Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
File: N6W4zf0deX2GBmDjS_oaKthf-dk.mft (raw, json)
Hash identifier: 0Dr4z8bLf8sLBTOvnhPQ8g0OjLB9Ehf/vwW8QoxGTa8=
Subject key identifier: 5F:47:ED:CA:6E:9C:1F:9A:CB:5D:DF:FC:A5:5C:F7:DA:15:2E:29:80
Authority key identifier: 37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
Certificate issuer: /CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Certificate serial: 019CADC7999962C7D8F8179070B67C1B5745
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
Manifest number: 184B
Signing time: Mon 02 Mar 2026 09:01:04 +0000
Manifest this update: Mon 02 Mar 2026 09:01:04 +0000
Manifest next update: Tue 03 Mar 2026 09:01:04 +0000
Files and hashes: 1: N6W4zf0deX2GBmDjS_oaKthf-dk.crl (hash: f63iBK5n0BuAyzSm5mmPQt6ZMirzRIWJE1Sa3q/V+IE=)
2: rNGlVa8TkjQC_3M9tVgFauOAU3E.roa (hash: AR/uZQW7gtN2BjMz+6MNQeE7vlvGCoJ/untsTNbYdcM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:99:99:62:c7:d8:f8:17:90:70:b6:7c:1b:57:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37a5b8cdfd1d797d860660e34bfa1a2ad85ff9d9
Validity
Not Before: Mar 2 09:01:04 2026 GMT
Not After : Mar 3 09:01:04 2026 GMT
Subject: CN=5f47edca6e9c1f9acb5ddffca55cf7da152e2980
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:e8:f9:b6:1e:6f:a2:74:15:bc:f9:c9:cf:75:
e2:99:99:dd:3e:01:58:28:6d:8e:be:92:87:9f:ff:
cf:8b:12:86:6f:69:59:b7:25:2e:90:a2:a8:a4:d0:
3d:fd:98:23:13:9c:26:2d:a0:04:84:77:07:ca:b2:
f0:a9:55:f0:3f:25:ec:af:f5:fc:13:82:05:01:6c:
5c:07:c3:82:aa:b2:8b:a9:5d:9d:1e:79:25:9e:d0:
6c:f3:ba:aa:cc:26:b1:cf:16:bd:c0:30:3b:6a:1d:
3a:20:ae:eb:8a:88:20:13:a8:ea:c8:f9:61:6b:c9:
12:96:c6:da:88:43:35:33:84:0d:94:15:0a:fb:90:
53:33:57:d1:71:50:42:eb:46:90:6f:df:6f:d8:ad:
87:51:85:ab:61:8a:c6:a5:66:db:39:d6:1c:84:52:
1c:5e:88:8b:1f:29:35:4d:d0:6c:aa:7a:35:b1:a0:
be:23:6b:4f:b9:44:c7:dd:a6:cd:f2:01:db:e3:57:
d9:3c:b0:53:71:2b:3c:81:f8:b3:83:2b:26:23:b4:
f1:a8:24:78:ce:0b:35:2b:92:68:04:71:c1:32:80:
6a:32:96:71:42:2e:99:e3:1f:66:d6:05:16:78:5f:
7c:0c:b1:bd:6a:0d:96:bd:d4:a1:e4:cc:13:92:67:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:47:ED:CA:6E:9C:1F:9A:CB:5D:DF:FC:A5:5C:F7:DA:15:2E:29:80
X509v3 Authority Key Identifier:
keyid:37:A5:B8:CD:FD:1D:79:7D:86:06:60:E3:4B:FA:1A:2A:D8:5F:F9:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N6W4zf0deX2GBmDjS_oaKthf-dk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/3a9021-2959-47e7-a615-81144fd01564/1/N6W4zf0deX2GBmDjS_oaKthf-dk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:42:0c:df:a6:0f:ce:51:d7:b1:38:a1:0a:63:a3:09:85:00:
cd:33:76:50:e6:70:2c:91:05:58:9e:d2:60:08:03:f0:2d:e8:
61:0d:3c:53:a7:86:98:5d:00:8d:5e:ef:25:94:50:97:84:56:
55:a1:cf:e4:a9:ff:a6:73:fe:44:9f:93:26:a9:fd:22:ff:73:
3b:e4:e2:74:43:e1:22:05:9b:8e:f5:80:4f:3e:3a:d9:2c:21:
8b:81:7d:74:2c:74:32:a5:43:38:41:c3:45:c2:81:92:a4:3f:
5a:ee:62:b2:48:f7:d8:76:15:07:a1:a2:0a:96:45:d7:20:fa:
be:26:51:21:bc:d9:80:39:d1:a9:10:7a:69:be:d0:a4:fb:ca:
65:1b:d4:9b:37:e6:6f:01:18:c1:d4:79:1e:b0:0d:ad:d4:04:
12:1a:0b:24:99:43:8c:1d:20:9d:01:db:46:3d:76:b6:f9:a2:
e0:e5:22:37:8c:8d:eb:a6:1e:52:5e:ed:f9:d0:86:9e:78:38:
61:98:ba:25:80:45:c0:13:6e:72:09:c3:82:59:3c:15:57:f3:
02:39:de:52:a1:78:cd:3b:fa:24:38:1b:ec:02:c0:36:c0:4c:
a1:6b:49:20:dd:0b:d6:3b:cf:c1:4c:93:e9:0d:64:6b:5d:0a:
f2:4d:77:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:12:34 2026 by rpki-client