Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: NP9AAiVJznun25UrPBsLq69x4q6/VJzQXuvVn4NXPbk=
Subject key identifier: 39:EF:9B:1E:3B:55:7A:B8:B1:CD:D0:BE:38:A8:76:5B:4B:D1:D0:36
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019D9961E7F11EADA451D60CF444B9E888F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 12BB
Signing time: Fri 17 Apr 2026 03:00:23 +0000
Manifest this update: Fri 17 Apr 2026 03:00:23 +0000
Manifest next update: Sat 18 Apr 2026 03:00:23 +0000
Files and hashes: 1: LA-wi6A11ya7LBdprms18TeIogg.roa (hash: mGJUSbaGKL8VGDPcuUd8EHQTcLMU3S2Uwe+tVWxibH8=)
2: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: blJelM2wkkGk2LZi7rXdQr374UFDiN205nYxrUsyH3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:61:e7:f1:1e:ad:a4:51:d6:0c:f4:44:b9:e8:88:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Apr 17 03:00:23 2026 GMT
Not After : Apr 18 03:00:23 2026 GMT
Subject: CN=39ef9b1e3b557ab8b1cdd0be38a8765b4bd1d036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:2b:af:2c:96:a0:e6:79:70:c1:01:d8:4b:f8:
52:04:3d:7b:13:87:ac:0c:0d:21:92:ab:36:4e:b4:
4b:fd:fd:7f:dd:85:42:a4:d5:a3:b5:30:2e:3f:3c:
25:3f:a1:71:46:27:60:e6:c9:f9:73:bd:0e:1e:b0:
ce:92:4b:2e:5f:ff:41:20:1f:dc:6e:dd:b5:83:65:
84:e6:7c:2c:b1:e2:e5:5b:6e:13:4d:7e:1d:35:7b:
a4:be:1d:d1:11:8e:5f:6c:f2:b6:e8:20:53:d1:00:
f4:8e:21:7d:fe:3c:83:e5:e5:6d:c8:3d:d7:91:52:
3b:b6:9a:f4:e0:56:0f:0e:9f:7c:d9:83:55:7f:60:
93:92:83:7c:7c:78:f3:fe:e0:0e:6a:ae:65:ce:e3:
2a:90:5e:64:db:d6:89:7c:67:70:87:ba:a3:80:db:
37:e8:2e:c2:ce:bd:ee:58:21:e3:ea:3a:df:76:7e:
91:05:af:30:4f:a9:9f:bc:3c:7b:60:20:a4:0a:b4:
96:db:15:33:34:3d:47:99:b4:27:40:54:c9:74:ee:
a7:ef:76:6d:a4:9b:85:ea:98:22:87:2d:3e:e5:19:
6d:08:d2:e0:52:03:51:4e:89:00:48:e0:83:63:e3:
ce:c0:9d:31:4f:0f:67:0f:de:b2:49:b3:f7:5d:bf:
da:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:EF:9B:1E:3B:55:7A:B8:B1:CD:D0:BE:38:A8:76:5B:4B:D1:D0:36
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:92:2d:30:86:8e:bc:f3:a1:05:9a:13:36:96:25:1f:8a:42:
07:dc:0b:3c:81:a3:aa:2c:26:2f:ff:1a:ae:0c:15:a3:6f:49:
7d:6a:73:17:0c:b5:bd:13:b1:c3:6b:22:cc:d0:aa:52:0b:13:
84:c1:73:0b:d2:de:7a:11:49:55:34:af:8e:e4:00:d9:aa:63:
7e:28:d4:b5:08:9e:e3:02:f3:67:45:82:1e:ef:fb:ea:2b:43:
a5:68:18:48:f8:58:09:2f:81:9e:3f:60:2e:b8:66:dd:a2:57:
09:69:95:5e:f7:d7:cf:47:de:af:ac:15:ad:9a:65:a7:6d:34:
ab:14:f0:d3:2c:b0:ce:02:48:0c:4b:a6:52:8a:1e:83:74:bb:
4b:28:55:bb:f3:56:33:0e:dc:8a:b8:2a:d0:9b:5b:fc:47:a2:
3a:ad:b0:d9:11:1f:39:7d:93:20:27:27:f3:f1:97:9a:16:2d:
00:0f:54:b7:e9:e1:bc:be:46:c2:59:8d:b5:44:26:11:62:cc:
e8:f7:0d:c7:05:62:4a:85:a3:09:dd:de:9c:bb:c2:23:82:62:
2e:89:a6:6a:b8:db:cf:ed:43:0b:e4:f4:5c:92:39:df:f8:d8:
dc:06:55:fe:36:f2:2b:f3:74:42:39:42:b1:4d:76:45:21:51:
4a:51:1e:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ZYefxHq2kUdYM9ES56Ij5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZTBjYjU4YWUyM2Q0NzNhZTEzYTczNDFiN2E3M2JkZDEw
MjhhMGQwHhcNMjYwNDE3MDMwMDIzWhcNMjYwNDE4MDMwMDIzWjAzMTEwLwYDVQQD
EygzOWVmOWIxZTNiNTU3YWI4YjFjZGQwYmUzOGE4NzY1YjRiZDFkMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAliuvLJag5nlwwQHYS/hSBD17E4es
DA0hkqs2TrRL/f1/3YVCpNWjtTAuPzwlP6FxRidg5sn5c70OHrDOkksuX/9BIB/c
bt21g2WE5nwsseLlW24TTX4dNXukvh3REY5fbPK26CBT0QD0jiF9/jyD5eVtyD3X
kVI7tpr04FYPDp982YNVf2CTkoN8fHjz/uAOaq5lzuMqkF5k29aJfGdwh7qjgNs3
6C7Czr3uWCHj6jrfdn6RBa8wT6mfvDx7YCCkCrSW2xUzND1HmbQnQFTJdO6n73Zt
pJuF6pgihy0+5RltCNLgUgNRTokASOCDY+POwJ0xTw9nD96ySbP3Xb/a1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDnvmx47VXq4sc3QvjiodltL0dA2MB8GA1UdIwQY
MBaAFDfgy1iuI9RzrhOnNBt6c73RAooNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUt
Mzg2OTEwZGNiOTAzLzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUtMzg2OTEwZGNiOTAz
LzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKpItMIaO
vPOhBZoTNpYlH4pCB9wLPIGjqiwmL/8argwVo29JfWpzFwy1vROxw2sizNCqUgsT
hMFzC9LeehFJVTSvjuQA2apjfijUtQie4wLzZ0WCHu/76itDpWgYSPhYCS+Bnj9g
Lrhm3aJXCWmVXvfXz0fer6wVrZplp200qxTw0yywzgJIDEumUooeg3S7SyhVu/NW
Mw7cirgq0Jtb/EeiOq2w2REfOX2TICcn8/GXmhYtAA9Ut+nhvL5GwlmNtUQmEWLM
6PcNxwViSoWjCd3enLvCI4JiLommarjbz+1DC+T0XJI53/jY3AZV/jbyK/N0QjlC
sU12RSFRSlEeyQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 11:49:27 2026 by rpki-client