Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
File: N1oGTzAQJrw8-HZm1qggEoISqBE.mft (raw, json)
Hash identifier: HU+gUMZ0z0tU0GHsjWFYwe+akurTgohTwxomMcMjVSU=
Subject key identifier: 17:E7:6D:90:B1:B9:BC:E2:4E:52:49:14:05:6E:2C:FA:F7:35:A9:67
Authority key identifier: 37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
Certificate issuer: /CN=375a064f301026bc3cf87666d6a820128212a811
Certificate serial: 019F9580736B4F488E579C1A8DE9B8CD21F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
Manifest number: 1A25
Signing time: Fri 24 Jul 2026 19:00:50 +0000
Manifest this update: Fri 24 Jul 2026 19:00:50 +0000
Manifest next update: Sat 25 Jul 2026 19:00:50 +0000
Files and hashes: 1: 0wjE02Yih3QAwuX89YG9WK4LcqU.roa (hash: bgUpHxuxo5z/X3a9dt7qzrpb6s2kPlXWMM/YmhyYNmc=)
2: 1Ikbuy_DUz_8gty98LDVB8xGq50.roa (hash: zrTNzGLxlgMZow7vDwHgzsumwcJBM47dodboiin2uMo=)
3: AYYfOelXA_KC94AmW07goJ1sDNM.roa (hash: G3bFe4ykRMrvksPEIPlMzRpYOczTGF04bPmehlKEdvY=)
4: CMrPIdkb44qxQh52DtLH2me7jkw.roa (hash: itZcbLbqeJ3hQd52B6qbtQV5jsaCYlBbwqCtZuToeLQ=)
5: KHg4o_qYiFjIj1z7MMn1-JjQ0Ws.roa (hash: p0GS7gC/hvGTse2L+VAI4dc9d7pLdHRfk34pCCnPCNQ=)
6: N1oGTzAQJrw8-HZm1qggEoISqBE.crl (hash: l+83LpkOXlkwzHAbQHHtyXThHUVCbBiHt8yEVpAmi/s=)
7: V4awU416NdKWqSEhx0pKd4Dy2Xs.roa (hash: sHQn1RdsThojWX4t8ioY7M8sO+pX5hQoHqvVLBAXHMA=)
8: cQKpfWEtQeb4fA54RswsJeiFVQY.roa (hash: C9TBgzVVQS+nfqWgVytFXPcNcoSQYcfdOHlhq4bXBns=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:73:6b:4f:48:8e:57:9c:1a:8d:e9:b8:cd:21:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375a064f301026bc3cf87666d6a820128212a811
Validity
Not Before: Jul 24 19:00:50 2026 GMT
Not After : Jul 25 19:00:50 2026 GMT
Subject: CN=17e76d90b1b9bce24e524914056e2cfaf735a967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:6b:2a:9f:b5:5e:e6:8f:d0:22:64:80:e3:25:
bb:48:4b:4e:d2:89:bc:4b:b6:af:67:4c:66:07:32:
bd:7d:8f:05:1a:ca:62:2c:d8:12:41:a9:ac:79:45:
72:fb:68:7f:f7:2b:b9:80:11:66:1b:2d:55:c3:a8:
a9:97:fc:2a:0c:52:0c:1f:13:07:41:11:cc:11:fc:
70:82:09:2d:37:6f:d6:1b:99:43:0a:81:36:bf:67:
d2:89:d2:39:53:65:87:b1:be:a1:d3:1f:01:8c:12:
26:cc:70:99:a6:57:ca:64:01:b1:e8:09:41:96:d1:
3d:8b:62:19:0d:f7:fd:b0:d5:ae:1e:fe:39:37:a2:
92:12:ee:92:34:40:91:aa:21:01:bf:6d:22:66:14:
88:7b:d6:78:16:2c:36:5a:11:95:73:f5:cc:5b:28:
52:1d:69:9f:83:d1:06:ef:9b:80:e3:67:41:67:7a:
de:72:55:21:9a:e5:c8:eb:07:88:e4:d5:19:48:87:
9e:30:b9:57:f3:87:21:c1:04:b8:79:d0:be:dd:24:
18:06:22:34:d7:70:87:6e:0a:b0:fb:3b:ae:5d:c0:
f2:49:a8:03:de:d3:2b:58:c1:70:d2:74:a0:d3:56:
49:c8:23:df:b7:3b:16:fe:e5:e3:08:38:46:2c:f9:
9e:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:E7:6D:90:B1:B9:BC:E2:4E:52:49:14:05:6E:2C:FA:F7:35:A9:67
X509v3 Authority Key Identifier:
keyid:37:5A:06:4F:30:10:26:BC:3C:F8:76:66:D6:A8:20:12:82:12:A8:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1oGTzAQJrw8-HZm1qggEoISqBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/dc5881-3632-45af-bf59-f44a57ced73d/1/N1oGTzAQJrw8-HZm1qggEoISqBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:7b:9d:04:28:21:70:18:c9:a4:ca:ab:ff:8e:a1:05:4b:54:
15:7a:b1:2c:0c:a2:28:0d:5d:dc:5d:d1:3d:59:c1:30:2a:27:
90:d8:43:24:7c:b7:ad:e2:50:ee:02:ec:ba:a8:b3:7b:c2:74:
6f:8c:09:ab:52:80:03:5a:7e:72:2d:9d:29:0e:b6:b2:c6:d4:
3f:cf:f9:4f:26:ff:2d:2b:75:0a:9b:ee:3f:f0:bc:d0:d1:6d:
15:4e:ca:bc:b1:bf:3d:c8:d8:b9:25:80:21:b0:89:5c:f0:16:
b9:32:dc:58:43:3d:cc:ee:e6:e9:84:93:a8:bb:f0:97:63:52:
b1:47:96:7d:9e:e5:a3:18:74:b8:c6:ae:cf:f8:00:c8:ea:de:
7d:a7:7f:3a:90:e5:18:f7:40:96:1f:da:ed:83:e9:95:f8:78:
9a:6c:7a:bf:d4:f5:9e:89:c7:0d:fc:59:66:94:5d:54:a2:f7:
83:f2:3c:da:aa:ad:43:2e:6b:e0:e1:0e:4a:c7:53:e8:6c:ef:
15:03:1f:0d:db:8f:a8:34:7f:ba:04:43:1c:a0:ed:85:05:f1:
cf:9d:38:bc:b8:fd:e6:d5:8a:6d:b7:b6:8f:58:04:82:bb:de:
f7:ce:eb:0d:f8:ce:09:80:21:b0:1d:21:82:53:4c:1d:65:9f:
fc:34:f3:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:38:09 2026 by rpki-client