Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: PexVjdkia7kbSZAbE1/3Jwcwy3Y4orFTAUiY2p18HgA=
Subject key identifier: A0:16:52:0D:17:4C:0A:A6:2D:93:38:CB:28:74:50:A4:EE:36:35:28
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 01A0D9F13EF893ED6FDBD80E430436FF60C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 01EF
Signing time: Fri 25 Sep 2026 19:01:01 +0000
Manifest this update: Fri 25 Sep 2026 19:01:01 +0000
Manifest next update: Sat 26 Sep 2026 19:01:01 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: uM/LguGmaAeSzTKTV4y3oR4dPYHw3/BGYwQuu8p3228=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:f1:3e:f8:93:ed:6f:db:d8:0e:43:04:36:ff:60:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Sep 25 19:01:01 2026 GMT
Not After : Sep 26 19:01:01 2026 GMT
Subject: CN=a016520d174c0aa62d9338cb287450a4ee363528
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:23:5a:27:d1:a8:68:c7:08:1b:5d:6a:fa:04:
80:68:fc:2f:98:21:25:10:75:cd:ff:f1:ad:f3:fc:
6a:e7:f2:f7:8e:d5:17:1a:0f:41:7e:3a:58:8b:0e:
b1:eb:bd:2f:79:a3:f8:1b:49:d3:65:04:e2:b3:1f:
f6:72:3e:e5:6f:61:c9:30:be:c8:bb:5c:b3:d4:6b:
e5:fe:2b:bf:2e:c1:d4:5d:ed:4d:0c:f6:3d:5d:f5:
37:c3:9f:f7:e4:9c:94:12:42:93:4e:54:5e:00:a9:
ca:0d:76:ca:28:0a:ec:44:b9:c5:31:9b:a7:27:82:
c6:fd:7b:84:0f:84:28:ef:40:29:cc:2f:37:cc:13:
1a:0b:81:dc:f8:5a:d0:b2:b8:63:36:5e:29:6b:dd:
01:ea:f0:b1:c5:2c:e2:52:a3:af:7b:90:35:3e:b8:
28:cf:07:e7:7f:12:09:83:97:bc:f7:37:d6:62:e2:
7d:ea:9f:cc:1d:7b:06:9d:2b:3b:bb:d6:08:b8:a0:
66:55:81:ad:39:7f:bd:1e:b3:3d:69:67:2f:8c:aa:
0f:07:74:f2:93:16:b2:0a:0c:1c:46:db:36:fa:0f:
97:b3:42:1c:b8:4d:3a:60:2f:87:fb:50:c1:fb:ea:
c7:f6:9b:90:1e:95:a8:1a:ce:3a:40:28:13:18:4b:
68:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:16:52:0D:17:4C:0A:A6:2D:93:38:CB:28:74:50:A4:EE:36:35:28
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:29:2a:c3:37:25:9e:85:b7:3d:50:21:b1:d5:54:70:fc:12:
13:f0:19:3d:57:cb:d5:a9:ea:5d:5f:64:07:94:fe:c8:0e:9f:
9a:c3:22:c3:4d:7e:eb:5f:95:a5:9b:2b:27:cb:2f:9b:42:52:
44:f9:95:27:b6:28:8d:38:3e:e3:94:97:f7:e8:bd:78:50:02:
fa:8a:fd:5d:8a:ba:42:e3:eb:2b:93:6d:ed:8f:84:47:06:47:
c5:11:7c:17:9e:73:a5:9a:06:66:9c:d3:19:8c:10:ed:53:6d:
d2:e8:f4:1e:fb:e1:21:49:9d:74:b7:03:e6:16:d0:1d:21:26:
1b:87:7b:7d:e9:32:6b:04:41:6a:c0:e3:b6:f5:43:40:68:f4:
17:6c:49:00:d9:96:8f:7b:9c:de:98:2b:86:1b:ad:f8:66:c0:
59:eb:38:33:92:97:08:21:a6:08:a0:63:8e:80:69:01:eb:a0:
b1:16:b0:7f:c2:47:cf:6b:b5:53:3c:83:7b:61:02:80:8c:19:
cc:89:71:42:e9:e6:2b:87:ea:7a:08:f5:4d:7d:e2:53:f4:de:
36:18:04:e4:ff:ad:e6:1a:d8:43:87:61:e2:60:f6:81:f5:df:
e7:49:c8:5e:16:49:34:08:2d:8e:ee:63:6f:42:9a:52:dc:22:
0b:6a:2c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:33:17 2026 by rpki-client