Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: ih3mVSfHogVeyN+9zcCIzLN1KGaCHJ0y+HAGydMjqN0=
Subject key identifier: 30:B0:D6:46:9B:DA:64:05:52:BD:C8:D2:FB:33:77:FF:77:E4:BB:42
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 01A0C39F96FF80288C7BD597473A41064F3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1A67
Signing time: Mon 21 Sep 2026 11:00:10 +0000
Manifest this update: Mon 21 Sep 2026 11:00:10 +0000
Manifest next update: Tue 22 Sep 2026 11:00:10 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: HQ50vqdcZ8DmBQjOI3Opn8FxzoJl+x18PhEb46TTFLs=)
2: e8LfT7gfSGa2muv0jF7A1t1LYdk.roa (hash: WRAYYzwkRc+Wb2Yiz2tOnruT9Tcor90WcXfJXFu2bXg=)
3: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
4: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 11:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:9f:96:ff:80:28:8c:7b:d5:97:47:3a:41:06:4f:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Sep 21 11:00:10 2026 GMT
Not After : Sep 22 11:00:10 2026 GMT
Subject: CN=30b0d6469bda640552bdc8d2fb3377ff77e4bb42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:64:ff:ba:35:16:42:cf:01:ce:bd:83:be:a0:
e8:0a:58:7d:b5:ff:57:fb:6e:7a:32:9e:81:2b:9e:
ac:b9:06:e4:5e:84:7c:20:a5:c9:28:c3:99:8d:aa:
67:3f:0b:0b:b5:c6:34:7f:1c:72:a9:3e:64:c4:eb:
ee:b2:a5:c7:0b:8c:be:cb:45:db:e9:1c:87:11:64:
8b:7f:4f:45:14:a2:a1:60:ed:dc:08:f3:f6:68:b3:
e0:65:d6:b4:81:1a:ac:84:72:db:8f:95:db:31:5e:
34:11:fa:06:5d:cc:80:4d:17:e4:3c:d4:11:71:ed:
8b:b8:1d:fd:20:59:65:98:ce:8b:d4:f2:41:5d:25:
e8:ea:3e:e4:ed:28:fe:71:58:e8:65:a4:26:f8:a3:
e0:bc:1b:1d:3a:8b:02:97:00:d0:32:a7:46:1c:15:
58:ba:e8:d1:37:26:fb:06:5f:a1:58:08:b4:fb:03:
b5:28:71:99:7a:f5:07:f4:88:3a:82:28:c7:8c:61:
c0:d9:be:55:0d:7d:67:f8:e0:52:4f:51:01:79:e2:
85:c7:37:ab:3e:4e:e5:3d:b1:8e:57:b1:d9:61:e8:
20:59:16:47:88:1a:ac:2c:a0:35:27:2f:c4:31:f7:
a1:c6:7d:c2:c6:9a:b7:ff:b8:f2:da:47:dd:a6:d9:
27:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:B0:D6:46:9B:DA:64:05:52:BD:C8:D2:FB:33:77:FF:77:E4:BB:42
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:92:d1:47:cf:6e:52:5b:98:49:c2:4e:bb:77:71:62:da:97:
49:d9:0d:7f:b9:b7:c1:b4:37:0c:5f:fb:2a:b2:69:bb:e7:84:
30:7e:ca:ab:55:28:4d:e4:f1:7c:1f:1f:fd:d4:63:92:8d:b1:
6f:95:ff:e1:85:fe:55:39:61:c1:f8:0c:db:a6:c8:d9:d5:43:
c6:d4:a6:d4:66:17:5f:2f:81:48:1c:f2:42:1d:68:d0:f1:dc:
99:cc:75:f5:19:69:09:87:41:23:fd:50:6d:73:85:0e:e2:bf:
48:c0:dc:c7:64:f8:42:69:a4:09:fc:7b:5c:f4:1f:24:80:c0:
d0:62:9f:19:59:9e:65:89:c4:0d:e4:43:8b:ed:07:9e:85:e5:
2c:72:3e:0c:a3:27:87:3d:dc:a1:4c:e5:52:c8:22:54:86:37:
28:62:40:15:25:25:3e:c2:0c:d3:31:5f:59:72:ee:03:24:21:
7a:09:31:b6:f6:af:5a:89:b7:70:03:3e:07:ad:8a:42:f1:45:
c2:b4:4f:61:c2:e9:da:de:88:16:08:b4:66:8e:72:8c:12:28:
5a:06:1d:1d:be:0d:fa:1a:f2:f0:26:b7:85:d9:4f:e4:96:d6:
86:c7:47:a0:a8:3e:4b:b0:89:bc:89:83:4f:f6:ba:a2:fe:2c:
d2:3a:f8:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 15:47:19 2026 by rpki-client