Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: Amicheo3JPU86KLhjTsT3na2OglRD9mDIg0T1Z6sjPw=
Subject key identifier: 1A:21:6C:70:AF:AE:3E:27:17:A0:ED:09:FD:97:50:D3:CB:BA:DF:87
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019D99629D7E8CB86968556EEB691944927B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 18C5
Signing time: Fri 17 Apr 2026 03:01:10 +0000
Manifest this update: Fri 17 Apr 2026 03:01:10 +0000
Manifest next update: Sat 18 Apr 2026 03:01:10 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: +QTP0dmk0XXMu+wRN1kYRVwm5n10RFzAPFizcei/184=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 03:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:62:9d:7e:8c:b8:69:68:55:6e:eb:69:19:44:92:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Apr 17 03:01:10 2026 GMT
Not After : Apr 18 03:01:10 2026 GMT
Subject: CN=1a216c70afae3e2717a0ed09fd9750d3cbbadf87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b5:d5:63:d5:05:67:1e:f0:aa:90:06:ac:c4:
51:6f:eb:9a:20:08:bb:f8:82:8d:11:27:ae:c4:37:
e6:4e:35:6a:de:a2:04:2d:fd:4f:59:87:4b:88:c0:
c5:8c:2c:7b:82:bc:b1:88:fb:8d:e0:bb:c1:b9:25:
d0:81:ef:68:8c:0b:78:ab:78:0e:00:25:1e:8e:af:
46:df:a1:71:e1:4f:31:bb:74:e3:6e:6c:1e:1c:14:
22:89:a0:db:05:ae:8a:0f:ba:8e:be:d1:41:89:8c:
e9:ff:bb:3a:f8:a1:c7:fe:3b:e5:de:36:5c:8e:b8:
5c:6c:3d:0c:62:26:ca:df:7c:15:7a:80:05:e6:4f:
bf:a1:4d:04:ef:b6:5b:c4:0d:88:b1:b3:81:c8:bf:
17:30:5d:b0:53:5c:77:af:4b:b4:2f:87:eb:6c:46:
0c:77:f7:18:3c:15:f6:04:e0:9c:52:8f:e2:33:92:
32:a5:6f:5c:22:f5:49:98:3f:3d:ac:5f:26:c0:28:
c9:3d:71:99:5f:42:0a:89:20:4e:33:02:6f:2d:0f:
1f:74:d6:90:74:5d:22:fc:f0:70:f2:eb:43:2b:0b:
4c:ee:14:dc:57:d6:78:d3:a2:c0:81:f3:2a:20:ba:
7d:dd:46:4b:b8:ff:62:f6:83:a3:9a:5e:aa:1b:01:
1b:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:21:6C:70:AF:AE:3E:27:17:A0:ED:09:FD:97:50:D3:CB:BA:DF:87
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:f5:ae:2a:6e:9a:f6:22:bf:83:5f:e7:68:d2:42:01:e3:1e:
4e:3c:3b:69:ee:34:52:e8:f6:42:11:7e:44:49:80:e2:0e:dc:
a3:b4:18:3d:75:93:7c:4f:2a:e2:0d:b7:25:fd:63:c1:42:77:
4b:8d:60:f8:be:2d:21:73:3d:47:11:0e:a6:60:7f:24:e5:86:
7d:f2:98:42:59:4b:f3:09:49:1b:b3:6b:24:d1:cb:9c:f6:25:
5b:00:48:85:d3:39:91:76:71:bc:aa:a0:aa:4f:33:9c:dd:e1:
be:5a:ac:0e:75:d0:63:77:35:16:1c:94:d5:65:c6:50:ff:f8:
82:46:f5:4c:fb:d6:f8:44:20:96:60:e0:aa:92:77:7c:2b:19:
e8:b7:c1:3e:89:ee:89:c8:14:07:79:eb:11:26:af:f5:66:b4:
fa:6c:66:54:d0:d6:9c:42:6b:26:f8:c3:26:76:9b:98:b9:e3:
29:37:4d:17:c3:a9:54:85:17:46:57:9f:dc:dd:ce:11:a1:c7:
12:39:84:49:fe:68:1a:92:48:c9:b3:60:42:94:14:f7:90:bd:
48:d9:f0:b8:09:eb:d0:aa:bb:98:8c:dd:69:14:30:42:99:08:
12:09:4e:e1:58:98:31:44:53:2e:34:08:c4:8d:50:c0:5b:fb:
da:2f:71:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:46:33 2026 by rpki-client