Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
File: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft (raw, json)
Hash identifier: kOwrYjeuQFSGkibS0rFPMzCTOH8u1ziNIDPf5V4gFE0=
Subject key identifier: 6B:60:6A:7B:CD:AA:5E:9C:0E:12:BF:70:D5:A2:AD:71:6E:16:F9:73
Authority key identifier: 37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
Certificate issuer: /CN=37a352e17af87ee2e5dc173d15543da63be55473
Certificate serial: 019CAB342AFE2916ED37A732E09048E92B21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
Manifest number: 0EFD
Signing time: Sun 01 Mar 2026 21:00:48 +0000
Manifest this update: Sun 01 Mar 2026 21:00:48 +0000
Manifest next update: Mon 02 Mar 2026 21:00:48 +0000
Files and hashes: 1: Ltqr6spk6stgdejzEgmXDGQPXxU.roa (hash: /l66BwyFJAusu0nV1bBo2WvqQQiV2viPooH60Q/+I2o=)
2: N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl (hash: 2k06g3aI+FDEJYFSg6fISsRwjG1hjeM240qGXNQDx08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 21:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:2a:fe:29:16:ed:37:a7:32:e0:90:48:e9:2b:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a352e17af87ee2e5dc173d15543da63be55473
Validity
Not Before: Mar 1 21:00:48 2026 GMT
Not After : Mar 2 21:00:48 2026 GMT
Subject: CN=6b606a7bcdaa5e9c0e12bf70d5a2ad716e16f973
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f9:de:63:50:ba:35:eb:86:41:31:fb:7a:50:
15:e6:a6:b3:63:c5:d1:ae:db:e4:aa:af:ac:d8:b0:
dd:0f:6c:39:9f:46:89:3c:3d:b6:ec:96:5a:b3:75:
0d:e6:05:0e:d4:12:8d:51:45:cd:e5:6c:19:34:df:
f7:0a:a3:cb:8b:51:30:c7:89:11:a6:54:c1:08:54:
7b:7d:ac:fe:66:9b:d3:af:f6:10:2b:3c:9e:5c:af:
fa:53:f2:d5:23:18:c9:57:88:38:17:14:1a:38:25:
ce:9f:4f:cd:62:ea:df:11:ef:8c:78:93:32:ed:20:
fd:9b:3a:f2:e6:95:ac:23:eb:23:e5:9b:2c:5e:50:
7e:9c:39:08:7c:45:a9:95:fd:32:3c:af:68:d3:26:
1e:e3:00:1b:f4:0a:99:dc:d6:42:89:22:70:79:67:
b0:05:df:06:00:a1:64:90:5d:a8:45:79:01:0d:22:
5f:e6:7a:b1:3c:b1:67:bf:57:de:db:fd:06:8d:5f:
f8:03:43:c7:6c:b5:80:df:5c:d7:42:28:1b:17:50:
7b:d1:2c:96:f8:02:99:bf:6a:47:71:98:67:82:26:
fd:ba:c8:9e:da:2e:3e:58:f3:5f:0c:52:cc:a2:61:
0e:b9:38:58:1a:ab:a4:08:72:f8:8b:59:f9:fd:53:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:60:6A:7B:CD:AA:5E:9C:0E:12:BF:70:D5:A2:AD:71:6E:16:F9:73
X509v3 Authority Key Identifier:
keyid:37:A3:52:E1:7A:F8:7E:E2:E5:DC:17:3D:15:54:3D:A6:3B:E5:54:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/a977ea-4a93-4618-b7ff-35b21bffad4d/1/N6NS4Xr4fuLl3Bc9FVQ9pjvlVHM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:85:c2:f8:32:2e:e9:29:a3:3d:b1:3a:7d:e4:21:be:0e:ae:
67:f7:3d:c6:b0:69:83:86:33:9d:77:3f:79:99:a7:e3:b8:06:
24:72:ec:7c:04:f0:05:21:30:34:54:11:55:84:72:02:a7:4e:
80:33:b8:70:29:9a:bb:46:97:cc:7a:75:9b:34:51:a5:37:96:
c7:60:3e:4d:67:0f:6e:17:8c:f8:bb:b6:ad:bb:91:5e:7f:e2:
d1:14:f7:70:03:2d:8e:5b:77:68:8b:b1:6c:43:1a:45:b0:7f:
2e:5a:af:e5:c5:b1:68:7e:e1:f7:00:b1:bf:e9:48:d8:ae:44:
30:c5:6c:20:4d:2a:0e:13:78:69:16:53:d6:45:1d:18:c4:d2:
9d:8d:c1:45:6a:12:21:09:bd:28:b5:23:7f:cd:86:7e:97:59:
87:ff:5f:ff:db:61:57:9d:28:77:af:c3:ed:80:8a:7c:c1:5b:
a2:41:cb:21:36:d1:79:85:e4:62:91:ce:bf:f2:49:5c:35:8a:
f2:0f:d9:a4:e9:43:2c:f4:a7:0b:cd:2b:af:22:86:89:e9:a3:
fd:46:0a:31:09:ba:5c:eb:2f:74:e9:ec:b2:33:2b:6b:f9:16:
c5:cf:11:e0:b6:1f:e2:6a:fc:69:f1:61:ca:2c:09:ff:8e:a8:
83:18:5d:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:27:52 2026 by rpki-client