Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: wUv37RZOpxLjJODps8YffR44Hx3/z54ilagZ5DnIfA8=
Subject key identifier: B8:66:3B:6E:69:33:AD:A1:5D:0C:11:34:0A:94:C7:19:9A:CC:07:62
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 01A0C47B54B93A5C09885AF064219888C2B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 1A69
Signing time: Mon 21 Sep 2026 15:00:11 +0000
Manifest this update: Mon 21 Sep 2026 15:00:11 +0000
Manifest next update: Tue 22 Sep 2026 15:00:11 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: uPGOjem2SicPujGoUB6FBbr+IwNFbtwhiKq+3k2KVjE=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 15:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c4:7b:54:b9:3a:5c:09:88:5a:f0:64:21:98:88:c2:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Sep 21 15:00:11 2026 GMT
Not After : Sep 22 15:00:11 2026 GMT
Subject: CN=b8663b6e6933ada15d0c11340a94c7199acc0762
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f7:6a:87:42:f7:86:ae:55:27:86:a3:91:c7:
17:24:3a:03:4d:c0:c4:94:54:af:27:ab:c4:a0:e0:
3f:96:87:4f:7f:e2:c8:28:1c:a6:8f:aa:4a:f0:60:
17:e0:d9:de:24:17:d7:70:b8:46:4c:f6:2e:96:f9:
fd:ae:e9:34:8d:16:74:6a:24:5f:3b:31:04:1d:0c:
ca:06:68:37:6d:2b:88:31:76:89:5e:16:3d:ed:52:
45:74:ed:c7:36:fa:ec:cb:bf:6d:94:91:4c:25:45:
9d:9d:71:bb:46:d9:df:18:0b:cc:02:0b:51:52:8f:
98:e0:a8:ba:88:45:4b:a0:03:73:ce:09:45:16:f6:
79:64:68:41:ab:2f:40:cb:44:c8:3f:22:c4:c6:d9:
71:bb:fc:ac:6c:78:f3:bb:04:ac:ad:05:ad:d5:6e:
dd:0c:dd:8d:53:68:1b:7f:77:c7:26:f3:7f:75:11:
5e:39:fd:fa:c6:58:90:5e:a1:09:b7:10:9e:dd:a0:
50:74:17:d0:7a:cc:28:8f:af:ea:5a:a9:e6:3e:a5:
df:8d:0f:e2:91:54:c0:fd:b6:cf:ed:d4:ee:67:27:
01:c8:5d:e9:24:0d:82:a7:93:32:42:43:d1:f4:60:
10:9e:1e:1f:3d:de:70:b6:f8:b1:7d:67:60:c0:7f:
21:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:66:3B:6E:69:33:AD:A1:5D:0C:11:34:0A:94:C7:19:9A:CC:07:62
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:8e:67:43:77:01:97:9a:c8:9d:06:5e:d7:c3:fc:91:ab:13:
a6:8f:03:e4:ec:43:78:b7:2d:0a:b9:6c:e8:5d:ee:5b:ab:3c:
79:bb:4d:b3:60:ea:07:a3:71:e0:21:d2:87:99:46:2c:08:68:
d4:65:dd:82:03:01:ff:df:ed:0d:1c:88:22:e9:2a:e5:44:2c:
32:03:4b:64:c7:5e:00:01:49:4e:17:bd:b9:32:e6:09:49:dd:
6d:f7:1b:2a:5f:e7:9a:52:96:e2:aa:b8:cd:de:b5:2b:5d:b2:
0b:e6:ee:d8:be:f0:07:8c:d6:e9:5f:55:f3:1a:bd:6c:62:fe:
ca:19:2a:a5:df:fe:6e:9e:84:12:6d:c1:ec:e6:e4:8b:6e:27:
7b:50:e8:c2:c4:e9:a4:00:4d:02:47:79:6d:95:e2:e4:e3:74:
45:1f:63:fe:f4:c2:88:c2:0f:c2:e8:99:f6:9f:04:3f:21:c2:
2f:1e:b1:09:2c:05:55:09:08:e7:07:58:65:1d:5f:20:c8:78:
3f:cf:c2:96:bc:a6:15:bc:ea:48:c8:13:b8:86:cf:c6:a8:b9:
00:8c:67:43:71:aa:bd:88:08:53:d9:d0:f5:4c:ff:99:47:5f:
3e:a1:42:1c:16:19:8f:c1:a6:25:3f:b8:44:3d:42:b2:64:af:
97:34:0b:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 02:56:23 2026 by rpki-client