Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: rEZFjDF1bx1WDIIcT4SDFkyerJTnpyROzQOLvWHu1V4=
Subject key identifier: F8:12:54:58:C9:EA:B7:7E:6A:47:CD:01:C4:6F:D7:02:88:EA:20:49
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 01A0D6F01FBF119D095D13BB81E25A77C2CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 1A52
Signing time: Fri 25 Sep 2026 05:00:55 +0000
Manifest this update: Fri 25 Sep 2026 05:00:55 +0000
Manifest next update: Sat 26 Sep 2026 05:00:55 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: 1ZD8GaUnMPjtWZeNkjMfojeJuqAEPQugkyNRXearsYU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:f0:1f:bf:11:9d:09:5d:13:bb:81:e2:5a:77:c2:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Sep 25 05:00:55 2026 GMT
Not After : Sep 26 05:00:55 2026 GMT
Subject: CN=f8125458c9eab77e6a47cd01c46fd70288ea2049
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:00:97:b4:f9:44:d3:70:fe:b1:38:42:5e:b2:
bb:75:de:d4:4d:82:3a:b0:d2:a5:e7:29:49:23:88:
05:64:fa:ce:f3:a1:d0:0f:74:e8:6f:0a:39:6f:38:
00:22:81:90:7b:26:98:c3:18:5b:38:52:00:82:3d:
fc:66:c5:08:33:ad:59:01:b7:a1:4f:71:f0:98:72:
52:08:67:22:13:c8:c5:36:51:2c:c9:3c:a2:61:32:
ba:f5:d1:be:3b:bb:c8:94:7c:e6:aa:8a:1a:1d:3e:
4e:b8:89:e8:23:86:17:40:d3:fe:cf:ca:0d:6e:7f:
13:f8:8d:7e:dd:a1:48:d8:64:a6:75:b8:be:9b:dc:
9c:53:4e:97:25:23:0a:14:5b:68:5b:9d:d2:0f:c5:
e1:b3:58:75:67:34:dc:a3:62:8a:3d:60:b2:60:9c:
f2:9a:1f:83:45:ff:fd:f4:65:9a:f2:18:c0:56:30:
c3:04:8a:36:62:f6:b4:27:91:ce:85:fa:60:a6:97:
0a:b0:ce:cb:97:31:1a:61:e2:cc:db:d4:65:a6:72:
54:c0:85:20:c6:e8:d3:03:91:00:9a:c6:67:55:5d:
9c:8c:2f:37:08:6d:e9:e4:eb:1a:90:f2:85:f6:0b:
9a:0e:01:7c:68:4a:9a:65:4e:94:56:49:29:2f:03:
9c:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:12:54:58:C9:EA:B7:7E:6A:47:CD:01:C4:6F:D7:02:88:EA:20:49
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:ee:b4:13:1b:76:0e:14:76:ab:c5:bd:60:7e:4a:bf:67:10:
c7:51:4d:31:05:d6:02:97:5d:d8:56:28:d5:44:a3:18:b7:24:
56:d1:be:d5:66:01:4f:9e:5a:23:f6:ac:46:30:43:0f:70:df:
f2:21:e0:26:20:26:85:d4:c3:25:af:9d:ae:c7:2a:a1:9b:9d:
12:ba:06:16:ff:8e:d9:a8:5f:57:ea:7d:57:de:01:ed:ae:e9:
e4:ee:a1:86:39:25:79:12:2d:94:02:63:3e:ac:47:c3:0f:47:
91:48:87:4b:29:60:94:de:f9:cf:13:8c:ab:f2:72:34:24:74:
f7:f2:2d:bb:45:37:14:59:96:7c:7e:47:90:ce:6a:ec:76:2f:
6a:cd:9e:09:5c:c0:cb:d5:78:b2:3b:e4:b4:9c:c8:ee:04:32:
df:54:4c:21:97:e8:46:8f:34:92:0e:06:53:83:a5:f3:0f:1b:
55:8f:84:d2:96:26:7d:3d:8b:3e:93:cf:d5:8d:20:ff:23:45:
97:0e:0c:e5:1f:c6:ef:e7:33:8c:e1:ba:54:0b:f4:88:79:f0:
83:19:af:33:ac:09:96:2e:1d:48:a3:71:38:15:ec:7c:43:f4:
9f:43:2c:9b:cd:89:31:ae:36:10:cf:a4:36:67:2a:c6:50:60:
0e:bb:28:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDW8B+/EZ0JXRO7geJad8LMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OWNkNjdjMGMxODk1OTIzOTM1ODU1MzIyOWU5MWY1NDNj
YzVhNWYwHhcNMjYwOTI1MDUwMDU1WhcNMjYwOTI2MDUwMDU1WjAzMTEwLwYDVQQD
EyhmODEyNTQ1OGM5ZWFiNzdlNmE0N2NkMDFjNDZmZDcwMjg4ZWEyMDQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugCXtPlE03D+sThCXrK7dd7UTYI6
sNKl5ylJI4gFZPrO86HQD3Tobwo5bzgAIoGQeyaYwxhbOFIAgj38ZsUIM61ZAbeh
T3HwmHJSCGciE8jFNlEsyTyiYTK69dG+O7vIlHzmqooaHT5OuInoI4YXQNP+z8oN
bn8T+I1+3aFI2GSmdbi+m9ycU06XJSMKFFtoW53SD8Xhs1h1ZzTco2KKPWCyYJzy
mh+DRf/99GWa8hjAVjDDBIo2Yva0J5HOhfpgppcKsM7LlzEaYeLM29RlpnJUwIUg
xujTA5EAmsZnVV2cjC83CG3p5OsakPKF9guaDgF8aEqaZU6UVkkpLwOc9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPgSVFjJ6rd+akfNAcRv1wKI6iBJMB8GA1UdIwQY
MBaAFDec1nwMGJWSOTWFUyKekfVDzFpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYt
OTliYmJhZmU5YzRiLzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYtOTliYmJhZmU5YzRi
LzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK+60Ext2
DhR2q8W9YH5Kv2cQx1FNMQXWApdd2FYo1USjGLckVtG+1WYBT55aI/asRjBDD3Df
8iHgJiAmhdTDJa+drscqoZudEroGFv+O2ahfV+p9V94B7a7p5O6hhjkleRItlAJj
PqxHww9HkUiHSylglN75zxOMq/JyNCR09/Itu0U3FFmWfH5HkM5q7HYvas2eCVzA
y9V4sjvktJzI7gQy31RMIZfoRo80kg4GU4Ol8w8bVY+E0pYmfT2LPpPP1Y0g/yNF
lw4M5R/G7+czjOG6VAv0iHnwgxmvM6wJli4dSKNxOBXsfEP0n0Msm82JMa42EM+k
NmcqxlBgDrsogg==
-----END CERTIFICATE-----
Generated at Fri Sep 25 11:02:58 2026 by rpki-client