Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: wQTJI+NNEFTV6veBPfigQQTbfwE1IUeAGi2fgxpFulY=
Subject key identifier: 05:50:56:AC:A3:99:07:EB:2C:D2:A6:1F:DF:84:44:16:B8:59:D5:88
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019F91DAC29F3EBD109A2B51416CF91EC398
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 19CA
Signing time: Fri 24 Jul 2026 02:01:00 +0000
Manifest this update: Fri 24 Jul 2026 02:01:00 +0000
Manifest next update: Sat 25 Jul 2026 02:01:00 +0000
Files and hashes: 1: 9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa (hash: WVuRHrOmlMS6ytXr2Z+ySWU/cHgaZovcwRctB5udkTE=)
2: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: bb8qk1Wry7uwNRFLyWuyzSnaSm68zhawW6dIgLVbPXE=)
3: jcwqdhirBap47K8I2f73LhbiMrI.roa (hash: 92nuQiH7pyqjL/L1oEYcoXAA6/cRc3pynOqbszSmmCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:da:c2:9f:3e:bd:10:9a:2b:51:41:6c:f9:1e:c3:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: Jul 24 02:01:00 2026 GMT
Not After : Jul 25 02:01:00 2026 GMT
Subject: CN=055056aca39907eb2cd2a61fdf844416b859d588
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:dc:e6:c9:3f:5c:25:2f:02:21:27:8b:9f:2c:
26:0e:12:b8:21:dd:3b:c1:f0:9b:3c:38:b7:63:2f:
ea:14:b6:5b:85:00:ec:79:76:c5:c5:a1:45:59:e2:
0b:24:1d:5c:e7:14:49:4f:b4:10:d1:5e:3b:db:4b:
eb:38:45:12:cd:d0:a4:4b:36:62:27:d2:0e:75:54:
13:63:02:9c:78:88:09:d1:57:6b:b5:0b:f0:b0:d1:
24:be:8d:15:3e:7d:ec:9a:9b:68:be:81:7c:58:ed:
ac:62:34:f3:9b:91:77:f3:f5:79:92:5b:ed:8d:0e:
f9:3f:62:fa:9d:0c:a3:4d:f3:89:aa:19:3c:5a:dc:
60:e9:ee:86:3f:18:83:54:b4:59:da:1b:6a:04:d1:
b7:1b:45:1c:b3:8d:8e:30:b8:bb:8d:1b:e4:90:6b:
70:25:30:14:7d:7f:6d:31:84:dd:b1:ce:78:98:64:
82:1d:7c:b6:f8:a3:4b:3e:70:43:8a:ee:67:c7:cd:
dc:e6:c3:ba:32:f6:48:9b:cd:82:92:86:33:3f:09:
e1:ff:ef:bd:85:11:58:4f:ae:70:1c:07:36:40:4d:
81:f4:8a:54:ca:a2:81:4b:ec:f8:7a:7d:43:7b:7c:
66:67:6d:35:cd:41:f4:ed:03:05:d4:85:81:77:90:
f3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:50:56:AC:A3:99:07:EB:2C:D2:A6:1F:DF:84:44:16:B8:59:D5:88
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:89:a7:20:b2:0a:2a:2b:67:71:ba:3b:6e:b5:ba:8e:c8:54:
f8:72:df:bd:09:4f:24:a1:c8:60:80:49:3a:5f:fb:5a:4b:0a:
12:61:cd:36:b1:b9:69:37:09:3c:71:26:4e:13:bc:24:e8:5e:
51:9d:0e:2a:95:b7:46:58:a0:8d:7f:97:a0:d6:63:21:aa:b6:
78:15:5e:c3:e8:8a:2b:56:07:21:6d:bf:72:93:76:a2:bb:35:
68:ed:16:bf:1e:50:13:16:b6:15:2f:22:2d:08:8d:8d:90:1c:
30:55:94:03:27:99:1b:b2:d9:f6:33:c8:b7:90:76:55:8f:98:
6b:c8:08:93:69:01:4b:f6:b1:3a:ff:77:35:89:56:69:9f:97:
77:4d:0c:c9:fe:ac:f4:40:a7:fb:af:cc:6d:6e:c1:c7:22:ee:
77:4c:3b:61:5f:33:f9:19:0e:d5:a5:0f:b0:f6:79:75:fe:d1:
a4:ed:37:42:93:46:f3:4d:65:8d:3f:72:c3:98:0d:e0:6e:db:
3b:5d:e3:d0:a5:94:d7:0e:ea:15:de:4b:37:e2:0c:db:23:97:
67:cb:45:d7:d5:aa:50:90:28:41:30:fe:12:f6:98:ee:e5:3d:
0f:93:91:6f:5e:3e:24:8c:f9:e4:ec:28:66:58:26:a0:22:94:
b8:62:69:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:28:51 2026 by rpki-client