Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: aNn0dQum6KsG/iY1Jvv0MFQfInkdwtHvky4JM1S/EmI=
Subject key identifier: BE:FE:B6:F8:F5:1E:6D:D1:68:7D:E2:44:C6:63:10:76:3F:FD:73:02
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 019CAA2184A8A7D32AF5BBB6D7CB0976B132
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 1849
Signing time: Sun 01 Mar 2026 16:00:49 +0000
Manifest this update: Sun 01 Mar 2026 16:00:49 +0000
Manifest next update: Mon 02 Mar 2026 16:00:49 +0000
Files and hashes: 1: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: +Qsla6UKu6WCTy7JlIUhiH8LfdwsUMN2lweko0lpBEc=)
2: NRr2xnrc8q3h4uFkXN71z-KKA3E.roa (hash: P9SGhc4Yfp9gNj6Hs6UJwSGYWBkDoeITgWd2bUYfBvw=)
3: q8LLAWsYj15dDU4uGxTr8uDvbqE.roa (hash: +TDQWUOOqKp5vb78QVJ0zxHTWhdeGR0lnx+TBsmkF48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:21:84:a8:a7:d3:2a:f5:bb:b6:d7:cb:09:76:b1:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Mar 1 16:00:49 2026 GMT
Not After : Mar 2 16:00:49 2026 GMT
Subject: CN=befeb6f8f51e6dd1687de244c66310763ffd7302
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:d0:38:c1:37:e0:3b:f5:ae:2f:0b:fa:47:1d:
c4:e8:f2:c8:9a:3b:81:78:0b:4a:6c:ee:85:a8:cd:
05:30:6b:8e:3d:99:5a:bb:3b:a3:56:1c:3e:d5:1e:
f4:bd:c6:01:aa:6f:ea:36:6e:64:63:3b:52:c3:76:
3e:a4:0b:8f:fa:73:73:d4:9c:d5:94:27:48:02:f8:
82:87:e6:fa:64:77:57:92:02:d3:f7:66:6e:d7:81:
35:fd:a7:f6:da:51:8a:52:cf:78:58:0e:ec:97:5e:
21:99:db:47:4e:f2:0d:83:2f:ef:89:7a:e9:68:43:
8d:0b:b0:3e:15:7d:d5:53:31:b7:96:e9:1c:c9:f2:
d4:2c:a1:d4:04:11:7a:f2:6e:cc:7a:06:03:dd:e4:
e7:62:a7:a0:20:64:4d:91:98:0c:90:e8:43:c6:04:
83:e4:94:5b:17:f9:df:22:19:57:ba:49:1e:e4:9e:
00:5e:02:99:dc:f8:53:9e:d8:04:fc:58:a2:18:00:
53:b1:76:a3:c6:0c:ce:fd:6a:63:54:2b:98:6f:3f:
0c:c2:e1:5c:e2:24:69:6d:12:f8:3c:78:e7:45:b3:
fe:c5:b8:46:a0:6e:14:c9:48:f8:cf:87:cc:63:75:
cc:55:67:04:fb:f0:90:23:e2:72:f4:38:9c:7e:45:
cf:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:FE:B6:F8:F5:1E:6D:D1:68:7D:E2:44:C6:63:10:76:3F:FD:73:02
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:19:77:3e:7f:9b:64:35:3e:69:5f:24:c7:e9:92:23:34:fd:
d3:98:07:1b:9b:6e:94:df:7c:45:66:5d:97:dd:bc:7a:f8:06:
5f:6f:04:50:81:17:35:b8:e3:6e:3b:3d:ca:92:c1:52:f9:fc:
ad:ef:bc:1d:de:ed:76:68:f7:bb:cf:ff:7e:c3:1e:37:1e:f9:
bc:cc:39:8c:ca:d1:99:da:d2:65:12:fa:98:11:d6:64:e1:bc:
7e:fc:1c:94:e2:44:55:1d:7e:bf:02:75:0b:0c:20:89:22:df:
86:c7:a5:ab:91:0a:7d:31:ab:f5:51:72:4f:86:1c:fd:e5:a0:
3d:d3:40:11:2d:bf:42:2f:ba:d2:7d:02:19:01:ef:30:3e:e6:
2e:ea:22:f0:38:71:64:e4:df:88:35:82:f3:8b:62:88:0d:32:
ca:06:ff:dd:bb:e2:cf:0b:dc:1e:9b:e9:56:a9:3e:20:81:da:
16:a7:57:23:e2:19:48:9f:29:bb:ea:95:ee:08:a1:99:72:fc:
11:39:90:e0:53:38:70:8e:f9:d6:ec:73:f9:80:4b:f0:a8:df:
a3:ed:70:db:a6:97:ff:82:2b:40:4d:d3:c3:af:31:e6:c1:4f:
f1:a1:e7:33:5f:ab:88:cb:6e:78:32:79:81:69:05:e8:1e:68:
53:55:3e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:50:54 2026 by rpki-client