8:dc:
c9:f3:14:8b:18:55:da:20:9b:80:d0:70:1f:07:0f:
ed:bd:06:38:5a:c4:17:6c:f7:d2:60:08:63:0e:df:
7f:aa:b2:cb:77:8f:97:08:b9:f5:47:6f:9d:23:01:
cc:47:0f:72:48:a1:c6:34:19:33:b9:2a:ac:76:33:
a5:b4:34:b7:da:e1:6e:49:0c:46:43:22:d9:ea:d7:
d3:a2:97:71:10:23:36:c7:62:ee:ca:10:98:6c:da:
1e:41:93:c6:64:0b:de:b7:f8:50:de:f2:b0:73:36:
65:3a:6e:5e:45:42:75:8b:5a:d2:ed:fe:92:ae:5b:
d7:fe:3f:5b:d5:ab:49:6d:16:de:55:dd:16:81:02:
4f:c3:80:6a:6f:0f:22:54:f5:f1:c6:1e:90:57:7f:
40:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:4C:C8:F4:79:9B:E6:56:EE:44:61:BF:48:58:E6:D0:47:C7:68
X509v3 Authority Key Identifier:
keyid:37:40:83:AF:0F:FF:17:68:A0:7C:65:5F:1F:E3:86:00:9C:52:2C:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0CDrw__F2igfGVfH-OGAJxSLM8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/83aa47-c7fb-4e05-9fac-e4ca6b73ac76/1/N0CDrw__F2igfGVfH-OGAJxSLM8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:81:2d:f1:92:e3:2d:05:0b:c0:a0:b9:f3:40:d8:78:d0:99:
26:be:84:31:78:46:ff:74:43:ea:88:c6:e1:ad:9b:72:95:36:
47:2e:60:ad:40:9f:c9:37:7b:8c:f3:a9:5d:45:b1:67:56:eb:
b1:23:f5:28:72:17:08:5a:5f:2e:a7:da:8f:5e:57:a4:2e:89:
e8:d4:f7:57:9c:5b:a6:45:07:fd:4c:b0:2e:12:9f:84:3b:d2:
f8:90:32:b0:03:59:db:df:8e:88:25:b7:c8:93:c6:be:9a:a5:
55:65:87:31:1f:c5:93:6a:b0:30:45:2f:57:47:0d:49:75:00:
b6:a7:67:7c:1c:13:16:0b:0e:72:f1:f4:3c:85:85:b2:d6:16:
f7:49:a7:48:3a:b2:65:62:ef:be:d8:de:b0:64:f9:d6:70:09:
bf:9f:27:a8:a2:26:af:b7:1d:a4:dd:76:27:91:0e:ff:1e:82:
c9:7b:43:6a:47:bc:5a:94:fe:02:29:e2:93:9b:2c:7d:98:cd:
23:52:3c:13:01:c6:55:2e:f6:39:85:e7:51:db:93:78:09:4c:
db:96:0d:c7:a4:c9:44:c2:5f:d3:30:a6:ec:6d:f4:2b:24:3c:
d5:ad:86:76:db:af:e5:d0:96:c5:ca:6c:af:b5:24:36:e7:2f:
59:bd:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:56:42 2026 by rpki-client