Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
File: N0APqidmcJP67lLVG3cVZIg_QFI.mft (raw, json)
Hash identifier: pUFRn/tYklBqirgAdQKneZa5V9plIIwtxtKMkJzthwo=
Subject key identifier: 0A:51:F6:36:C8:F2:55:BB:C5:45:DA:FB:5A:FA:13:CF:A0:98:AA:13
Authority key identifier: 37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52
Certificate issuer: /CN=37400faa27667093faee52d51b771564883f4052
Certificate serial: 019FA86265E1F3A92FF1E2D36610EFE12032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
Manifest number: 3D
Signing time: Tue 28 Jul 2026 11:00:48 +0000
Manifest this update: Tue 28 Jul 2026 11:00:48 +0000
Manifest next update: Wed 29 Jul 2026 11:00:48 +0000
Files and hashes: 1: LiPmUXx2mn0nJNPA6Qm1DfpRIak.asa (hash: HeYlfayHJfnirL1LiLShWkumJCawOk5vgyurfllDT3E=)
2: N0APqidmcJP67lLVG3cVZIg_QFI.crl (hash: Ub+o/q5Tt+rXAN2zcpN2zusNQmE8qJM4nsM6Dwi1SPo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 11:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:62:65:e1:f3:a9:2f:f1:e2:d3:66:10:ef:e1:20:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37400faa27667093faee52d51b771564883f4052
Validity
Not Before: Jul 28 11:00:48 2026 GMT
Not After : Jul 29 11:00:48 2026 GMT
Subject: CN=0a51f636c8f255bbc545dafb5afa13cfa098aa13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:f6:ce:6a:67:0b:f6:6e:b1:a4:b8:f9:1f:fd:
cf:45:ae:9a:59:ff:41:c1:f1:9f:79:5a:17:45:82:
7d:06:9f:7a:5d:32:52:84:c1:f9:00:9f:39:83:dd:
24:54:ce:46:28:a9:8f:cc:66:ce:18:f0:61:5e:f2:
3d:d7:ac:1c:2a:37:a8:03:44:f0:b4:e8:54:f5:5f:
80:19:60:81:f5:54:6a:e9:f0:4c:11:ed:29:5a:ff:
73:bd:93:89:8a:49:88:dd:80:46:69:20:05:55:92:
46:bf:80:aa:bd:e7:33:5d:72:d4:f5:01:04:fb:f2:
e2:cd:4f:e7:da:40:2e:fa:3d:75:14:4f:68:23:e3:
73:75:0b:be:d5:02:a9:52:06:8b:2f:bc:f9:0a:f9:
00:4e:e4:ed:cb:75:4a:c5:61:4a:1b:b4:d8:59:91:
f4:39:10:fd:4c:0b:dc:67:61:d7:82:b1:59:00:19:
2b:3c:21:9b:e1:b4:63:ce:c4:c4:0e:63:41:b2:2f:
5f:8d:b7:9f:68:04:1b:5e:96:03:69:2f:77:e0:7e:
33:a5:54:e7:97:98:b6:62:88:90:9c:03:ae:b4:9f:
da:d3:7a:5e:2c:db:7f:48:2c:d9:f2:40:68:fe:a8:
c6:b6:33:42:0b:a7:64:a3:f0:94:5b:1d:d7:c0:dc:
f1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:51:F6:36:C8:F2:55:BB:C5:45:DA:FB:5A:FA:13:CF:A0:98:AA:13
X509v3 Authority Key Identifier:
keyid:37:40:0F:AA:27:66:70:93:FA:EE:52:D5:1B:77:15:64:88:3F:40:52
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N0APqidmcJP67lLVG3cVZIg_QFI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/197329-28b0-4aff-8b46-adf13f886ff0/1/N0APqidmcJP67lLVG3cVZIg_QFI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:d4:fc:6d:0b:e8:5e:4d:84:03:78:52:c9:e9:8b:ac:2d:a2:
50:6c:42:bc:14:5d:75:60:c1:1e:63:69:1d:fb:ed:54:b8:fe:
3a:03:ab:4e:b5:58:1a:ee:ee:59:e4:cd:5a:67:0e:34:74:6a:
f7:e6:1c:f7:ea:56:dc:a1:ab:6c:64:9e:2e:e8:62:1d:b5:d5:
89:eb:e0:72:1e:2d:21:5d:5d:2a:18:4a:f4:b5:9f:75:47:1a:
ac:54:27:ef:ed:1a:cc:18:84:27:74:b1:c3:2d:88:6d:e1:8f:
7a:bc:c4:e8:23:39:03:ce:ee:1e:14:6e:57:32:69:99:b3:7c:
55:bc:96:45:66:80:61:16:92:e8:f8:9b:1c:9a:3f:83:cf:4d:
7a:ae:80:9a:2b:ee:8d:a8:34:dc:4d:7c:81:b7:d0:79:f3:db:
5a:6a:b4:68:06:08:cc:1e:29:8c:8a:84:69:63:4f:e8:dc:88:
c9:5d:22:23:64:cf:b3:f0:da:e5:14:ef:93:7b:d2:9b:37:ed:
d3:03:55:60:6a:b9:68:74:b8:bb:ad:34:40:aa:a9:42:13:f3:
86:66:9c:50:97:36:c6:4f:63:59:7e:77:bc:c2:1c:76:fe:94:
a4:f2:41:d1:16:8d:28:02:3f:97:3e:a5:0f:b6:32:27:76:34:
7f:f7:f9:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 15:41:20 2026 by rpki-client