Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: B2575jnOSG8N4MwfYHqYaMiNCqdx4eK1WUgGtWkkYnI=
Subject key identifier: 82:1A:C1:90:03:6D:F7:9F:44:22:70:A6:57:25:B1:D1:DE:4D:54:38
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019F94A4BB91F4A65B00B2CE87F838D747EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 0690
Signing time: Fri 24 Jul 2026 15:00:51 +0000
Manifest this update: Fri 24 Jul 2026 15:00:51 +0000
Manifest next update: Sat 25 Jul 2026 15:00:51 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: wlotLENs9UjNCG3sjM9cm8aaVtBWWi2Y2+yzE8Tbd10=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:bb:91:f4:a6:5b:00:b2:ce:87:f8:38:d7:47:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Jul 24 15:00:51 2026 GMT
Not After : Jul 25 15:00:51 2026 GMT
Subject: CN=821ac190036df79f442270a65725b1d1de4d5438
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:af:a0:4b:28:59:f1:08:f2:da:93:b9:ec:a9:
e9:bd:a4:31:0d:f4:59:a4:95:7f:86:91:a0:ed:56:
8a:fe:db:82:36:8e:65:9d:35:9e:b0:e9:91:30:ba:
16:9f:a9:5c:ed:52:75:f7:9b:8a:37:b3:a3:73:28:
86:31:23:e3:19:57:a3:87:75:13:c7:ca:fb:87:81:
a9:d3:93:1e:e1:78:96:cc:df:91:ec:90:21:89:83:
15:bb:f1:2b:be:c1:cd:d6:36:fe:7c:35:61:2d:89:
f4:77:cc:0d:cb:4d:a6:01:3a:ae:ff:98:7a:06:c2:
9a:87:7f:e9:ca:64:9c:5f:6d:16:7d:d5:2c:b4:0e:
9c:a4:52:d7:ef:e9:5c:a4:d6:7d:3d:16:c7:07:e7:
08:54:45:00:ab:49:51:ee:6b:9a:e7:a4:c2:88:c7:
37:6f:71:3a:1e:60:79:3e:21:7b:3a:7e:a5:15:a5:
68:ab:d2:15:98:7a:a0:a7:b2:7f:d4:6a:04:6e:20:
78:17:83:0a:42:f8:83:b5:85:d6:cf:a8:de:eb:0a:
8f:c1:15:58:b4:a0:4e:7c:c0:a6:a4:75:f2:3c:4a:
2a:dd:e1:a3:f5:4d:b4:39:a6:e6:d3:23:8d:76:15:
83:38:99:bf:3c:cf:32:8a:c1:e6:fc:51:55:b0:1d:
e4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:1A:C1:90:03:6D:F7:9F:44:22:70:A6:57:25:B1:D1:DE:4D:54:38
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ee:64:ee:3c:ae:6b:41:f1:d8:09:23:3f:c0:f6:7a:2e:a1:
d1:95:84:74:1a:6f:81:72:37:11:02:a6:25:47:af:b1:0d:90:
54:6f:d9:91:ec:0c:60:cc:83:62:56:81:69:06:97:c7:58:02:
c4:de:20:b7:60:3c:c9:c4:42:39:00:6a:ea:0a:ea:0c:7a:f7:
c7:f4:d6:fb:d9:f6:66:73:ed:6a:4a:27:eb:05:de:ab:3b:32:
2e:40:08:a6:0a:54:34:87:aa:38:e7:11:5b:29:8b:62:61:e9:
9d:6c:1c:a7:a1:66:d6:4e:f6:43:3f:69:61:bc:37:1c:fd:dd:
b9:19:33:8b:56:da:a6:8c:ab:31:ca:2a:3b:60:7b:b5:f3:73:
fd:27:fd:a5:3b:60:94:45:90:36:1f:dd:03:5b:bc:24:6f:6d:
43:ff:3d:7d:8a:61:14:4a:5d:a3:06:b5:2b:78:56:02:6f:0b:
18:8f:9f:32:54:38:4c:17:c3:cc:26:2c:f6:dd:89:a2:7b:ed:
7f:89:21:32:c0:6d:1b:db:e1:1e:10:b8:a8:dc:5a:4d:f8:88:
5f:da:53:63:37:be:d3:40:7a:c2:9e:24:75:77:fd:9f:14:65:
f3:33:b1:ea:89:7a:ef:8b:42:4c:62:be:8b:f8:36:1f:a1:33:
e9:4a:69:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:39:43 2026 by rpki-client