Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
File: N2ieqsuvaK810_r7lnTeSKb8CXg.mft (raw, json)
Hash identifier: JNmqErrfg/wrLP+80AHH6LxvOrUB9MX54BmXflI6V24=
Subject key identifier: 2C:41:06:29:5F:E3:7B:2F:83:4D:A6:4F:AE:30:4C:B7:56:10:84:A9
Authority key identifier: 37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
Certificate issuer: /CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Certificate serial: 019CAE34F2B0038926155B0341DB09E1DF82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
Manifest number: 0EF3
Signing time: Mon 02 Mar 2026 11:00:31 +0000
Manifest this update: Mon 02 Mar 2026 11:00:31 +0000
Manifest next update: Tue 03 Mar 2026 11:00:31 +0000
Files and hashes: 1: N2ieqsuvaK810_r7lnTeSKb8CXg.crl (hash: 7N2nro/hvxA7So1nsLTeTyb8iX0FVZA7hg8ajyUogvk=)
2: gXm46Hmm-qTO4hodxrSof3TLiNM.roa (hash: xq/l2oyKL3r2u7cjQoxp//Kygz431FReQyIA4fXa0hU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:34:f2:b0:03:89:26:15:5b:03:41:db:09:e1:df:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37689eaacbaf68af35d3fafb9674de48a6fc0978
Validity
Not Before: Mar 2 11:00:31 2026 GMT
Not After : Mar 3 11:00:31 2026 GMT
Subject: CN=2c4106295fe37b2f834da64fae304cb7561084a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d6:b0:f2:0a:06:99:5f:4f:e7:52:93:69:84:
86:8b:16:b4:8f:80:5b:41:2c:eb:f8:38:51:06:68:
51:97:cd:5d:77:18:93:54:bf:11:21:ef:3c:71:a6:
3a:71:af:4d:43:26:34:b7:7c:bc:e2:96:8c:cd:c7:
5e:d9:ee:3e:05:d0:8b:c0:8d:75:f6:e2:1f:04:bf:
35:8c:b8:c7:8c:c9:ad:fc:6c:aa:d2:32:29:59:09:
23:2f:11:61:e7:b1:dc:d8:85:64:14:7f:d0:d8:24:
a3:fc:73:91:df:20:c3:7f:9b:26:6c:9f:ce:65:54:
e1:dc:42:eb:a3:fd:18:5c:51:11:2b:ea:8e:c0:d9:
eb:54:f6:c6:49:c1:f9:6e:de:80:d3:db:e9:8c:fa:
fe:bd:17:8c:bc:82:07:cd:2a:cb:3e:70:de:c7:69:
8f:1c:59:af:3b:eb:1e:9f:b7:24:de:fe:8c:8e:5f:
d8:7e:cf:a5:d7:f5:1f:87:8f:ea:34:84:45:ed:fc:
27:87:6b:4a:17:2d:72:f6:cf:84:d0:7c:89:d7:a6:
81:d2:16:82:d9:52:7b:b5:d2:b2:c6:42:c0:71:e2:
d0:c9:18:20:90:9c:4e:ce:33:2f:af:68:01:d5:3a:
e3:5a:79:e1:b5:b7:f3:5d:4a:59:ec:d1:b3:3a:39:
0c:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:41:06:29:5F:E3:7B:2F:83:4D:A6:4F:AE:30:4C:B7:56:10:84:A9
X509v3 Authority Key Identifier:
keyid:37:68:9E:AA:CB:AF:68:AF:35:D3:FA:FB:96:74:DE:48:A6:FC:09:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2ieqsuvaK810_r7lnTeSKb8CXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/84179d-4c65-44b8-b30b-5dabb4e47abb/1/N2ieqsuvaK810_r7lnTeSKb8CXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:61:80:39:e8:0f:be:0f:76:04:86:64:be:b8:56:c7:7e:c5:
08:19:85:e8:e7:06:74:0d:c3:6c:dd:a5:c0:39:2c:a9:d4:19:
b0:77:9c:b6:47:a9:2e:58:98:c9:12:5e:e7:d4:8a:a6:0d:82:
1d:7a:eb:0d:0c:5a:59:24:2d:b4:71:46:d6:19:d9:05:3c:49:
25:74:f2:29:67:01:b4:13:cf:60:83:03:5c:11:fb:ae:cb:cf:
ba:df:47:06:fe:a7:9f:bb:52:0b:0b:6b:62:ba:a4:44:0e:45:
a2:04:41:66:91:78:8d:b2:b2:d6:16:4d:98:b3:f7:bb:63:30:
87:3f:f0:11:96:6f:1e:e5:5d:c3:68:bb:19:1c:7b:9e:f7:dc:
ea:d5:fe:12:30:91:60:46:45:8f:af:ce:e4:2c:57:90:4d:f5:
ea:c2:60:4d:66:d7:2b:9a:fb:eb:46:80:f2:19:eb:5e:4b:03:
11:e3:a4:b9:fe:89:73:78:25:ef:a6:de:07:9c:3b:c2:82:ff:
c6:24:9f:7f:b8:59:71:52:1f:de:c9:dc:ed:1f:74:73:1f:ed:
28:d0:a0:d9:c5:29:46:28:66:c6:bf:c4:8d:69:18:05:fd:4e:
a9:0e:32:e8:d7:0e:13:65:09:6f:fc:a8:ff:bc:db:23:fa:9b:
e0:5e:ce:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyuNPKwA4kmFVsDQdsJ4d+CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Njg5ZWFhY2JhZjY4YWYzNWQzZmFmYjk2NzRkZTQ4YTZm
YzA5NzgwHhcNMjYwMzAyMTEwMDMxWhcNMjYwMzAzMTEwMDMxWjAzMTEwLwYDVQQD
EygyYzQxMDYyOTVmZTM3YjJmODM0ZGE2NGZhZTMwNGNiNzU2MTA4NGE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttaw8goGmV9P51KTaYSGixa0j4Bb
QSzr+DhRBmhRl81ddxiTVL8RIe88caY6ca9NQyY0t3y84paMzcde2e4+BdCLwI11
9uIfBL81jLjHjMmt/Gyq0jIpWQkjLxFh57Hc2IVkFH/Q2CSj/HOR3yDDf5smbJ/O
ZVTh3ELro/0YXFERK+qOwNnrVPbGScH5bt6A09vpjPr+vReMvIIHzSrLPnDex2mP
HFmvO+sen7ck3v6Mjl/Yfs+l1/Ufh4/qNIRF7fwnh2tKFy1y9s+E0HyJ16aB0haC
2VJ7tdKyxkLAceLQyRggkJxOzjMvr2gB1TrjWnnhtbfzXUpZ7NGzOjkMWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCxBBilf43svg02mT64wTLdWEISpMB8GA1UdIwQY
MBaAFDdonqrLr2ivNdP6+5Z03kim/Al4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGIt
NWRhYmI0ZTQ3YWJiLzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS84NDE3OWQtNGM2NS00NGI4LWIzMGItNWRhYmI0ZTQ3YWJi
LzEvTjJpZXFzdXZhSzgxMF9yN2xuVGVTS2I4Q1hnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmGAOegP
vg92BIZkvrhWx37FCBmF6OcGdA3DbN2lwDksqdQZsHectkepLliYyRJe59SKpg2C
HXrrDQxaWSQttHFG1hnZBTxJJXTyKWcBtBPPYIMDXBH7rsvPut9HBv6nn7tSCwtr
YrqkRA5FogRBZpF4jbKy1hZNmLP3u2Mwhz/wEZZvHuVdw2i7GRx7nvfc6tX+EjCR
YEZFj6/O5CxXkE316sJgTWbXK5r760aA8hnrXksDEeOkuf6Jc3gl76beB5w7woL/
xiSff7hZcVIf3snc7R90cx/tKNCg2cUpRihmxr/EjWkYBf1OqQ4y6NcOE2UJb/yo
/7zbI/qb4F7OqQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:06:35 2026 by rpki-client