Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
File: N5FWc7KL362ywgGaxo0EZP0htxo.mft (raw, json)
Hash identifier: PiyYLBeBoxaUvzahkk0gd8KI6iDMoqI6zvMHfysud8c=
Subject key identifier: 4C:8A:2D:67:25:1B:09:DE:4C:BF:50:E1:61:0D:EA:82:C2:23:09:3A
Authority key identifier: 37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
Certificate issuer: /CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Certificate serial: 01A0D94C64445F281AD5B00E8844BA537D9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
Manifest number: 1A04
Signing time: Fri 25 Sep 2026 16:00:57 +0000
Manifest this update: Fri 25 Sep 2026 16:00:57 +0000
Manifest next update: Sat 26 Sep 2026 16:00:57 +0000
Files and hashes: 1: N5FWc7KL362ywgGaxo0EZP0htxo.crl (hash: Ecr+ckf1GvHsmU75SapPIXFdys7Ps2gwLkopnb9wn5Q=)
2: QeC4jltjMzL5cvM7cD5MnVWWoIA.roa (hash: Kmf6YMhA+eYnv3eAUVenCP2DSzTqCja78UTer2zlhVc=)
3: QpP9wNZKRxG9k6Ntc08UuWz_EyI.roa (hash: zmEDhnP4RfO/cvO+VCbjkDF0OdxJduwnvwmzl7d6uWU=)
4: WYrDXQ0rRZr6M_D44GE486jve2Q.roa (hash: 2eWsjEkB/+yPdU7o4VpjzkpuoqTwi7z1HT9ZyI1cZsA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:4c:64:44:5f:28:1a:d5:b0:0e:88:44:ba:53:7d:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37915673b28bdfadb2c2019ac68d0464fd21b71a
Validity
Not Before: Sep 25 16:00:57 2026 GMT
Not After : Sep 26 16:00:57 2026 GMT
Subject: CN=4c8a2d67251b09de4cbf50e1610dea82c223093a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:9c:75:d6:50:4c:38:bd:d7:70:e6:21:c9:0d:
df:92:c9:e4:bc:6d:35:7f:2c:15:58:c3:ae:ec:bb:
94:d7:03:43:80:92:de:a5:43:e6:8a:60:1a:63:00:
71:d1:21:f7:52:9f:d1:a8:ee:67:4a:29:5f:d9:a7:
68:5f:5f:7c:d5:5f:ca:cb:e0:06:22:8b:3d:58:85:
f6:e1:c9:3d:b7:c4:e5:8a:43:7f:6d:74:e1:93:b4:
37:74:63:2e:d7:02:3b:8f:d3:ee:dd:1e:7d:8d:25:
39:76:f8:01:18:dc:bf:32:19:7b:62:bd:5a:fa:88:
1e:0a:62:d1:5b:9f:80:0d:e2:45:84:d5:f9:a6:fa:
12:d2:b6:59:1f:e9:02:34:19:3f:ce:47:88:cf:c4:
13:45:ee:6e:ff:38:76:a5:45:3a:c5:45:e9:ef:2c:
d9:6e:72:0a:f6:2b:e5:b4:b2:2c:73:7e:a7:38:80:
d9:0a:ff:81:16:ee:81:94:8c:cd:4a:cc:b0:af:18:
f7:8a:32:a2:c4:95:17:0c:bd:4e:ea:d5:24:c2:08:
2b:1c:7e:34:e7:fb:bb:c1:2a:6f:e4:4b:d6:26:76:
df:78:e7:23:2c:b9:5f:c5:55:09:0f:ee:e9:34:0b:
42:19:4c:04:81:c2:4c:10:a0:c7:ab:dc:ec:c0:97:
dd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:8A:2D:67:25:1B:09:DE:4C:BF:50:E1:61:0D:EA:82:C2:23:09:3A
X509v3 Authority Key Identifier:
keyid:37:91:56:73:B2:8B:DF:AD:B2:C2:01:9A:C6:8D:04:64:FD:21:B7:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5FWc7KL362ywgGaxo0EZP0htxo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/4ea4f7-d70e-42a2-afd7-3e3a188f49de/1/N5FWc7KL362ywgGaxo0EZP0htxo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:b3:4a:04:47:40:50:84:36:2f:bf:ff:be:57:61:26:05:f8:
b9:fc:38:44:be:c3:63:7c:35:4c:37:47:c1:09:5a:5e:61:eb:
96:77:b4:e2:81:5a:e0:32:9e:d5:a7:cf:74:07:70:00:03:57:
94:8f:c0:00:2d:91:eb:04:d9:e5:4e:fb:76:c0:94:dd:52:c7:
5c:08:b7:e4:dc:4f:26:ea:bb:25:26:77:1e:c1:5b:36:b2:21:
e5:e8:00:e5:f3:5c:ee:07:1e:b4:fa:01:81:62:48:1b:04:c6:
d6:31:8f:90:8a:c0:6e:75:6e:c9:0f:2d:aa:9e:ae:d6:af:f5:
eb:d8:20:27:1a:b4:5a:f0:da:64:f5:f5:02:ac:ce:67:5e:13:
00:4c:33:09:3c:fc:9f:e3:bd:1a:51:9e:c4:62:5f:4e:6a:bb:
3c:13:8f:54:0a:a5:2d:d6:e3:a0:17:a7:b7:cb:9e:db:68:ac:
7d:d8:56:44:a7:ef:09:7f:5b:2c:78:b3:39:7d:d8:83:6f:ab:
23:47:01:8e:74:e2:ce:2e:e5:1e:ab:b6:c6:41:c9:00:3e:65:
cd:50:7d:f1:7d:1e:c7:ba:04:e3:a6:e9:2b:0b:d8:d0:92:2b:
b1:ae:6d:ee:c7:3b:38:67:d5:03:17:8e:30:8f:25:ec:aa:78:
c8:c3:41:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 23:32:21 2026 by rpki-client