Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
File: N1PbxYKexQCzNCahiNA5k5W4Bqo.mft (raw, json)
Hash identifier: BF3lM601i4lrRK3ZNpNLNfHoOx3DLdsAVE7KFi+00Dg=
Subject key identifier: 45:C6:1C:18:0B:E1:85:99:BB:85:95:74:09:77:91:E3:59:6F:76:B4
Authority key identifier: 37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
Certificate issuer: /CN=3753dbc5829ec500b33426a188d0399395b806aa
Certificate serial: 019CADC7FBC92BBDC8333572F8FDC76A8955
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
Manifest number: 066D
Signing time: Mon 02 Mar 2026 09:01:30 +0000
Manifest this update: Mon 02 Mar 2026 09:01:30 +0000
Manifest next update: Tue 03 Mar 2026 09:01:30 +0000
Files and hashes: 1: 3DRrG7J90E6D7P-TCb1ZhqKcV5E.roa (hash: ho5K0lj5JJPTZqPc5laRkOJ8PLSca4Q9mg+67aNhjzk=)
2: N1PbxYKexQCzNCahiNA5k5W4Bqo.crl (hash: 4A+xnRb3hTy5EyNUNH1v2aHSiVRAdt4HNwvdoTK+IdY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:c7:fb:c9:2b:bd:c8:33:35:72:f8:fd:c7:6a:89:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3753dbc5829ec500b33426a188d0399395b806aa
Validity
Not Before: Mar 2 09:01:30 2026 GMT
Not After : Mar 3 09:01:30 2026 GMT
Subject: CN=45c61c180be18599bb859574097791e3596f76b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fa:ff:ab:a6:d3:01:ee:f9:20:3a:fa:00:02:
3c:e1:c4:ea:80:7b:8a:3a:b9:d6:69:2c:88:66:98:
7c:6e:22:96:18:78:4e:e0:f0:0e:f3:3c:a2:70:51:
de:8b:05:a9:c0:34:52:6c:14:18:5b:7d:f8:f5:94:
e4:bd:93:4e:28:e1:3c:9b:7d:ef:eb:73:1e:40:70:
08:84:04:e9:7a:79:c7:1d:aa:79:89:e5:c9:9c:6d:
51:1d:76:6a:f2:31:48:19:ab:48:e7:84:4b:57:ec:
6b:a3:b3:88:a2:29:27:ff:b6:55:08:45:ae:0d:d6:
74:5d:94:cf:46:13:08:94:71:e9:82:76:84:28:17:
d5:dc:30:16:59:3d:e3:f9:9e:8d:0d:14:2b:3a:3b:
73:36:e2:cf:6f:b3:59:b8:b8:ec:3f:bc:bd:5e:b4:
f9:14:0b:e8:1b:a1:5c:04:7d:8f:67:ee:97:e8:9f:
e2:ca:88:25:da:0e:a3:94:09:69:e9:f3:aa:62:09:
00:1e:68:73:71:19:9e:34:69:23:91:18:27:91:34:
03:fa:d2:cf:6e:52:6d:18:7f:4a:83:09:93:d6:ae:
91:72:ba:6f:3b:44:ea:32:b7:85:6e:d7:2d:7c:c3:
e1:1f:c4:d4:c7:24:c6:60:4a:f8:c0:d5:6d:53:5e:
a2:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:C6:1C:18:0B:E1:85:99:BB:85:95:74:09:77:91:E3:59:6F:76:B4
X509v3 Authority Key Identifier:
keyid:37:53:DB:C5:82:9E:C5:00:B3:34:26:A1:88:D0:39:93:95:B8:06:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1PbxYKexQCzNCahiNA5k5W4Bqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/341508-a0aa-40c9-ae0c-0379930f8286/1/N1PbxYKexQCzNCahiNA5k5W4Bqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b8:7c:0e:65:f3:fb:a5:85:76:ec:ab:bb:23:2a:d8:c2:b9:
1f:d7:28:41:51:25:86:5c:04:e4:6a:b5:ee:7b:66:c5:1a:59:
e9:bc:25:d8:fc:69:75:f7:ce:f6:e4:f5:e3:52:07:25:f3:94:
ed:3d:89:4c:d6:60:34:ba:26:50:a5:11:25:ce:c7:4c:46:35:
98:02:ac:f1:04:2a:fb:58:ff:e6:a3:4e:17:68:bc:cf:f7:c7:
89:8f:c0:1b:df:5f:88:61:7a:73:91:f3:08:ff:f6:55:cb:60:
ea:d4:88:13:cc:49:38:c3:d4:de:c5:af:73:88:1c:85:8a:82:
32:4f:24:d9:f8:5c:ca:5f:c9:df:03:56:df:c9:8e:0b:36:c4:
87:3a:ca:c2:fa:2f:8e:4d:90:a2:92:a8:ea:72:54:7e:06:bf:
23:11:d7:2a:b7:fa:84:b9:78:48:b9:ae:cf:d3:be:5d:2e:46:
b7:26:e5:36:5c:c0:58:78:98:db:96:c5:5b:bb:f0:7d:87:83:
f2:ee:62:29:aa:d8:f6:67:6c:34:dd:89:e6:1f:76:29:ed:fa:
18:52:60:fa:ed:e9:09:f3:59:a2:bd:03:27:e9:e8:3f:03:6e:
4d:98:16:64:35:22:f3:eb:dd:16:48:3e:48:f4:71:f2:eb:77:
12:71:f1:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:35:10 2026 by rpki-client