Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
File: N_k-RoBmZm0Fu1TFSr41Al023v4.mft (raw, json)
Hash identifier: NARbYq/0kkS+iPEeNYDYsxrDkTqEdkOUtcNGTxFFi/4=
Subject key identifier: 23:61:84:52:12:04:AE:D4:DF:0C:27:B5:07:01:3E:32:29:36:63:5B
Authority key identifier: 37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
Certificate issuer: /CN=37f93e468066666d05bb54c54abe35025d36defe
Certificate serial: 01A0D9BA91FE0FE6C9E68964E72163DEEB66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
Manifest number: EA
Signing time: Fri 25 Sep 2026 18:01:17 +0000
Manifest this update: Fri 25 Sep 2026 18:01:17 +0000
Manifest next update: Sat 26 Sep 2026 18:01:17 +0000
Files and hashes: 1: IpOk2-baAJmBq3G0sGeE5MDiPGw.roa (hash: DK5qUCU0NDdVm+egXm1v6a3rNwDmd+BapaCsSxr03wQ=)
2: N_k-RoBmZm0Fu1TFSr41Al023v4.crl (hash: kV1Zi5i4BtQpW9C35XGm8dnPeJoX56L7nrFLqK5hNiU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:ba:91:fe:0f:e6:c9:e6:89:64:e7:21:63:de:eb:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f93e468066666d05bb54c54abe35025d36defe
Validity
Not Before: Sep 25 18:01:17 2026 GMT
Not After : Sep 26 18:01:17 2026 GMT
Subject: CN=236184521204aed4df0c27b507013e322936635b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b2:f2:0a:15:8f:29:73:d1:1f:8b:ef:11:4f:
64:91:cb:cd:92:46:e7:cb:71:56:2a:7b:ee:57:fa:
cb:ee:e6:52:21:f6:e9:fe:0c:5f:ab:94:9e:0f:af:
0d:87:9f:71:78:8f:05:13:98:bf:ea:6b:e2:b5:fd:
e7:a3:04:08:22:1c:02:e8:fc:e2:ed:2d:86:5e:0a:
3b:75:b8:90:08:47:d9:69:21:95:4e:73:ce:c3:61:
06:07:f5:5f:09:64:2a:38:5f:5f:41:e3:6b:90:f0:
89:b8:75:0a:31:9b:3d:43:bb:23:3b:85:7f:c1:b2:
58:c6:75:3b:ca:58:4c:0b:37:13:9c:3f:b3:1a:f9:
61:1d:1a:05:a9:83:e2:1e:94:6f:a1:0a:de:53:05:
b0:db:b1:9f:41:a0:8c:07:e0:05:37:5e:27:84:23:
ed:48:9e:c9:3c:c1:dd:15:1a:de:37:59:d8:da:da:
8c:5c:bd:16:60:f3:ca:a2:0f:d7:12:0f:57:c2:9d:
2e:c2:d5:36:86:ee:dc:8f:c7:ac:93:c1:ba:ca:fa:
26:02:75:b1:df:dc:86:28:3f:fd:8f:54:02:03:07:
5c:62:19:b7:a5:4e:0e:67:9c:81:88:62:b7:a4:a8:
d3:14:ef:58:e7:0e:99:3b:05:69:83:dc:29:ca:96:
17:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:61:84:52:12:04:AE:D4:DF:0C:27:B5:07:01:3E:32:29:36:63:5B
X509v3 Authority Key Identifier:
keyid:37:F9:3E:46:80:66:66:6D:05:BB:54:C5:4A:BE:35:02:5D:36:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_k-RoBmZm0Fu1TFSr41Al023v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/65d3a4-5ccc-4037-a8f8-0a32711665ad/1/N_k-RoBmZm0Fu1TFSr41Al023v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:62:94:b2:86:ed:e6:8c:d9:c5:97:2f:36:2c:58:dd:5b:7c:
59:cb:88:e5:a8:ad:87:fa:69:40:97:8f:bf:c5:e2:21:a7:f6:
72:55:bd:63:a4:ce:72:f7:31:84:1b:41:79:f6:f2:41:be:97:
d2:5a:6f:5a:7c:28:a4:42:65:06:5b:50:a3:6e:6d:d1:44:a9:
05:cf:b0:73:1b:5d:0d:f6:75:22:64:8c:92:bd:47:45:4f:f6:
78:ff:58:ca:94:fc:be:75:b4:14:df:90:b9:0f:df:da:f2:cc:
6a:79:1e:e4:f4:63:51:fb:43:47:6e:99:09:07:60:87:25:cf:
44:da:dd:f5:06:db:d9:b1:eb:e3:4f:5c:ef:79:52:75:52:cd:
c1:b6:3f:77:58:88:94:0b:f8:a6:bc:64:3d:da:ac:e2:3a:2e:
50:8c:75:2c:1d:0b:44:75:a7:43:ae:76:28:12:a0:a5:68:4a:
1d:ff:cf:77:11:d0:0c:13:e4:5e:a7:71:d8:ab:6a:98:a1:97:
76:19:00:78:78:f8:2a:3e:69:f5:3c:b5:cb:d3:be:c2:0b:df:
ff:8f:a6:f0:bb:02:7a:ab:8d:a5:1b:db:fd:f0:b1:4e:3e:82:
ee:b2:c9:b0:88:37:0c:6c:9d:9e:04:00:81:26:bc:3b:0b:12:
f8:bb:6d:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:40:41 2026 by rpki-client