Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
File: N0APqidmcJP67lLVG3cVZIg_QFI.mft (raw, json)
Hash identifier: HzOdH/caiQry3LTi3KdhWU9OGC5Y1hp4Ztj3MUzSxSc=
Subject key identifier: 0F:1A:03:6E:2A:94:0A:C0:2D:90:E5:B2:8F:98:3C:99:7C:68:40:6A
Authority key identifier: 37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52
Certificate issuer: /CN=37400faa27667093faee52d51b771564883f4052
Certificate serial: 01A0E88976B984CBAC85DB6332286980354C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
Manifest number: E3
Signing time: Mon 28 Sep 2026 15:01:57 +0000
Manifest this update: Mon 28 Sep 2026 15:01:57 +0000
Manifest next update: Tue 29 Sep 2026 15:01:57 +0000
Files and hashes: 1: 9R-i3Wq120RN_k44oqDZ3zt9azA.asa (hash: 3V4HeiStb0wJSnHYXbbtVpXK6uhTtJpV7jDdRPhzS1k=)
2: N0APqidmcJP67lLVG3cVZIg_QFI.crl (hash: gD5zjps+kAmlIgjRPX6cGXo1QE7LnoVO+ziEZP+tdCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:89:76:b9:84:cb:ac:85:db:63:32:28:69:80:35:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37400faa27667093faee52d51b771564883f4052
Validity
Not Before: Sep 28 15:01:57 2026 GMT
Not After : Sep 29 15:01:57 2026 GMT
Subject: CN=0f1a036e2a940ac02d90e5b28f983c997c68406a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f3:88:dc:9b:5e:51:11:7b:ff:07:4e:9f:76:
c8:63:6a:d5:8f:a2:5d:5d:63:41:97:c3:72:2d:36:
a3:6c:da:c6:5d:9d:60:7d:31:ca:13:ab:1c:1e:6d:
cd:32:5a:90:ee:26:ed:e5:35:d5:e6:c1:5f:5d:6f:
c1:e1:09:e2:61:33:d6:2e:fc:76:cf:18:79:2c:96:
39:d7:69:5f:10:d7:ec:18:09:91:62:03:0d:d4:94:
37:9c:b1:4b:82:0e:3b:06:77:25:35:5f:cc:45:44:
8f:98:c8:24:f5:d4:35:90:0f:83:44:84:9f:63:0a:
1c:a2:b7:3f:41:5a:2b:fc:28:e3:c0:6f:f5:83:f0:
52:41:27:ea:a9:f1:e2:4f:cb:d0:11:41:20:cb:ee:
4f:72:ed:f6:d2:51:75:e8:59:bd:35:c2:13:92:d6:
89:55:e1:5f:80:35:bf:ca:e7:38:aa:f6:7d:0c:20:
9a:46:e5:d3:5a:ed:b2:9c:f7:6a:97:12:f6:02:c9:
4a:c0:9d:43:80:0b:e9:53:7e:76:9d:48:bb:0b:7e:
09:53:ca:4b:88:a4:6e:8c:35:e7:eb:b1:4b:23:5b:
b5:bd:f9:6a:4e:83:61:77:d0:ff:0f:6a:ee:ef:1d:
7e:22:e4:c7:97:15:a7:31:28:2e:af:14:83:31:de:
7f:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:1A:03:6E:2A:94:0A:C0:2D:90:E5:B2:8F:98:3C:99:7C:68:40:6A
X509v3 Authority Key Identifier:
keyid:37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:31:dd:47:d5:26:7f:64:49:6d:94:0c:4e:61:31:7b:e2:73:
49:88:5b:d0:b7:87:2d:67:31:7e:c5:4c:06:02:b9:2e:17:01:
b2:2c:60:d5:02:f1:12:64:1c:fa:af:bc:f6:a2:e8:39:a3:1a:
8a:eb:bb:78:31:32:68:6f:c9:f2:1e:d1:84:47:a4:c3:71:0e:
04:0c:37:70:97:48:ab:8b:cc:62:02:96:0e:3c:83:d1:00:85:
6b:69:dc:2a:d9:04:69:22:93:88:d5:d8:31:e8:61:83:28:65:
fa:87:c2:62:29:ef:96:d4:10:69:c4:7f:90:71:02:d5:e3:a2:
7c:d3:a7:4d:62:12:9b:f7:fc:65:e4:d9:52:ae:cf:51:bf:cb:
49:bd:b4:9a:1d:bf:0f:4b:99:ce:70:21:1a:cf:d8:cd:3d:9f:
b1:19:58:7a:af:f5:e3:b7:26:c0:4c:36:50:5c:6a:85:a1:8d:
5e:a5:ca:71:e7:77:e5:80:0b:55:28:2f:f4:22:d5:b2:8e:dc:
96:fd:20:e9:4f:ea:7a:27:e7:2f:97:c6:bb:5e:18:4b:4f:9f:
64:f2:78:4c:9f:d4:5e:99:3f:bc:bb:70:7c:4e:4d:d8:2b:34:
5b:80:31:e5:ff:47:83:5a:ec:42:4f:e2:b8:7b:f8:a3:3a:b3:
06:f0:59:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:51:13 2026 by rpki-client