Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: RGC6PtRsn2EQBeQ04jxKmKGQsXgUCZyKW8lGMS2v5UU=
Subject key identifier: C7:38:1A:E7:E5:C7:F9:85:28:38:D4:E7:41:21:0E:8B:BA:87:C8:5A
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 01A17C2940A258DD56B56F3D4BCE95836A15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 0243
Signing time: Tue 27 Oct 2026 07:00:40 +0000
Manifest this update: Tue 27 Oct 2026 07:00:40 +0000
Manifest next update: Wed 28 Oct 2026 07:00:40 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: cqMg615FVBVxKQSx+ju9gbgFJL010TrkyyV6/FX1mF4=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7c:29:40:a2:58:dd:56:b5:6f:3d:4b:ce:95:83:6a:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Oct 27 07:00:40 2026 GMT
Not After : Oct 28 07:00:40 2026 GMT
Subject: CN=c7381ae7e5c7f9852838d4e741210e8bba87c85a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:62:f7:69:21:6b:0e:58:40:ac:8e:cb:be:40:
aa:6b:01:98:d7:60:a9:70:29:28:be:79:ac:d9:d1:
a1:df:09:47:5e:80:e6:84:34:38:cf:6e:be:94:eb:
af:c7:2e:e6:e3:23:ca:b4:3b:14:f6:82:e9:ae:42:
12:9a:8b:2a:0b:d7:dd:ce:4d:e5:36:07:20:02:be:
cd:42:00:db:18:07:28:a0:38:77:fc:8c:09:30:58:
34:23:9f:cf:b0:6b:9a:cb:eb:b4:c0:60:b4:af:83:
2d:a8:89:bc:43:75:22:c1:3d:34:ea:6a:16:8f:6d:
8c:ae:9b:36:ae:47:ec:76:72:fa:93:41:6c:e0:01:
6a:72:e1:e4:c1:1f:c0:d6:3c:53:b5:19:e8:5a:79:
61:bf:bb:63:fc:c3:c5:0b:a8:ea:b2:9e:c6:1b:e0:
31:86:62:54:19:a7:01:fb:b7:5a:ce:cd:69:23:fa:
08:cc:e5:d8:13:08:98:c6:63:85:ed:b8:f8:86:39:
16:f1:45:cb:4d:14:b2:a2:2d:ce:e1:eb:67:c7:08:
41:20:a5:57:56:63:e4:ca:b8:4e:36:8e:a6:06:ad:
5a:21:0a:62:fa:4c:9a:08:5c:99:f1:52:96:52:6d:
49:96:c8:5f:bf:9b:90:4b:5f:4b:a7:88:e5:9f:95:
56:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:38:1A:E7:E5:C7:F9:85:28:38:D4:E7:41:21:0E:8B:BA:87:C8:5A
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a1:0c:83:b7:52:ff:b7:93:78:cd:f2:01:18:32:7d:25:f9:
bb:0e:89:f9:c2:c4:8e:3e:e1:91:63:9a:92:cf:74:42:ed:ff:
96:8c:e2:04:be:ac:60:55:62:8c:f9:5d:79:67:a2:75:c3:d1:
bb:26:91:80:63:e9:98:24:86:f4:ff:6b:dd:39:ed:f1:5f:af:
f5:5c:03:14:ce:52:af:2e:86:b1:75:e7:66:77:3c:47:a7:25:
92:6e:f1:fa:03:c3:2f:2d:5f:ca:e9:7c:e3:e3:95:e2:93:7f:
58:0a:6b:b5:4c:ae:58:b8:01:32:af:16:98:cc:ae:57:78:ee:
44:a6:be:a8:09:3d:12:06:2e:fb:ad:ee:4c:e8:9c:1d:f8:29:
92:20:9b:95:e8:27:6b:71:5b:f1:c1:dd:dc:67:c9:a4:fd:a8:
1b:d9:fd:a9:d5:d8:bd:ce:83:4d:f1:8c:a9:31:bb:99:cd:eb:
e7:f4:4b:fa:97:e0:73:ed:60:12:c7:f9:f3:4c:5a:e0:ad:70:
7b:9f:2f:71:c3:e3:fd:be:34:91:69:d1:5f:48:8a:0d:67:de:
31:cf:88:06:38:7e:36:92:6e:4f:15:00:a3:9f:c9:46:6e:88:
a0:fe:79:72:57:81:5b:9b:3f:96:21:22:3c:95:ee:f7:33:82:
1a:94:31:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 16:24:31 2026 by rpki-client