Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: rxh2iA9+OkDT10sv0HXfjWdnh82gpZuaGXW5/oJ9lcw=
Subject key identifier: 05:FA:85:38:55:75:67:48:E4:7D:DA:50:4D:11:C5:78:F9:64:19:C9
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019CAAFD673C99A0549653FB8321F46DEA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 11BB
Signing time: Sun 01 Mar 2026 20:00:59 +0000
Manifest this update: Sun 01 Mar 2026 20:00:59 +0000
Manifest next update: Mon 02 Mar 2026 20:00:59 +0000
Files and hashes: 1: 9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa (hash: J/ckLwZzEt0PQV77vngn+NxdBjiE32bwHDQ3p9KUBfE=)
2: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: edzOy5x0VXeVAQQ2hc/kJkchUFw7dKHiKtucbbRBb+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:aa:fd:67:3c:99:a0:54:96:53:fb:83:21:f4:6d:ea:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Mar 1 20:00:59 2026 GMT
Not After : Mar 2 20:00:59 2026 GMT
Subject: CN=05fa853855756748e47dda504d11c578f96419c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:49:c5:aa:53:6e:31:d0:58:82:34:b8:23:cb:
b6:47:e5:06:f9:25:e5:2f:13:3b:d9:f9:7e:a3:33:
b8:b3:cb:8c:e9:a0:11:9d:06:e4:db:cb:3e:3f:29:
f0:45:51:68:c2:55:8f:a1:8d:82:9b:9f:bd:b3:78:
9a:39:fd:b8:42:69:84:44:4b:26:43:ac:25:db:aa:
b0:3a:5c:14:33:0c:48:f1:c8:7c:19:1b:b3:fe:9c:
e6:17:fa:7b:57:07:6d:48:cb:4c:27:44:71:fa:c9:
cb:81:34:63:bb:ca:79:de:c0:e7:53:75:13:1b:33:
a4:d1:49:68:52:ad:80:ea:f0:f7:a0:12:ea:67:f2:
70:dc:ba:d7:e2:e2:25:5e:c8:29:6d:35:36:c5:5d:
b4:d3:7b:4e:20:4c:f7:04:18:22:4b:14:b9:95:6d:
b7:48:c3:08:f5:b7:d9:0c:c0:2e:54:fd:9f:1d:f1:
a0:2d:02:00:5e:16:10:f7:9b:ba:50:07:cd:bb:ed:
4d:28:1e:f9:9d:11:9b:80:62:ea:dd:18:75:74:66:
84:1b:ae:e3:1e:f8:41:0c:1b:d6:eb:68:30:1c:89:
09:21:74:a8:83:cf:22:d4:1b:ac:47:e9:96:3e:83:
65:41:cf:31:d6:f1:6a:46:1e:d9:fe:fb:7d:ee:1b:
bc:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:FA:85:38:55:75:67:48:E4:7D:DA:50:4D:11:C5:78:F9:64:19:C9
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:cd:36:92:b2:85:15:4e:58:50:1d:2e:47:24:c9:e6:d2:7c:
10:11:e3:d3:c1:7b:c7:be:f3:07:45:57:85:90:d8:51:cf:f9:
e4:87:a8:18:21:63:4d:a2:f3:73:ad:7f:43:5d:64:47:4d:52:
08:32:22:33:33:90:b5:49:9f:2d:77:05:c5:f3:3f:53:25:6f:
a7:bc:d5:82:8b:fe:a1:c0:41:16:a6:ad:30:9e:cd:13:d0:ff:
44:09:53:b5:d2:ed:64:99:9f:e0:96:d9:01:be:d4:54:73:bd:
04:79:54:cc:d6:bc:0c:2d:4e:e2:2b:55:bd:34:56:c3:1e:a5:
f4:9b:81:b2:cc:81:43:2d:85:6c:57:a7:cb:50:20:c7:d1:46:
f2:1b:7e:3d:80:fa:cd:80:76:d2:88:60:6c:b1:43:ea:ee:96:
d7:ce:50:e5:c8:7e:78:72:86:0f:f8:95:25:98:da:ec:1f:e8:
77:82:6d:73:23:59:44:47:3a:29:90:b2:54:ca:6f:08:01:a9:
7a:84:07:45:6a:83:88:05:ac:bd:7e:28:82:a1:84:a7:7d:93:
37:03:a2:43:7f:e8:ba:90:ca:8d:cc:44:9b:be:8d:77:df:95:
fb:e7:a2:6e:38:e5:7c:5c:c5:e3:cb:04:8c:6a:be:30:3f:50:
6f:30:ef:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyq/Wc8maBUllP7gyH0beqRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3YjgyMjEwOTk0ODZhM2IxMzNlMDEzOWUzNGI5MzQyNjRj
ZGQ3MDAwHhcNMjYwMzAxMjAwMDU5WhcNMjYwMzAyMjAwMDU5WjAzMTEwLwYDVQQD
EygwNWZhODUzODU1NzU2NzQ4ZTQ3ZGRhNTA0ZDExYzU3OGY5NjQxOWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2knFqlNuMdBYgjS4I8u2R+UG+SXl
LxM72fl+ozO4s8uM6aARnQbk28s+PynwRVFowlWPoY2Cm5+9s3iaOf24QmmEREsm
Q6wl26qwOlwUMwxI8ch8GRuz/pzmF/p7VwdtSMtMJ0Rx+snLgTRju8p53sDnU3UT
GzOk0UloUq2A6vD3oBLqZ/Jw3LrX4uIlXsgpbTU2xV2003tOIEz3BBgiSxS5lW23
SMMI9bfZDMAuVP2fHfGgLQIAXhYQ95u6UAfNu+1NKB75nRGbgGLq3Rh1dGaEG67j
HvhBDBvW62gwHIkJIXSog88i1BusR+mWPoNlQc8x1vFqRh7Z/vt97hu8VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAX6hThVdWdI5H3aUE0RxXj5ZBnJMB8GA1UdIwQY
MBaAFDe4IhCZSGo7Ez4BOeNLk0JkzdcAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDkt
Njg2ZjgzNmNiY2FkLzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9kZTk1NmYtZTU1Yi00MzdlLTg1ZDktNjg2ZjgzNmNiY2Fk
LzEvTjdnaUVKbElhanNUUGdFNTQwdVRRbVROMXdBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArM02krKF
FU5YUB0uRyTJ5tJ8EBHj08F7x77zB0VXhZDYUc/55IeoGCFjTaLzc61/Q11kR01S
CDIiMzOQtUmfLXcFxfM/UyVvp7zVgov+ocBBFqatMJ7NE9D/RAlTtdLtZJmf4JbZ
Ab7UVHO9BHlUzNa8DC1O4itVvTRWwx6l9JuBssyBQy2FbFeny1Agx9FG8ht+PYD6
zYB20ohgbLFD6u6W185Q5ch+eHKGD/iVJZja7B/od4JtcyNZREc6KZCyVMpvCAGp
eoQHRWqDiAWsvX4ogqGEp32TNwOiQ3/oupDKjcxEm76Nd9+V++eibjjlfFzF48sE
jGq+MD9QbzDvEA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 03:59:10 2026 by rpki-client