Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: m7SCmpnPNan6GKtXPsRN+KlP96x2FdKITXEQHlGK1m4=
Subject key identifier: 38:49:21:BA:72:B8:33:99:9D:9E:A9:33:C8:1D:C5:4F:6C:5D:A9:43
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 019E1EDA5E2274BEC324438890DCD7E4D100
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 85
Signing time: Wed 13 May 2026 01:01:27 +0000
Manifest this update: Wed 13 May 2026 01:01:27 +0000
Manifest next update: Thu 14 May 2026 01:01:27 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: MDb+qo3bFmzQpDxM01NbbUel3q0k/+u59xGavOrCGTw=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:5e:22:74:be:c3:24:43:88:90:dc:d7:e4:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: May 13 01:01:27 2026 GMT
Not After : May 14 01:01:27 2026 GMT
Subject: CN=384921ba72b833999d9ea933c81dc54f6c5da943
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:9f:1f:1d:11:53:7e:79:15:04:07:fd:ba:48:
b8:7d:ce:57:e8:10:de:43:5e:8e:b0:d0:5c:41:6b:
ab:0a:be:58:e5:65:6c:94:ff:83:62:c3:3b:d4:aa:
6e:8c:cf:5a:9d:84:a3:b3:51:0d:e3:4d:ae:c9:52:
89:e9:bf:6e:28:3f:6c:35:72:0b:ae:3e:13:08:5c:
45:17:0d:d3:f6:49:85:82:fd:90:cd:02:50:4b:95:
cb:c5:72:6b:20:2c:34:e6:16:24:c7:24:74:84:24:
78:c4:a3:25:f5:83:33:a1:e2:d0:cd:b8:f1:5b:29:
07:da:31:75:05:af:29:d3:ec:fb:5c:b4:62:da:de:
51:e1:a1:bf:c2:4a:e6:82:6e:5f:6c:f0:84:3d:cf:
30:49:35:ca:67:24:23:5b:26:a6:70:77:eb:14:75:
45:e7:6d:b5:c8:10:2d:de:a8:c6:4f:58:32:d6:34:
c9:89:32:79:a3:ac:1d:1a:e3:23:4f:fc:81:31:ac:
d8:e3:1b:73:47:49:97:c3:74:71:d2:3a:b7:91:05:
08:fe:06:69:49:3b:8e:13:7c:e5:45:4a:dd:25:75:
9e:03:78:e5:c4:f6:68:1d:cc:51:e4:5b:96:14:8d:
ba:49:14:6d:00:49:f3:83:e0:7a:20:f1:c9:59:b4:
d8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:49:21:BA:72:B8:33:99:9D:9E:A9:33:C8:1D:C5:4F:6C:5D:A9:43
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ad:88:a3:66:2b:a0:ee:d6:92:32:41:12:7c:2e:8b:c7:02:
ac:6f:df:07:ff:b2:ef:f3:be:b3:4b:7e:c8:ce:88:3b:b0:12:
15:84:dd:57:c3:1e:6f:68:5d:ee:23:96:79:55:0c:15:d0:40:
d9:ba:06:b1:9b:1d:8d:a3:49:a8:f2:69:e7:35:4b:50:b4:a1:
d1:41:38:f0:56:eb:d0:a6:8e:bd:89:fc:fc:d3:3c:47:6a:31:
4a:65:64:eb:ca:eb:4d:a8:f7:d4:16:2d:41:00:ae:89:e7:88:
0f:1f:48:e9:c1:97:fa:b2:91:7f:fa:2b:db:3b:32:d9:d9:ae:
f3:a1:2b:f2:dc:b6:3e:93:de:fa:b3:1a:9d:f6:0d:bf:15:da:
f0:fb:b7:69:50:67:6d:96:5e:08:fd:86:98:40:f3:34:02:b3:
cc:3a:a5:43:60:cf:b4:70:36:bd:59:dc:bf:7e:7e:bb:ba:50:
fa:11:2b:55:f3:9f:52:f3:24:98:fc:8b:a9:d4:a2:36:85:2f:
da:03:ce:91:19:f0:6a:95:7b:0d:1c:36:71:f5:55:1d:66:66:
0d:ab:63:18:f1:86:b9:4a:9e:a9:92:5e:92:85:ab:89:09:b1:
37:19:50:78:44:8c:71:86:f0:5f:46:e9:e8:41:c2:14:9c:1f:
e1:5e:83:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:15:30 2026 by rpki-client