Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: geKCOj/TGPXyYC0qTS5c+h/yp+3qQr8jPljJmspk0ao=
Subject key identifier: F3:8C:E1:A2:E9:3F:7E:1D:D0:73:B3:AA:E0:F2:9F:5B:4C:5C:9B:02
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 019F9580A226C112D659B37585C9FC056E92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 0147
Signing time: Fri 24 Jul 2026 19:01:02 +0000
Manifest this update: Fri 24 Jul 2026 19:01:02 +0000
Manifest next update: Sat 25 Jul 2026 19:01:02 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: XzvsvnFVaqR6p48Kt5OqPeAxjKHPWIFle/2ZbS+wNcY=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:80:a2:26:c1:12:d6:59:b3:75:85:c9:fc:05:6e:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Jul 24 19:01:02 2026 GMT
Not After : Jul 25 19:01:02 2026 GMT
Subject: CN=f38ce1a2e93f7e1dd073b3aae0f29f5b4c5c9b02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:92:be:57:7a:8e:94:df:ec:37:43:2e:66:70:
8c:a6:b5:91:86:43:77:87:67:64:f2:5e:72:9c:28:
a9:d0:ed:46:69:50:3e:55:74:ee:da:56:bf:19:8f:
4c:ab:6f:06:38:5e:47:a8:53:11:ce:2f:01:88:1d:
33:7a:52:ac:05:e3:2c:88:31:ed:34:08:92:0d:14:
ea:67:5b:d7:fc:df:f6:83:a9:63:38:3b:89:1e:21:
5e:f5:5d:34:6a:b2:a5:50:4a:db:6d:f0:32:c0:15:
fb:6f:8a:f9:a0:f7:78:ff:ad:1c:10:2f:f9:b6:27:
85:6c:86:8a:4d:08:67:1f:80:8d:3e:7c:91:60:e4:
14:2f:9f:02:9a:4c:93:cb:62:8e:d0:a2:be:4e:1b:
68:76:06:ff:c1:13:64:08:e8:4f:24:4d:54:b1:6a:
9d:7b:ef:ed:25:15:55:20:19:51:fc:09:3c:ae:4c:
29:05:ba:cb:ce:95:5a:24:b0:56:75:66:27:fa:75:
5e:aa:36:45:9f:9b:da:2e:ad:c8:8c:e5:a0:85:c4:
cd:fe:4d:1e:20:30:9c:88:aa:2b:de:70:19:83:e6:
46:4a:be:f7:6b:7e:35:78:4b:2a:55:5b:80:5c:b2:
d0:c4:0d:a0:10:58:34:91:7c:2e:fd:b3:8c:76:13:
64:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:8C:E1:A2:E9:3F:7E:1D:D0:73:B3:AA:E0:F2:9F:5B:4C:5C:9B:02
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:f2:50:f9:07:f9:67:d4:34:05:68:4a:f9:d2:14:89:31:7d:
ca:44:12:76:a2:27:b5:4d:a1:fb:21:bb:df:0b:42:de:e4:37:
c2:91:de:1a:e9:c5:3a:59:2d:37:c0:17:90:fd:60:02:d7:09:
e0:e3:38:e8:54:fc:46:26:17:48:e6:d1:56:7c:04:d7:89:89:
fa:71:31:d8:b8:17:65:cf:b5:73:03:58:3b:ef:85:ab:0c:6d:
b2:a0:53:e0:ab:04:db:e9:fa:fd:e4:2f:6e:3d:fd:05:6d:24:
28:44:42:f1:8e:de:cd:65:eb:92:d0:86:00:cc:a7:35:3e:2b:
b2:53:47:e1:d2:0d:66:f8:f7:b3:ae:a7:be:19:7f:4a:39:f1:
06:9e:91:fb:2d:11:f7:0e:b9:c0:f5:2d:da:44:8f:3b:85:9b:
7a:06:3a:2e:de:c4:2a:47:72:c8:7b:cd:37:e1:0c:8a:3a:07:
5e:b5:5c:3f:f9:9e:4e:71:e3:fa:c7:e7:5c:40:e6:23:98:dc:
0c:9d:70:b0:db:03:d1:b9:48:a8:08:9c:af:c1:2b:34:41:9c:
cd:13:88:24:49:8e:4a:1d:bf:bd:5a:c9:f8:61:0a:7e:f6:6e:
4f:a5:75:c1:d1:71:6b:12:51:77:58:c9:ac:2d:f5:44:13:07:
37:5a:b8:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:54:34 2026 by rpki-client