Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: WmZhtNM+fRFssQEPtEaLrsvPbr5c/H/PgHt41CMtaaM=
Subject key identifier: 88:E0:EE:ED:91:8E:75:F3:AE:94:2A:BB:CB:5E:B9:3D:B2:1C:75:B4
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019F95B768C7CB5587515EDBBFCAB9DFBA83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0981
Signing time: Fri 24 Jul 2026 20:00:52 +0000
Manifest this update: Fri 24 Jul 2026 20:00:52 +0000
Manifest next update: Sat 25 Jul 2026 20:00:52 +0000
Files and hashes: 1: GabJ5twvONaV1oDv6R6xRBsqjPI.roa (hash: VboUrV+ncooHpKApDm37rXqvF783TBpkHD8FibYc72I=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: a7PneTA3FR6zeQL7zHkIrQ/iyYMNDQuFgliv0LFNnDU=)
3: WqDYkLVstMonrCj4dC5iBXxan-U.roa (hash: G8VWWDKI9sp/TM5uduS2yPz7BYIgFFNJMWsqqgCcC2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:95:b7:68:c7:cb:55:87:51:5e:db:bf:ca:b9:df:ba:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jul 24 20:00:52 2026 GMT
Not After : Jul 25 20:00:52 2026 GMT
Subject: CN=88e0eeed918e75f3ae942abbcb5eb93db21c75b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:e8:88:62:52:e6:80:dc:45:88:10:36:0a:ad:
f2:6b:04:8c:52:71:50:7e:ae:2b:78:24:81:90:03:
54:17:79:64:7c:d4:77:4b:27:2b:2a:c3:58:9e:17:
90:ee:c5:78:ee:3c:9e:2a:02:7f:aa:0d:ac:c2:8e:
04:eb:cd:30:09:98:0b:37:20:64:13:6e:fe:30:d2:
2b:32:de:65:b2:06:c0:81:ed:9d:eb:33:ac:18:37:
cf:15:03:a6:8b:4c:92:3e:85:7b:32:89:60:a1:86:
c7:cc:96:6b:b7:db:23:bc:9a:fc:49:49:eb:01:63:
fc:5f:fe:8f:1a:d7:98:86:f1:3a:d7:65:4e:81:61:
ad:56:ce:07:1a:a7:af:ef:71:71:0e:93:e2:ab:6e:
4c:5e:06:c9:62:6f:b4:cc:f0:51:a9:0f:f7:96:a3:
5b:9f:1e:e9:ff:40:e6:3b:1c:68:f8:f4:e4:12:ff:
c5:40:55:78:35:fa:e9:4c:75:17:5f:e3:0b:b2:8a:
05:3a:a8:7f:58:57:68:f3:c3:36:e0:fb:04:fb:85:
03:09:42:13:40:57:ca:13:8d:51:d9:1d:86:f7:43:
09:55:0a:77:fd:0f:de:fc:62:23:32:67:26:35:35:
ae:c9:9f:0f:a5:f2:e8:d2:33:15:59:96:44:d0:72:
cb:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:E0:EE:ED:91:8E:75:F3:AE:94:2A:BB:CB:5E:B9:3D:B2:1C:75:B4
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:00:0f:da:53:e2:ec:b4:bc:f8:4e:61:01:e9:b1:45:63:41:
c3:0f:53:35:fb:c8:75:ab:9a:d0:13:72:9b:8e:02:56:81:d1:
5e:bb:3f:ec:fa:1d:7b:43:92:41:c0:0d:fe:e9:65:95:2e:85:
51:2c:c1:66:09:75:c2:45:14:b9:8b:e8:db:6a:9a:92:90:2a:
6c:39:44:f8:67:1b:62:0b:ac:9c:30:98:79:c2:e0:ab:48:29:
42:26:f9:c7:65:02:6b:69:9c:92:9f:31:43:25:d5:6e:17:77:
47:7b:b3:8e:9f:14:19:68:5c:a1:ff:7d:6e:19:c9:e7:12:dc:
79:7c:0f:64:ed:4d:88:ec:b1:58:41:47:e2:c6:1c:7a:4d:c0:
de:c3:e7:ef:74:45:59:d7:be:84:f2:1b:1d:05:cc:1c:aa:d9:
95:56:64:56:9e:81:4f:80:90:ce:ce:77:3c:86:33:12:35:25:
19:9b:68:5f:4f:56:07:a2:34:1e:e6:d6:11:41:92:b3:63:ec:
76:f5:49:c1:4e:c0:30:60:3d:3d:e7:0a:3c:ab:28:2e:55:c3:
58:e7:81:0b:84:85:de:e7:97:64:b2:71:1a:41:ba:d8:58:a5:
a8:80:4a:25:82:3c:81:b7:dd:81:90:c3:a5:b3:bc:b7:2b:6b:
81:11:a0:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 02:04:34 2026 by rpki-client