Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: dvp4SgscN7tkOKBROTzx1logw+0bnmu5HoOZ756aOmo=
Subject key identifier: 84:B7:44:F8:76:E3:20:B8:DA:5C:C2:6E:52:1C:02:21:9C:D1:68:50
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01A0F230F9ABB4A8D53E9547DC4F0F2E27E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 0745
Signing time: Wed 30 Sep 2026 12:01:30 +0000
Manifest this update: Wed 30 Sep 2026 12:01:30 +0000
Manifest next update: Thu 01 Oct 2026 12:01:30 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: TmFa2kgjcPqT1Cs/5/6D80wUuEc5V6Sp4hgVq/K6+tI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 01 Oct 2026 11:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f2:30:f9:ab:b4:a8:d5:3e:95:47:dc:4f:0f:2e:27:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Sep 30 12:01:30 2026 GMT
Not After : Oct 1 12:01:30 2026 GMT
Subject: CN=84b744f876e320b8da5cc26e521c02219cd16850
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3a:ca:6f:bd:fc:92:d3:b7:69:e6:ae:4c:39:
e3:48:e4:ff:4d:ed:cb:c8:f8:e3:b4:8a:02:d1:59:
82:e0:81:e1:2b:52:8b:6d:bb:70:cc:66:f3:33:60:
a1:06:dc:d6:d0:cb:e8:ca:40:3d:a0:5e:3a:95:4a:
ef:93:f4:c8:32:d2:4d:4b:88:55:dc:d3:dc:66:98:
03:30:be:7e:80:e7:04:e5:4b:7d:46:7f:77:f5:38:
23:5f:41:1b:a9:6f:e4:9d:dd:70:d0:83:2c:9e:ed:
66:16:01:fb:67:f0:5e:e2:40:a4:e8:52:07:f8:a4:
d5:37:99:5b:c9:2b:68:31:ad:f4:d0:f4:63:9b:a0:
fe:87:95:1c:cb:e2:95:df:56:9f:74:63:db:f7:eb:
77:6a:c1:5f:c3:86:9f:11:12:6a:99:33:c3:96:8d:
d5:41:d8:30:99:3a:02:92:02:e1:17:8a:3e:86:2b:
40:3f:17:0f:85:0a:28:4f:7b:21:f7:54:5b:b9:21:
cc:a5:19:c6:26:e7:83:20:5e:76:d5:33:07:1a:39:
05:83:c8:0e:95:ac:3d:db:77:d0:d0:e5:83:f1:9f:
64:d2:88:ec:a2:3d:db:33:bd:51:9d:97:29:9f:8e:
bb:91:66:c5:f5:ce:44:91:75:35:9d:92:d9:c7:44:
28:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:B7:44:F8:76:E3:20:B8:DA:5C:C2:6E:52:1C:02:21:9C:D1:68:50
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:ef:c2:8d:12:45:17:8b:dc:81:e1:78:18:f2:a6:ce:45:98:
e2:aa:76:13:08:2b:06:21:a8:24:b8:5b:a7:b5:0b:9a:c8:37:
b8:c3:58:9d:cb:53:b1:fb:7f:97:f0:77:d0:d7:bc:43:bd:59:
a1:96:6f:d5:64:de:25:d4:7a:bc:b7:00:bb:40:78:fc:8a:38:
fa:b8:64:23:c0:fe:e3:d6:df:93:08:81:e5:10:eb:41:0e:de:
9d:71:7d:a1:88:86:bb:7f:81:69:35:66:07:fa:80:42:10:79:
95:be:69:3a:24:3e:20:06:af:59:3e:ee:30:60:15:58:47:9b:
5e:bc:c4:d7:00:df:47:9b:02:32:e4:e1:7c:99:ee:71:82:e0:
f9:a9:7b:bb:a1:ad:b1:33:8f:17:7e:a1:49:78:d3:3d:42:b1:
f2:32:dc:a5:14:05:93:b8:f0:5e:16:1f:6e:44:52:b8:31:d9:
a9:ae:b5:24:e6:75:d8:c4:b4:64:5c:7e:95:2d:ea:96:94:d8:
b3:4c:58:fc:2b:98:24:03:99:15:61:4d:f6:24:56:3d:5f:17:
b9:d4:6e:32:23:6b:f4:f6:7c:9d:4c:00:75:3e:df:16:98:3c:
67:31:e5:d7:e6:2b:ba:7f:a5:23:20:06:87:9e:a6:44:78:ab:
db:37:08:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 21:29:49 2026 by rpki-client