Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
File: N9hCIZddCjB-NmvwADTVClKoxF8.mft (raw, json)
Hash identifier: SCPQjclNXJEb11HNdNIy6sOACbDRj2sOVzjlgOdtyIw=
Subject key identifier: 8D:B8:DE:6F:6B:D2:51:31:25:7C:89:8C:7D:A4:CD:AA:A2:0D:29:3A
Authority key identifier: 37:D8:42:21:97:5D:0A:30:7E:36:6B:F0:00:34:D5:0A:52:A8:C4:5F
Certificate issuer: /CN=37d84221975d0a307e366bf00034d50a52a8c45f
Certificate serial: 01A0CA469122B36434D5FD40CAA2C23FC2D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9hCIZddCjB-NmvwADTVClKoxF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
Manifest number: 63
Signing time: Tue 22 Sep 2026 18:00:17 +0000
Manifest this update: Tue 22 Sep 2026 18:00:17 +0000
Manifest next update: Wed 23 Sep 2026 18:00:17 +0000
Files and hashes: 1: N9hCIZddCjB-NmvwADTVClKoxF8.crl (hash: pHSJfWFjhB84q9RasRLhwLncmdO8GI9r0/K+w/2dcdY=)
2: yydRHEjd2WtC18vukTFppaTTLNU.roa (hash: 1vERawjhslPRoZFsXdKGU2ou3zXbN1/dEo3YYFo9NAA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9hCIZddCjB-NmvwADTVClKoxF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:46:91:22:b3:64:34:d5:fd:40:ca:a2:c2:3f:c2:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d84221975d0a307e366bf00034d50a52a8c45f
Validity
Not Before: Sep 22 18:00:17 2026 GMT
Not After : Sep 23 18:00:17 2026 GMT
Subject: CN=8db8de6f6bd25131257c898c7da4cdaaa20d293a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:09:7a:95:14:a1:6e:84:c0:a8:97:37:d5:ff:
56:9b:73:f8:d8:e7:12:a8:77:24:07:a0:06:a9:2f:
58:b6:ae:b6:5c:09:33:4a:9e:4b:dc:54:1e:e6:e3:
eb:6b:16:ec:5c:54:8d:ba:2e:68:9a:c8:0b:bf:17:
b3:8b:03:92:04:3d:b7:8f:06:80:db:2a:52:7f:b6:
50:05:89:74:b2:2f:f8:3f:b2:70:c4:a2:93:0c:3b:
48:de:7a:8a:75:36:81:37:2b:b3:c2:8e:be:1e:af:
5e:7a:ba:85:e8:93:89:52:16:ac:8c:0d:3d:01:7d:
52:20:0f:9b:dd:43:86:f0:b0:35:b4:7e:ba:a9:8f:
df:5f:bd:fb:98:43:5d:8c:be:f2:99:9b:77:f3:ef:
bc:b9:b9:c7:5e:e6:c1:58:5b:eb:7e:34:67:af:90:
95:48:f3:b2:68:79:a4:d8:72:22:53:e2:9c:e1:78:
5b:73:e5:53:39:11:0d:76:20:b3:a6:4e:cb:4d:a1:
56:92:a1:de:eb:1e:e1:e5:31:76:42:52:ed:6e:00:
30:80:e3:49:ce:96:a4:67:e9:7e:85:26:bc:d5:b2:
64:dc:f1:9c:62:8e:e1:94:64:29:4d:a6:08:46:fe:
9e:0a:fd:bb:a8:c4:cc:8d:d3:07:31:2b:49:ca:25:
53:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:B8:DE:6F:6B:D2:51:31:25:7C:89:8C:7D:A4:CD:AA:A2:0D:29:3A
X509v3 Authority Key Identifier:
keyid:37:D8:42:21:97:5D:0A:30:7E:36:6B:F0:00:34:D5:0A:52:A8:C4:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9hCIZddCjB-NmvwADTVClKoxF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/80b2eb-130b-43fb-8d01-db14ce84c0cd/1/N9hCIZddCjB-NmvwADTVClKoxF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
03:83:2e:7a:5a:a1:37:d9:77:3d:28:f8:fd:e9:ce:5a:37:c2:
02:9a:e5:04:7c:af:de:8c:69:22:ea:77:fe:d1:dc:92:65:09:
d2:57:f0:0a:5f:e4:1d:f4:31:65:2f:84:52:bd:99:8c:b7:6a:
60:d4:c4:3f:e9:5d:d4:df:17:5c:cd:aa:6b:70:e6:02:19:ec:
92:a4:03:55:db:22:8e:ff:f7:f2:12:7d:c2:a9:96:82:6d:2f:
6d:eb:cf:8b:2a:51:2a:42:9d:41:be:00:28:42:2e:a6:9d:95:
0d:69:98:ed:8f:3d:d4:70:4d:05:9c:95:6d:d8:98:2c:37:6d:
60:eb:34:65:7d:32:5e:6f:c7:d1:23:6b:12:7c:e7:8f:0b:76:
43:49:5c:54:d8:01:63:b1:6f:ab:ff:18:c0:c1:20:c5:28:13:
70:bd:b1:19:9f:24:0c:19:bf:81:fb:16:b3:8d:d2:bf:11:13:
8e:7c:d9:08:95:90:3d:b8:1e:e5:0c:e6:ce:8c:6a:da:86:95:
e3:d3:7f:22:26:6d:21:45:ad:2c:84:41:1a:7e:71:c5:e5:24:
b4:05:a6:ff:4a:39:a2:ca:74:ba:7a:d0:2d:c5:a9:57:98:40:
79:c5:e2:34:98:92:48:e3:2b:ee:e4:09:bd:96:c1:c7:b0:e2:
3d:40:1b:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 01:10:22 2026 by rpki-client