Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
File: N9Zwai4nDLSGu0ckNGPMu_n01co.mft (raw, json)
Hash identifier: A9KS9bVbmRv5SrbagXmR7Djus+B3TJ83cxYZArRPAJA=
Subject key identifier: 0B:24:4A:F0:A1:FD:FF:0E:6B:FE:0B:C0:B9:1C:95:13:D8:9B:D9:CE
Authority key identifier: 37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
Certificate issuer: /CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Certificate serial: 019CAA58DCEC7D53F931319B20400FA9E65A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
Manifest number: 154A
Signing time: Sun 01 Mar 2026 17:01:16 +0000
Manifest this update: Sun 01 Mar 2026 17:01:16 +0000
Manifest next update: Mon 02 Mar 2026 17:01:16 +0000
Files and hashes: 1: L4LHXK0GX3W-TkIYyV116VIxXoI.roa (hash: fcLNxKQ8yWrXIL5Wmszwu+qvpRuxr2NO+f0WZHV/MxY=)
2: N9Zwai4nDLSGu0ckNGPMu_n01co.crl (hash: +thn1jPwYaYvbPx3bD/ph32ZKT1JZOxbPAH1NRpOmkQ=)
3: n-XYnJCsiXAQq8Z1rYQiS8TNNFQ.roa (hash: hXDmI2LoN2Vg0aHEdqhP1gGIgLWmSc2cb/qRIsBSYnw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 17:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:58:dc:ec:7d:53:f9:31:31:9b:20:40:0f:a9:e6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d6706a2e270cb486bb47243463ccbbf9f4d5ca
Validity
Not Before: Mar 1 17:01:16 2026 GMT
Not After : Mar 2 17:01:16 2026 GMT
Subject: CN=0b244af0a1fdff0e6bfe0bc0b91c9513d89bd9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:48:ad:4d:a5:d3:87:95:bb:c1:14:4c:aa:0b:
63:b3:fb:71:02:9a:02:1b:76:37:b6:e1:4e:41:ef:
ea:a2:66:b5:da:f9:7e:59:c7:01:bf:ff:27:44:dc:
69:cd:d4:46:b9:fa:2a:dc:95:52:07:5b:55:01:d5:
16:6a:ba:ed:6d:1d:24:e8:65:16:de:40:e6:08:9b:
fa:68:93:ba:64:2b:be:1d:da:04:c6:c3:4b:0d:5e:
a0:4c:9f:7a:86:9f:88:82:2e:2b:1d:07:d9:21:49:
0f:79:27:ac:e9:01:0b:1a:d7:7b:3f:b6:42:71:ff:
48:c3:b6:3c:b0:fc:af:2d:66:5e:50:57:a2:06:13:
d6:25:52:27:3b:d5:bd:30:16:8a:f4:e2:d9:a6:11:
fd:9b:0b:66:fa:32:fd:3d:44:9e:14:73:a5:11:2d:
9c:49:47:e2:81:3d:45:f4:b8:2f:eb:80:e8:f2:27:
44:e3:68:e4:46:8a:44:60:b2:d4:e6:e5:3c:89:99:
73:b1:ab:7e:0d:73:51:40:53:61:be:00:4f:06:84:
c7:c8:be:6f:f2:ef:13:1f:4f:b4:79:2b:a6:1c:c4:
fe:9d:aa:a7:9d:9a:ab:ce:46:b0:a3:60:8b:dc:09:
2c:81:a6:7f:1a:09:fc:00:74:2a:5a:75:ec:4f:e5:
43:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:24:4A:F0:A1:FD:FF:0E:6B:FE:0B:C0:B9:1C:95:13:D8:9B:D9:CE
X509v3 Authority Key Identifier:
keyid:37:D6:70:6A:2E:27:0C:B4:86:BB:47:24:34:63:CC:BB:F9:F4:D5:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9Zwai4nDLSGu0ckNGPMu_n01co.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/dc76ff-2b35-42be-ab56-5df2de08b695/1/N9Zwai4nDLSGu0ckNGPMu_n01co.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:72:a3:2b:0e:17:4f:f1:b6:94:5e:f5:13:e7:70:ca:c1:b9:
c0:39:0a:5d:11:cd:b4:3f:cd:e1:77:e9:61:59:c8:ba:65:20:
ca:3b:c3:92:da:3d:8d:5d:1e:46:4b:c9:b7:af:9b:72:b9:18:
25:af:cb:95:9e:d2:84:e4:15:36:35:73:62:4f:30:2a:a4:52:
f2:c7:ac:90:80:57:e2:ec:30:a2:b6:a1:76:0a:d7:43:e0:d2:
5a:27:ac:8d:28:dd:ec:7c:49:96:68:b2:56:1a:34:fc:99:bc:
dd:9f:c6:18:d8:51:c0:6e:bf:d6:92:2f:a6:57:a8:fa:0c:84:
f1:02:aa:03:f8:31:ec:e9:b5:7e:77:06:50:98:57:88:8c:1f:
1b:7b:8c:e1:9d:34:61:f6:92:0b:c0:a8:09:52:d5:e4:f6:11:
f9:51:e3:00:b6:ce:04:8c:93:c5:0c:99:9c:4e:48:a8:86:09:
3b:51:33:69:d3:b4:64:64:17:36:f9:d7:a2:a6:55:a9:9d:87:
c8:b7:64:11:92:14:c5:bd:f3:91:87:e8:97:dd:3c:2b:d2:93:
51:db:1f:15:78:75:9a:96:e7:be:51:cb:81:0b:d5:3c:75:fc:
a1:fb:c9:78:00:ab:68:f7:c3:e4:c5:63:45:d6:a1:05:a5:b7:
a9:f6:36:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:38 2026 by rpki-client