Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
File: N_k-RoBmZm0Fu1TFSr41Al023v4.mft (raw, json)
Hash identifier: J+6xx07LJI4svYz7BCBhZtbmKTHXKR4dZ+zeU8/4Cvk=
Subject key identifier: 7D:48:7E:15:0E:32:E1:93:29:A1:E6:68:E3:6C:D4:96:61:D8:D2:9D
Authority key identifier: 37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
Certificate issuer: /CN=37f93e468066666d05bb54c54abe35025d36defe
Certificate serial: 019FA899814BAB11BC3FAFAA30AEA893ADAF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
Manifest number: 4C
Signing time: Tue 28 Jul 2026 12:01:00 +0000
Manifest this update: Tue 28 Jul 2026 12:01:00 +0000
Manifest next update: Wed 29 Jul 2026 12:01:00 +0000
Files and hashes: 1: IpOk2-baAJmBq3G0sGeE5MDiPGw.roa (hash: DK5qUCU0NDdVm+egXm1v6a3rNwDmd+BapaCsSxr03wQ=)
2: N_k-RoBmZm0Fu1TFSr41Al023v4.crl (hash: Tln7h/QPBEUoKM38I0nLCitM+zz+nER6IX73IXeNP+o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 12:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a8:99:81:4b:ab:11:bc:3f:af:aa:30:ae:a8:93:ad:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f93e468066666d05bb54c54abe35025d36defe
Validity
Not Before: Jul 28 12:01:00 2026 GMT
Not After : Jul 29 12:01:00 2026 GMT
Subject: CN=7d487e150e32e19329a1e668e36cd49661d8d29d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:2b:4b:83:9e:25:7a:53:c1:85:5b:af:89:92:
b2:d7:87:5e:49:7a:71:29:ab:29:b7:ff:f3:0b:06:
ab:74:10:b4:07:6a:21:67:0e:70:0a:48:d1:c9:5a:
3b:28:2d:2a:25:4d:2a:be:df:fe:59:a9:23:b1:98:
10:8a:e1:ca:55:84:65:da:fb:61:10:4a:8d:4e:33:
79:70:e6:54:91:bc:a6:01:ad:ee:22:18:1d:17:bd:
15:ce:ee:3c:de:bc:24:47:34:5c:ed:2b:7b:a7:4e:
3a:fe:6f:b3:cf:31:a3:01:aa:c2:1c:e3:e4:13:6e:
5f:49:96:41:b6:ec:80:da:ba:51:1a:c3:25:a0:da:
12:12:0f:93:48:be:58:a0:e3:c9:8b:be:0b:48:77:
a2:3e:25:6d:40:a0:ea:10:46:ba:f8:f1:f9:0d:f4:
ca:2d:c5:41:84:8e:4e:9a:43:7b:1a:96:d9:83:3f:
6a:f7:e2:d2:66:8f:d7:17:3f:17:1b:ca:c4:b5:c4:
73:0b:64:a3:e7:3e:e0:9d:25:b2:8e:fb:bd:21:b0:
02:bc:54:fb:6c:0b:7e:6a:27:03:dc:89:81:ad:43:
92:50:99:4e:fe:d3:6c:45:25:32:ba:b5:96:aa:36:
b1:6c:d2:29:20:ee:e5:91:e0:2b:81:6c:b5:f0:62:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:48:7E:15:0E:32:E1:93:29:A1:E6:68:E3:6C:D4:96:61:D8:D2:9D
X509v3 Authority Key Identifier:
keyid:37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:5e:5d:0b:80:bb:b2:54:b3:eb:bd:97:e1:7a:72:e1:de:a0:
78:bf:2d:a0:31:69:bf:ab:85:8f:51:d6:c7:3a:9b:cf:ca:5f:
cc:7d:66:0b:a0:35:4f:d9:b2:e4:24:d1:cd:bc:05:13:ab:ed:
5b:a9:54:40:fc:ad:49:1e:89:23:13:0c:53:c7:7b:40:21:bc:
8f:05:55:eb:61:93:43:f4:57:19:f8:51:dd:4f:aa:59:1f:ff:
0c:f5:5e:8f:b6:7b:21:5e:5d:a1:85:18:5f:b4:7a:cb:7a:84:
b7:cc:4f:c3:2c:af:59:41:7a:53:15:d6:02:20:bb:f2:5d:4d:
68:b1:a5:67:a5:bc:c6:36:fa:ac:aa:7a:b9:94:f3:47:45:03:
a8:4e:4f:d1:34:6d:9b:43:8e:b6:02:5d:51:03:d4:c1:c4:2c:
d2:f8:49:13:08:05:93:f6:a5:0a:63:47:36:c0:99:54:6e:90:
1f:76:a3:6d:ff:63:40:b4:e4:2d:c2:bf:07:9f:7c:28:fd:f4:
99:a7:f5:79:c8:8f:f0:2d:31:e0:20:af:a1:ef:57:ad:ed:c3:
64:89:30:af:39:d6:d5:52:6d:e0:fa:9f:4c:68:a8:d4:ad:ff:
e1:95:41:10:62:1f:b3:c7:8f:3b:c5:91:ab:24:de:6e:e2:27:
f4:c0:38:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 19:08:02 2026 by rpki-client