Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: UGI0sJwirlltyVQtr6aZStLJSU6lsBvqpw9+KnOOqY0=
Subject key identifier: BC:21:D5:BE:CE:B9:CA:46:18:B3:E4:AF:B1:B1:DB:BE:D0:EE:D5:5F
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 01A0EF66E2BBE63BD04EFE93F058AEBC29D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 1A7F
Signing time: Tue 29 Sep 2026 23:01:32 +0000
Manifest this update: Tue 29 Sep 2026 23:01:32 +0000
Manifest next update: Wed 30 Sep 2026 23:01:32 +0000
Files and hashes: 1: 9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa (hash: WVuRHrOmlMS6ytXr2Z+ySWU/cHgaZovcwRctB5udkTE=)
2: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: IgmhNUh9bIfbupM1TC3mqSuZd1SKJcryxXQFD0R6h9E=)
3: jcwqdhirBap47K8I2f73LhbiMrI.roa (hash: 92nuQiH7pyqjL/L1oEYcoXAA6/cRc3pynOqbszSmmCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 17:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ef:66:e2:bb:e6:3b:d0:4e:fe:93:f0:58:ae:bc:29:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Sep 29 23:01:32 2026 GMT
Not After : Sep 30 23:01:32 2026 GMT
Subject: CN=bc21d5beceb9ca4618b3e4afb1b1dbbed0eed55f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:3f:31:77:3e:e9:b1:41:23:53:16:83:9c:c2:
bd:01:72:25:24:4d:f5:75:30:18:bc:cc:56:8d:10:
b6:d8:50:17:a7:54:80:ba:47:2d:42:9a:97:39:2b:
f3:29:7f:40:25:cd:c6:09:7b:b0:6a:54:80:b1:a8:
98:9f:a1:ea:4e:db:80:dd:4d:21:65:25:a7:66:43:
bb:4a:41:0d:c5:74:58:6d:ef:be:d6:de:cc:ad:0a:
e4:69:1e:fd:31:28:a3:ba:e5:12:6b:13:80:b6:55:
b5:50:8d:dd:1c:08:51:3e:9d:5a:7b:33:dd:96:45:
ae:09:0f:b0:9d:00:38:6a:b2:68:c1:22:08:ac:bc:
9d:15:17:29:fb:34:58:94:6f:4a:a1:85:bb:37:ef:
ec:51:f3:ad:9e:ed:c2:07:11:d5:12:b5:21:ac:a9:
5f:38:97:47:c9:ed:d9:4a:f0:4e:c3:6f:3b:86:5e:
c9:0a:90:b8:34:ca:eb:6f:44:10:ff:d2:78:43:6d:
15:3f:83:e9:e4:87:88:a3:7f:6c:4e:d1:fb:9a:a5:
13:f3:cc:c7:8b:51:30:03:c6:36:44:62:e1:ba:d7:
fa:44:c3:84:17:98:be:7d:31:af:97:ba:9a:83:e1:
90:16:77:33:f9:fd:dd:98:fb:c6:23:84:0a:11:81:
36:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:21:D5:BE:CE:B9:CA:46:18:B3:E4:AF:B1:B1:DB:BE:D0:EE:D5:5F
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:45:f7:7a:93:8e:72:e8:77:8a:41:54:9e:ad:04:90:f3:38:
ce:06:2f:59:37:35:de:76:6c:65:2b:0f:5a:45:c5:76:70:21:
3d:6b:00:65:ca:bb:6a:e9:6e:b7:6a:58:93:57:6e:dc:34:3f:
93:fc:2c:dc:15:e7:4d:3c:6c:39:e1:a9:52:41:f6:dd:d4:54:
6b:d8:55:18:54:bb:45:e6:5e:6e:af:2b:19:d8:67:f8:ef:f9:
3c:55:69:6c:54:c0:4d:4a:1a:c4:16:b6:24:1c:7a:2f:89:17:
b7:63:73:d7:19:78:ad:82:ad:a9:17:38:c6:c8:fc:79:98:6d:
01:aa:e5:17:83:30:81:61:78:4c:ed:48:c3:d7:37:d1:b8:a5:
07:4e:dd:46:79:6a:11:30:a9:2b:89:17:18:67:9b:91:5d:0c:
64:de:4d:91:80:fb:78:d1:3b:b9:e1:9d:24:71:8f:55:41:97:
16:53:61:24:24:86:68:82:d7:2a:6c:33:b4:30:40:24:e8:02:
51:b8:66:86:c8:7f:c6:63:af:a1:b9:a1:99:54:70:c2:9e:54:
97:6b:26:1b:ce:cf:e2:cf:0b:90:9b:2f:c0:b5:11:f5:ab:fc:
47:d2:5e:99:00:8b:1f:38:2c:57:a7:8f:3c:e2:3f:ad:38:86:
33:bd:f9:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 30 05:56:42 2026 by rpki-client