Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: 3bUQ0Ybz0XdLeqzHm0NHt4aJWrooPubSc9iv9JBHP7w=
Subject key identifier: F7:E0:B3:27:42:E6:1F:7F:5C:C3:3C:E1:63:7C:4A:EF:86:DB:DC:64
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 01A1DACA73049C99D0608DFE040228DA065E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 0274
Signing time: Sat 14 Nov 2026 16:01:03 +0000
Manifest this update: Sat 14 Nov 2026 16:01:03 +0000
Manifest next update: Sun 15 Nov 2026 16:01:03 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: CwtQO84BGdIXFTT2fADgQnLbkEjdphCoGwGLrbeG3q0=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:da:ca:73:04:9c:99:d0:60:8d:fe:04:02:28:da:06:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Nov 14 16:01:03 2026 GMT
Not After : Nov 15 16:01:03 2026 GMT
Subject: CN=f7e0b32742e61f7f5cc33ce1637c4aef86dbdc64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:cf:48:14:6f:b7:40:0f:e7:92:02:50:bf:e1:
9f:0c:32:d1:83:cc:1c:da:eb:cc:d2:4c:b2:d5:2a:
b8:f4:62:81:bd:eb:fe:7d:93:b4:d5:cb:dd:15:96:
ee:99:d3:3d:4e:54:e7:85:5f:7f:f1:8c:8d:c8:5b:
98:37:f6:57:9b:cb:c0:70:fe:a0:b1:8e:7f:52:75:
20:ad:62:57:26:87:76:42:9c:34:7e:12:7d:ae:3d:
70:d9:44:4c:19:79:a6:01:b2:9e:93:d4:cd:11:a2:
74:c9:11:ed:f9:d1:ae:31:1b:a7:a6:4f:e1:46:ad:
02:1c:0c:b8:08:61:b5:ec:7c:7a:aa:26:ad:6f:c6:
e1:6e:43:9a:ac:c9:42:54:2f:7e:43:29:67:ce:76:
24:25:87:17:12:fb:42:f0:11:30:68:20:46:e0:5d:
72:24:46:72:df:bb:15:ce:f9:25:63:0b:1f:32:6c:
3d:3e:ba:8e:6d:ff:90:3a:27:70:83:a5:d1:72:e7:
c1:bc:cd:2a:d0:39:f1:c5:7d:4e:57:51:92:61:82:
84:ed:94:fd:41:e5:15:ce:a6:d4:80:a2:82:bf:ed:
0b:50:2c:f9:73:f8:94:0b:63:e5:11:d2:71:3b:f1:
00:db:d2:8a:62:7b:ee:e4:8e:84:50:37:0e:09:f0:
68:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:E0:B3:27:42:E6:1F:7F:5C:C3:3C:E1:63:7C:4A:EF:86:DB:DC:64
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:17:86:5c:d9:c8:0e:7a:e5:a1:50:4a:f7:ee:63:cb:b3:ad:
01:a5:9b:e6:45:db:95:5c:02:70:d0:95:3f:f4:7b:93:7a:56:
62:c2:44:51:1b:1e:ec:73:ff:c5:3e:dc:5d:da:70:28:80:c6:
68:12:5e:1b:17:af:ca:77:84:92:8d:a8:5e:a6:45:fd:6d:c0:
14:70:e2:9b:84:25:e9:46:4c:37:00:ca:88:33:e7:90:b3:b7:
dd:9f:7c:50:23:25:67:f2:0e:91:8d:ca:a0:f1:3a:53:2e:94:
99:71:60:03:0c:a5:3b:16:8d:76:4c:11:bd:c8:32:43:78:b7:
2a:b2:fa:32:4d:f4:ce:40:2e:73:03:38:c6:88:1d:b2:d3:4c:
9e:bc:4d:c3:d7:58:c7:32:45:78:0c:98:51:61:04:b1:28:8b:
7c:57:0d:27:4d:18:af:86:b7:16:fd:67:65:9a:09:f8:48:60:
b8:5d:5f:62:7c:e7:b8:7d:43:d2:f9:28:ab:05:db:8d:dc:1a:
56:e5:60:5b:ab:18:2b:59:96:d9:c1:ea:dc:ef:8e:c5:c1:bc:
c7:77:40:9a:a0:21:78:01:8a:7f:19:ba:a5:f3:07:b9:f7:b1:
f5:a2:28:25:e1:b0:e7:c5:e7:3f:c3:26:2e:ae:43:ad:d0:99:
5d:ee:5d:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaHaynMEnJnQYI3+BAIo2gZeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTYxOTIwMGVjOTYzZDE5NGE4MDE4ZDQxNjNkNzc4YTVj
YjUyNmEwHhcNMjYxMTE0MTYwMTAzWhcNMjYxMTE1MTYwMTAzWjAzMTEwLwYDVQQD
EyhmN2UwYjMyNzQyZTYxZjdmNWNjMzNjZTE2MzdjNGFlZjg2ZGJkYzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwc9IFG+3QA/nkgJQv+GfDDLRg8wc
2uvM0kyy1Sq49GKBvev+fZO01cvdFZbumdM9TlTnhV9/8YyNyFuYN/ZXm8vAcP6g
sY5/UnUgrWJXJod2Qpw0fhJ9rj1w2URMGXmmAbKek9TNEaJ0yRHt+dGuMRunpk/h
Rq0CHAy4CGG17Hx6qiatb8bhbkOarMlCVC9+QylnznYkJYcXEvtC8BEwaCBG4F1y
JEZy37sVzvklYwsfMmw9PrqObf+QOidwg6XRcufBvM0q0DnxxX1OV1GSYYKE7ZT9
QeUVzqbUgKKCv+0LUCz5c/iUC2PlEdJxO/EA29KKYnvu5I6EUDcOCfBoPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPfgsydC5h9/XMM84WN8Su+G29xkMB8GA1UdIwQY
MBaAFDdWGSAOyWPRlKgBjUFj13ily1JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYjhhNWUtNjZlYS00ZTIwLTllYTgt
MmVkZDIxNzgzNzAzLzEvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wYjhhNWUtNjZlYS00ZTIwLTllYTgtMmVkZDIxNzgzNzAz
LzEvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIReGXNnI
DnrloVBK9+5jy7OtAaWb5kXblVwCcNCVP/R7k3pWYsJEURse7HP/xT7cXdpwKIDG
aBJeGxevyneEko2oXqZF/W3AFHDim4Ql6UZMNwDKiDPnkLO33Z98UCMlZ/IOkY3K
oPE6Uy6UmXFgAwylOxaNdkwRvcgyQ3i3KrL6Mk30zkAucwM4xogdstNMnrxNw9dY
xzJFeAyYUWEEsSiLfFcNJ00Yr4a3Fv1nZZoJ+EhguF1fYnznuH1D0vkoqwXbjdwa
VuVgW6sYK1mW2cHq3O+OxcG8x3dAmqAheAGKfxm6pfMHufex9aIoJeGw58XnP8Mm
Lq5DrdCZXe5dLA==
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:21:59 2026 by rpki-client