Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: YdOju4g/EMRBC6j8BZISip/1fiysisxu3pO3smTevnY=
Subject key identifier: 3D:16:BC:99:31:78:90:44:2C:CC:6A:8B:D0:5F:C2:82:E5:27:1F:41
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019CAB344D07FDE98BC48C58BDF7EC01E991
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1848
Signing time: Sun 01 Mar 2026 21:00:57 +0000
Manifest this update: Sun 01 Mar 2026 21:00:57 +0000
Manifest next update: Mon 02 Mar 2026 21:00:57 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: P39mltLdzBKftGG4BzMxC5gWj7w9Ifa7s8mT0/TUiyw=)
2: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
3: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:4d:07:fd:e9:8b:c4:8c:58:bd:f7:ec:01:e9:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Mar 1 21:00:57 2026 GMT
Not After : Mar 2 21:00:57 2026 GMT
Subject: CN=3d16bc99317890442ccc6a8bd05fc282e5271f41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:dd:ca:39:fb:51:36:fb:24:cd:48:22:9d:b6:
ed:76:76:b6:82:4e:fd:8a:e4:4a:f8:10:58:2b:a0:
aa:d9:d8:0a:ab:0e:45:01:4e:4a:90:76:26:3e:f8:
b0:1d:46:42:c3:15:28:81:45:e7:77:5c:eb:5e:05:
69:29:47:c3:c8:93:20:1f:02:b0:91:8a:9b:1a:46:
27:4b:8d:2c:f8:01:9a:50:90:4c:17:d0:b1:d3:fb:
31:49:ba:9f:7b:fa:71:58:e6:5e:a5:e9:1a:12:ec:
dd:23:ed:d3:78:71:cb:a7:c2:7c:7b:3f:3b:36:c1:
ca:f6:1a:e5:ba:d6:81:bf:7e:bd:d0:f2:6b:0c:60:
cc:85:c3:96:47:3b:7e:05:e4:22:c7:e1:bc:8d:4c:
97:28:48:7f:91:41:c7:1f:df:c9:0f:66:af:92:1b:
ed:4d:2f:2f:f1:69:2a:c0:8c:c1:a2:b7:f5:44:e7:
3a:dc:8c:36:7a:3b:07:42:12:df:f3:b3:1c:fc:ba:
df:3b:e3:ac:6f:8d:f3:f1:21:6e:1d:45:22:03:93:
ef:93:e3:9e:29:0f:95:66:af:64:df:fa:a6:5a:42:
53:6c:24:20:2d:47:f8:2a:99:e0:b5:31:d2:28:d7:
4d:5b:85:cf:9e:00:2b:80:44:b4:64:3b:57:be:a0:
00:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:16:BC:99:31:78:90:44:2C:CC:6A:8B:D0:5F:C2:82:E5:27:1F:41
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:81:bb:d0:51:e8:3e:06:d6:66:19:f9:3b:68:83:8d:63:78:
a5:69:17:ff:3d:ae:50:a8:c4:66:d3:db:a2:5b:9d:e9:69:b1:
85:5f:b7:18:a1:f5:41:df:82:42:30:46:ed:3c:65:1b:b7:75:
3f:cc:eb:53:3f:e5:6f:68:0d:a5:a7:55:2d:cc:62:b8:32:2a:
4c:f1:35:00:2b:f5:00:4a:60:a9:6d:77:e3:7f:d6:00:9d:4a:
72:dc:da:4e:a7:83:9c:60:6c:9a:71:eb:84:11:79:17:fc:9a:
43:a4:9f:a5:97:07:5f:fe:a8:3f:ec:ce:99:c4:99:78:ce:4d:
d5:e4:a3:74:b0:e2:5d:4c:20:f1:c8:b1:41:88:6c:d3:96:76:
8f:81:66:93:8f:87:2e:7f:6d:0f:b6:25:ae:c2:94:51:e9:6d:
f6:bd:b4:90:ff:9e:b7:a8:97:e1:8d:3c:4f:ae:9d:3c:13:51:
d1:31:a9:66:fb:a9:84:5f:06:85:0d:cb:21:a9:40:46:9b:df:
f7:c4:86:5a:b2:f6:2a:78:81:16:79:1c:ea:e9:12:1d:68:41:
b7:56:54:08:2c:0f:96:b1:9a:4c:5c:53:9d:3a:da:2b:58:07:
8a:0f:bf:e0:d6:d4:92:c6:7d:c0:25:75:df:c6:ef:4c:b9:7a:
33:bb:03:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyrNE0H/emLxIxYvffsAemRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZDI3ZmMyNDQ0M2ZjZGQ0YjFiNjVjZmM4MDc4YzRhMTQy
ODlmOWUwHhcNMjYwMzAxMjEwMDU3WhcNMjYwMzAyMjEwMDU3WjAzMTEwLwYDVQQD
EygzZDE2YmM5OTMxNzg5MDQ0MmNjYzZhOGJkMDVmYzI4MmU1MjcxZjQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk93KOftRNvskzUginbbtdna2gk79
iuRK+BBYK6Cq2dgKqw5FAU5KkHYmPviwHUZCwxUogUXnd1zrXgVpKUfDyJMgHwKw
kYqbGkYnS40s+AGaUJBMF9Cx0/sxSbqfe/pxWOZepekaEuzdI+3TeHHLp8J8ez87
NsHK9hrlutaBv3690PJrDGDMhcOWRzt+BeQix+G8jUyXKEh/kUHHH9/JD2avkhvt
TS8v8WkqwIzBorf1ROc63Iw2ejsHQhLf87Mc/LrfO+Osb43z8SFuHUUiA5Pvk+Oe
KQ+VZq9k3/qmWkJTbCQgLUf4KpngtTHSKNdNW4XPngArgES0ZDtXvqAAfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD0WvJkxeJBELMxqi9BfwoLlJx9BMB8GA1UdIwQY
MBaAFDfSf8JEQ/zdSxtlz8gHjEoUKJ+eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQt
NDhiMTY2NGQ0MGQ1LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9kOGM1OGQtOGQyNC00MjgwLTkxZmQtNDhiMTY2NGQ0MGQ1
LzEvTjlKX3drUkRfTjFMRzJYUHlBZU1TaFFvbjU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcYG70FHo
PgbWZhn5O2iDjWN4pWkX/z2uUKjEZtPbolud6WmxhV+3GKH1Qd+CQjBG7TxlG7d1
P8zrUz/lb2gNpadVLcxiuDIqTPE1ACv1AEpgqW1343/WAJ1KctzaTqeDnGBsmnHr
hBF5F/yaQ6SfpZcHX/6oP+zOmcSZeM5N1eSjdLDiXUwg8cixQYhs05Z2j4Fmk4+H
Ln9tD7YlrsKUUelt9r20kP+et6iX4Y08T66dPBNR0TGpZvuphF8GhQ3LIalARpvf
98SGWrL2KniBFnkc6ukSHWhBt1ZUCCwPlrGaTFxTnTraK1gHig+/4NbUksZ9wCV1
38bvTLl6M7sDgw==
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:54:41 2026 by rpki-client