Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: h+OwKxNYmNTa6QJSQQ9M4V7TKGxw7crdo6TDcbh+htM=
Subject key identifier: 4B:FE:CD:15:8D:85:74:39:EE:05:2C:20:C9:62:10:95:A3:08:D1:A0
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019E1DFEDFF7419E8C0FF50D819553C447ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 05CE
Signing time: Tue 12 May 2026 21:01:43 +0000
Manifest this update: Tue 12 May 2026 21:01:43 +0000
Manifest next update: Wed 13 May 2026 21:01:43 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: 1h4Ka1E9j3bGC3f7bV+pXQrqFAAPa5N3nc+uJwi+HVk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:df:f7:41:9e:8c:0f:f5:0d:81:95:53:c4:47:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: May 12 21:01:43 2026 GMT
Not After : May 13 21:01:43 2026 GMT
Subject: CN=4bfecd158d857439ee052c20c9621095a308d1a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f8:d2:02:ad:93:85:2d:81:48:70:48:89:43:12:
ed:79:bd:fe:97:64:66:8e:94:50:be:1b:95:56:81:
77:6c:d5:02:ac:89:70:24:96:e8:0b:59:a4:3b:70:
6d:20:8d:5d:de:82:b3:dd:4c:b6:1e:85:14:9e:c0:
f1:b6:1f:36:ab:1a:75:f5:e0:49:5c:69:82:c1:de:
89:64:9b:7e:2d:c0:b9:4b:3f:50:f3:2e:58:f6:2a:
9e:82:57:a2:97:9f:e7:ef:fb:25:ec:75:4d:8e:a1:
ae:8a:7d:eb:d0:89:fe:99:cd:81:8e:97:e5:19:80:
22:89:28:5d:02:e1:b8:d3:95:92:46:70:b1:85:86:
9c:af:e6:15:61:af:8f:f5:5f:fc:7a:36:c7:f3:41:
25:45:25:96:b9:88:15:44:3c:39:a8:4c:f7:82:e9:
18:04:64:75:87:04:cd:cd:17:e2:d6:69:10:78:4e:
10:98:78:56:03:58:3a:89:fa:c2:8b:f1:24:1f:68:
b3:71:4a:e8:51:9e:a6:a8:9a:5c:81:b7:08:ff:2d:
8e:84:85:04:0c:f9:86:a4:4c:c8:f2:53:f1:bb:59:
c3:99:e6:47:e2:28:1b:54:15:e9:da:d9:56:75:0c:
97:e2:bf:51:c5:3b:66:a0:f6:ee:5a:c6:8b:ce:6b:
b0:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:FE:CD:15:8D:85:74:39:EE:05:2C:20:C9:62:10:95:A3:08:D1:A0
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cc:3e:d7:3d:a8:ab:30:0a:f6:26:26:dd:65:12:fb:fc:99:83:
21:26:a3:91:57:62:6b:82:58:a5:f1:75:4c:76:c6:91:74:cb:
9d:be:91:bc:66:a3:77:55:c9:05:8d:19:34:47:46:bd:7f:a9:
c2:21:68:20:5d:12:e8:1f:97:98:44:4e:a1:79:71:3a:bf:b6:
ae:4b:50:67:2c:db:2b:c6:89:92:fa:0e:e8:7c:d4:00:81:c0:
81:50:69:9e:22:c3:2c:50:6f:66:aa:83:c3:dd:91:68:71:a1:
63:f6:4a:d6:46:bd:38:2a:c4:23:d7:ee:2d:32:84:68:af:af:
79:ff:f5:78:93:09:aa:f9:89:37:8f:aa:05:30:92:d0:e4:85:
06:60:6d:71:85:ce:d1:a3:15:5d:5c:c2:20:ae:01:1f:48:45:
b0:d2:fb:26:9c:f4:68:e9:4b:1c:79:6a:0d:69:af:5f:3d:01:
4d:87:c9:a4:07:57:07:dc:92:85:2e:32:f4:80:b2:79:0b:e7:
51:1a:a4:fe:db:b5:87:54:8c:e6:e2:b8:97:a2:13:1a:7b:ca:
51:0f:ca:b3:21:3b:9d:7f:aa:ed:76:1e:d5:77:5d:66:c0:cc:
55:1b:79:04:71:51:35:9e:ac:ea:b5:c2:70:c9:23:25:cc:52:
f6:30:7e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:43:59 2026 by rpki-client