Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: sAu3CC6GNENZ0UYy83DPJZlREHrWUszgS2rPcOwb23Q=
Subject key identifier: 67:3D:96:FC:8A:00:34:99:56:26:6D:D0:1C:A7:97:0D:02:7E:F9:45
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019E1EDA1C9753CEEC0209B47E115918C0DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 08BE
Signing time: Wed 13 May 2026 01:01:10 +0000
Manifest this update: Wed 13 May 2026 01:01:10 +0000
Manifest next update: Thu 14 May 2026 01:01:10 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: RG60aVzERSU3nwKXP0tIVLAjLdUNNP86kES+bGTSn2s=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 01:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:da:1c:97:53:ce:ec:02:09:b4:7e:11:59:18:c0:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: May 13 01:01:10 2026 GMT
Not After : May 14 01:01:10 2026 GMT
Subject: CN=673d96fc8a00349956266dd01ca7970d027ef945
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b3:e3:0d:fb:c0:46:ef:36:b7:84:f2:8b:4a:
5a:99:b1:73:b9:a5:d9:1e:82:d8:72:d8:f0:a3:7f:
6b:48:7a:29:31:2d:9f:32:de:1c:48:c8:92:b1:dc:
af:c2:d6:22:28:60:54:f0:f4:e4:2f:2f:c7:af:20:
b8:6e:b2:c8:36:2f:19:c8:91:89:a6:9c:92:05:56:
bf:cb:5f:d8:71:19:4a:5a:8e:a2:43:a1:90:1a:63:
7b:96:43:9a:f5:e6:d0:8b:af:b6:70:33:b8:fc:05:
75:44:c0:d6:9f:fa:f2:e6:39:08:c0:99:4b:f1:77:
ed:41:37:e6:2f:bf:0f:49:e7:36:9e:bd:22:dd:35:
17:7d:f0:16:c9:af:7b:38:c5:1e:c5:9e:ef:68:24:
37:32:ea:c0:ce:b9:94:a2:4d:e8:17:dc:21:3a:0f:
8d:c0:47:99:41:e6:17:54:b0:20:9c:07:4c:68:60:
ee:b0:5f:dc:f4:94:15:93:46:69:99:72:22:81:3b:
10:2a:a5:80:18:6f:76:6c:bf:fa:a6:20:dd:ac:13:
31:62:f7:67:c9:73:a3:f6:df:0d:c8:30:28:ac:fa:
b3:49:d0:ac:58:2d:64:01:f6:44:0c:c6:06:99:d3:
b2:11:1b:e5:c6:ed:98:0b:05:16:b9:d5:b8:26:7a:
69:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:3D:96:FC:8A:00:34:99:56:26:6D:D0:1C:A7:97:0D:02:7E:F9:45
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:4a:9b:63:2b:75:11:b0:41:34:78:36:a7:2d:e1:65:1c:be:
e6:95:7d:1c:2a:9e:b4:2f:cf:8f:29:59:dd:64:97:fe:8e:2f:
e1:18:ce:86:83:55:b4:4d:4e:96:bc:db:a8:d3:4d:7b:6c:26:
6f:45:8c:27:d8:ac:4c:95:64:f0:8e:07:7f:b1:56:20:93:9b:
d3:fb:07:72:86:2f:b9:66:67:fa:d3:40:70:56:ff:f1:ff:2e:
ae:80:e4:2e:23:62:5b:ef:84:a0:3d:55:91:ba:52:11:f7:a3:
a7:e1:3a:03:7d:41:9d:af:5e:c1:a2:3d:3c:88:19:6f:fa:d5:
a9:e1:bb:3a:02:db:15:5c:b3:48:ca:6d:d6:d9:4c:ef:75:e4:
8b:be:1f:16:6d:ad:4f:84:3d:70:3c:09:29:20:be:74:d7:d2:
c1:64:5d:a4:74:f0:12:ce:4f:e1:5d:70:7c:a3:8a:dc:32:19:
3d:f5:a2:93:99:cf:a0:b2:8a:df:e5:28:6d:46:0d:37:ee:95:
57:88:e3:05:ea:d1:d3:f6:20:80:83:38:3e:c7:be:7a:5e:a3:
93:ea:6e:75:4c:aa:b0:6e:50:ff:50:31:36:f0:98:9f:26:d3:
af:68:f4:58:f6:4f:a1:28:92:70:bb:1f:79:cf:65:88:d4:ca:
b5:d6:15:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:06:42 2026 by rpki-client