Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: 7VoGNmGYRQB9vANEfpRK7Zq1Sem8gEFs6yoGJ8vPFc0=
Subject key identifier: 9A:65:21:82:66:03:C8:83:46:34:B5:9B:B3:38:99:09:C7:54:9A:41
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 01A17A3AB1D9BF91A33FBABBF5F2340E29E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 0242
Signing time: Mon 26 Oct 2026 22:00:29 +0000
Manifest this update: Mon 26 Oct 2026 22:00:29 +0000
Manifest next update: Tue 27 Oct 2026 22:00:29 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: xEBD3J3CUEIv3w6ZfqZ4b8/Rwu7gylipDlQWdSr4qw4=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 22:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:3a:b1:d9:bf:91:a3:3f:ba:bb:f5:f2:34:0e:29:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Oct 26 22:00:29 2026 GMT
Not After : Oct 27 22:00:29 2026 GMT
Subject: CN=9a6521826603c8834634b59bb3389909c7549a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:51:93:1f:80:e6:77:49:74:f6:a3:27:8e:2a:
84:fa:a1:63:86:f1:97:f8:a3:78:5e:ee:69:f1:c8:
8c:74:be:74:8a:01:82:a1:8b:1b:92:d6:c5:ae:62:
90:48:a3:c5:73:74:6d:ad:79:30:da:8f:e9:93:51:
10:8a:31:73:33:4a:97:65:9d:27:eb:55:83:22:45:
e9:35:ad:a7:11:17:5a:b7:56:aa:7c:de:a3:d9:59:
df:ec:33:73:c4:01:03:dc:23:cc:fe:94:f7:00:ee:
3f:71:ca:8f:89:4e:db:f8:ce:77:65:3f:98:b6:46:
97:ca:da:aa:02:05:a5:d3:6e:24:5c:6b:a7:ca:21:
f0:6b:1a:70:0d:d7:d6:3e:af:b0:77:e6:10:e3:3e:
59:3a:df:6d:c8:b4:f7:0b:1a:40:c3:b2:cc:d7:6c:
1b:87:4b:bc:54:2e:8b:b8:6f:15:b8:7b:bb:ed:db:
ca:00:02:00:a9:03:9d:3f:01:fa:bd:8b:3a:bf:c3:
51:43:ea:66:da:91:ec:86:95:22:85:b8:65:2d:30:
7e:48:c8:15:52:08:9d:a5:f0:ec:0f:29:07:18:ea:
4c:32:e3:44:58:97:93:c9:a4:06:ce:77:a9:6b:59:
dc:57:c5:18:be:e0:55:67:ab:d7:06:9d:20:3c:96:
f8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:65:21:82:66:03:C8:83:46:34:B5:9B:B3:38:99:09:C7:54:9A:41
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:f9:97:cf:90:1c:32:e9:ac:c3:5c:a3:80:a1:35:67:f6:80:
ac:17:65:06:89:f3:71:c3:f7:9d:18:71:e3:e0:4b:15:32:6a:
2e:43:44:ba:a2:b8:32:70:75:0a:ea:f2:87:1a:64:58:ae:11:
6a:d9:3e:83:c9:93:8c:c6:0a:dc:1b:1a:b2:03:e0:cd:f1:d3:
bc:e8:12:46:fa:a8:02:7d:1f:72:e0:8c:80:1b:6e:84:81:61:
58:55:13:5c:63:88:a9:a3:03:db:d9:8d:d5:e5:1d:26:8f:28:
3a:b9:a5:89:29:3c:b5:f2:58:be:83:34:19:37:ff:da:b8:46:
df:5c:ca:7e:e7:e6:2d:93:ec:0f:06:4d:37:1f:5b:77:d0:2a:
04:45:6c:ee:eb:88:e8:cd:2f:5b:d6:e9:62:2d:25:96:a9:30:
b5:6a:6d:8a:9b:40:08:b3:4f:08:4c:67:52:f6:25:53:87:07:
de:74:e3:cf:35:94:1a:f2:b0:a9:40:86:8b:15:8a:8a:d5:8a:
5c:d5:4b:0e:01:a8:78:bb:c3:52:91:af:b4:e3:b2:a3:ca:af:
7f:44:88:26:d8:e0:77:a5:3b:de:17:36:e8:21:ca:06:8e:0c:
72:fa:3b:3a:43:ee:18:59:38:7e:d9:4c:1c:6a:ab:69:a2:65:
7c:9c:28:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:50:38 2026 by rpki-client