Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
File: N-DLWK4j1HOuE6c0G3pzvdECig0.mft (raw, json)
Hash identifier: xome3Lmlb/s3eAO3fTpqA5fW3VpQiugJklZKKZyoQrs=
Subject key identifier: 37:CF:37:91:2B:04:40:8C:19:AE:2B:A4:10:3A:25:75:4A:F7:21:D1
Authority key identifier: 37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
Certificate issuer: /CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Certificate serial: 019CABD901A041E0D4AE0889D20F2DAB9804
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
Manifest number: 1240
Signing time: Mon 02 Mar 2026 00:00:51 +0000
Manifest this update: Mon 02 Mar 2026 00:00:51 +0000
Manifest next update: Tue 03 Mar 2026 00:00:51 +0000
Files and hashes: 1: LA-wi6A11ya7LBdprms18TeIogg.roa (hash: mGJUSbaGKL8VGDPcuUd8EHQTcLMU3S2Uwe+tVWxibH8=)
2: N-DLWK4j1HOuE6c0G3pzvdECig0.crl (hash: ikSrlZmnyR7o3cN75F0o+TU9iO8eF/HlfVsZcGVEb2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:d9:01:a0:41:e0:d4:ae:08:89:d2:0f:2d:ab:98:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37e0cb58ae23d473ae13a7341b7a73bdd1028a0d
Validity
Not Before: Mar 2 00:00:51 2026 GMT
Not After : Mar 3 00:00:51 2026 GMT
Subject: CN=37cf37912b04408c19ae2ba4103a25754af721d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:5c:f2:5c:8b:70:b1:6d:e2:95:f1:6f:5b:d8:
e5:17:4f:ab:51:41:18:21:d8:9e:f5:bd:01:65:ff:
77:6a:70:79:8b:70:ed:a7:4e:03:a5:48:0e:a6:ab:
04:88:67:c3:da:d4:cf:ff:67:74:bf:0e:da:6d:6d:
a9:c9:4a:aa:15:eb:30:06:6d:cf:b9:ca:df:23:38:
be:19:41:97:17:5e:77:03:6c:a3:07:b8:2a:d0:29:
46:9f:bc:f2:d9:57:4e:e0:34:80:a1:62:11:3e:4f:
b7:c2:58:56:39:fa:82:49:6a:6e:61:1b:65:ec:1b:
7e:9c:3e:6b:10:97:7d:e3:ae:09:61:a4:83:54:ef:
65:a4:1d:07:52:d6:ab:5d:e7:ee:f1:95:42:29:d1:
81:00:4b:b7:9d:fb:4a:5f:cd:e1:4b:05:03:ab:82:
28:45:5b:cb:59:fe:28:09:5c:1d:66:11:7c:2f:6a:
6d:f9:02:72:46:c1:1d:25:7d:da:8e:a2:67:1a:c8:
89:9a:b1:80:43:53:2e:bd:9f:98:5a:06:a3:71:ad:
5e:6f:b6:9b:26:dc:f5:5d:01:b4:f6:1b:b4:81:a7:
b6:e0:f5:e3:ca:44:fd:84:14:d2:0c:5c:42:1e:c5:
4d:24:c2:ef:d0:19:b1:58:d9:cb:6e:28:12:4d:ff:
19:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:CF:37:91:2B:04:40:8C:19:AE:2B:A4:10:3A:25:75:4A:F7:21:D1
X509v3 Authority Key Identifier:
keyid:37:E0:CB:58:AE:23:D4:73:AE:13:A7:34:1B:7A:73:BD:D1:02:8A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N-DLWK4j1HOuE6c0G3pzvdECig0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/46c38b-4324-44aa-9bb5-386910dcb903/1/N-DLWK4j1HOuE6c0G3pzvdECig0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c7:5d:6b:74:af:57:48:d0:3a:05:b3:eb:6d:55:9b:6f:72:
46:63:c7:94:32:c7:6a:5e:dd:d3:60:e0:b8:0d:dc:14:3c:f3:
0d:8f:34:7b:98:71:47:e5:1d:f4:05:f3:e6:a5:62:c3:c2:f2:
3e:3c:46:8e:b0:0b:a3:c2:20:d6:b5:6c:22:70:f3:99:ba:f9:
97:2b:c1:49:5f:4f:95:60:6b:39:89:2c:77:f4:16:22:6a:1c:
2f:c8:a5:dc:46:ab:5a:a1:9f:f0:77:c8:d4:81:63:d8:05:a5:
b1:d7:d6:05:4e:94:c8:b0:a0:39:30:ac:67:59:17:fe:ca:27:
74:10:5b:43:1b:2a:0a:6e:7e:bd:b4:0c:cd:57:a0:23:bf:73:
37:18:97:3f:a9:f5:e5:72:17:ea:2c:4c:04:65:d1:c0:b5:aa:
0a:18:21:73:de:4a:b9:6f:a0:f1:2b:d4:1d:45:ba:69:62:a6:
4e:3d:d1:83:06:ae:bf:c5:ac:a1:72:8c:a6:83:24:49:da:26:
d8:8a:51:5a:0e:86:21:d6:bb:15:7d:88:d6:4f:7a:09:c5:bd:
a1:37:94:68:fc:b9:45:d2:2c:e1:12:6d:5c:a9:68:10:23:d6:
b6:ac:46:25:e2:76:c3:00:b4:a2:54:bb:42:d2:2b:f3:64:6d:
f6:cd:36:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyr2QGgQeDUrgiJ0g8tq5gEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZTBjYjU4YWUyM2Q0NzNhZTEzYTczNDFiN2E3M2JkZDEw
MjhhMGQwHhcNMjYwMzAyMDAwMDUxWhcNMjYwMzAzMDAwMDUxWjAzMTEwLwYDVQQD
EygzN2NmMzc5MTJiMDQ0MDhjMTlhZTJiYTQxMDNhMjU3NTRhZjcyMWQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsFzyXItwsW3ilfFvW9jlF0+rUUEY
Idie9b0BZf93anB5i3Dtp04DpUgOpqsEiGfD2tTP/2d0vw7abW2pyUqqFeswBm3P
ucrfIzi+GUGXF153A2yjB7gq0ClGn7zy2VdO4DSAoWIRPk+3wlhWOfqCSWpuYRtl
7Bt+nD5rEJd9464JYaSDVO9lpB0HUtarXefu8ZVCKdGBAEu3nftKX83hSwUDq4Io
RVvLWf4oCVwdZhF8L2pt+QJyRsEdJX3ajqJnGsiJmrGAQ1MuvZ+YWgajca1eb7ab
Jtz1XQG09hu0gae24PXjykT9hBTSDFxCHsVNJMLv0BmxWNnLbigSTf8ZIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDfPN5ErBECMGa4rpBA6JXVK9yHRMB8GA1UdIwQY
MBaAFDfgy1iuI9RzrhOnNBt6c73RAooNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUt
Mzg2OTEwZGNiOTAzLzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi80NmMzOGItNDMyNC00NGFhLTliYjUtMzg2OTEwZGNiOTAz
LzEvTi1ETFdLNGoxSE91RTZjMEczcHp2ZEVDaWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbMdda3Sv
V0jQOgWz621Vm29yRmPHlDLHal7d02DguA3cFDzzDY80e5hxR+Ud9AXz5qViw8Ly
PjxGjrALo8Ig1rVsInDzmbr5lyvBSV9PlWBrOYksd/QWImocL8il3EarWqGf8HfI
1IFj2AWlsdfWBU6UyLCgOTCsZ1kX/sondBBbQxsqCm5+vbQMzVegI79zNxiXP6n1
5XIX6ixMBGXRwLWqChghc95KuW+g8SvUHUW6aWKmTj3Rgwauv8WsoXKMpoMkSdom
2IpRWg6GIda7FX2I1k96CcW9oTeUaPy5RdIs4RJtXKloECPWtqxGJeJ2wwC0olS7
QtIr82Rt9s02bQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:40:04 2026 by rpki-client