Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: fV2asj7j/hM5tFf5IvqsevAwWA8+WPhboPlcrRG18As=
Subject key identifier: 84:C4:3D:F0:8A:EA:E6:55:7A:32:92:49:58:31:A6:94:98:17:08:FA
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 019F90912F2C71C2C34CC90C7BD08405EE10
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 19A9
Signing time: Thu 23 Jul 2026 20:01:01 +0000
Manifest this update: Thu 23 Jul 2026 20:01:01 +0000
Manifest next update: Fri 24 Jul 2026 20:01:01 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: V8SioRzVwxYErndyrerr3w3wlNIso0TzFNfDdMjOdvo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:90:91:2f:2c:71:c2:c3:4c:c9:0c:7b:d0:84:05:ee:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Jul 23 20:01:01 2026 GMT
Not After : Jul 24 20:01:01 2026 GMT
Subject: CN=84c43df08aeae6557a3292495831a694981708fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:bf:e5:61:66:68:3e:73:8f:a7:ab:d7:b1:57:
d2:e4:51:16:19:e3:71:f9:42:52:1f:b3:5d:05:bd:
35:90:99:5f:d5:1b:46:61:10:64:5f:04:59:b8:7e:
b9:1b:e3:f0:df:a5:50:0d:ab:42:37:6e:19:f4:d9:
d0:cb:02:2e:d1:6a:8c:93:ef:65:2b:58:54:2b:d9:
ad:72:84:be:bc:c2:24:c1:46:86:8f:fc:0a:d6:ad:
de:92:8c:dd:72:ce:ec:0f:75:04:c9:b6:30:f8:1e:
78:da:e1:35:8f:bd:19:b6:9c:be:59:75:58:b4:0f:
0f:92:33:dd:74:60:19:4b:6d:2c:02:bd:c5:98:0d:
f6:12:eb:a1:bc:c2:a3:66:19:eb:18:fa:72:44:3e:
b8:b0:59:63:f3:0f:40:f1:69:3d:74:f2:f7:89:8f:
67:fe:67:79:5d:62:67:a7:68:32:12:24:ec:15:cf:
8c:38:96:f0:52:7d:f4:8e:40:ff:b0:c7:85:0d:8f:
6d:24:8c:cb:79:67:fb:2e:b1:dc:91:09:60:a7:87:
d7:17:c7:f2:ea:ed:08:e5:eb:8e:a6:5f:4c:3f:c9:
a3:0f:63:0e:a9:8e:a7:29:ac:de:d5:6f:9f:87:13:
36:08:49:62:41:d4:e5:69:79:df:10:78:f2:7d:14:
9c:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:C4:3D:F0:8A:EA:E6:55:7A:32:92:49:58:31:A6:94:98:17:08:FA
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ae:3e:c5:27:e3:1c:80:94:ed:47:b1:3c:f3:b1:68:c9:ef:
3a:71:7c:85:4b:c8:94:14:b3:56:1a:1e:de:5e:56:73:9d:21:
9a:01:57:0a:6e:2f:63:66:d8:f5:4e:1c:5f:c8:a5:0d:0b:c0:
3e:ac:ce:62:97:1e:63:65:8f:12:0e:a1:0b:59:52:d2:51:95:
4c:78:4f:2e:7b:c6:d4:e5:18:e7:c4:17:3a:73:64:52:4e:21:
96:1b:d8:ae:be:93:85:dd:c0:e1:0d:44:19:55:97:65:92:dd:
ec:7c:f7:b8:f2:29:dc:9a:cc:88:53:2a:c3:9c:21:b6:9d:eb:
b9:c0:b3:39:fb:b3:4a:28:26:0a:91:ee:0b:5a:04:5d:de:48:
0c:f2:d4:c9:69:4e:38:7c:cf:bc:1c:da:51:be:31:7a:0a:69:
30:af:6d:af:9a:02:76:ee:7c:02:d7:8f:b3:49:93:0d:9a:9e:
43:b9:ce:ac:38:de:fb:2d:d8:27:68:b1:ae:ad:79:76:7b:e2:
2b:59:9f:2b:ec:f5:b9:54:f8:a1:40:2c:cc:80:f5:2e:9c:46:
d2:97:cb:84:99:af:c5:39:30:6f:09:85:85:99:4f:81:19:c2:
26:90:ec:21:bd:cb:1c:5d:d8:96:92:9b:9d:a2:29:ec:dc:16:
36:3e:00:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 07:04:31 2026 by rpki-client