Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: 7Z0jQc57pc2RXjSPs9Kf8UTq2LSCHTPF+aWGLnpLVa8=
Subject key identifier: F9:4B:EA:55:F0:14:33:81:4A:D6:18:8D:FF:AA:FB:2D:1D:29:63:49
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 019EB76A72C89F6DB9AB85C77FB02B8C549B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: D4
Signing time: Thu 11 Jun 2026 16:01:07 +0000
Manifest this update: Thu 11 Jun 2026 16:01:07 +0000
Manifest next update: Fri 12 Jun 2026 16:01:07 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: grg0Gx1NS0k35x2xbh5Y8szqgpfz1HT5Mfu53huT49k=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 16:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:6a:72:c8:9f:6d:b9:ab:85:c7:7f:b0:2b:8c:54:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Jun 11 16:01:07 2026 GMT
Not After : Jun 12 16:01:07 2026 GMT
Subject: CN=f94bea55f01433814ad6188dffaafb2d1d296349
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:05:8a:ab:45:82:d0:87:ea:c9:d2:c9:a5:78:
78:32:e0:1f:30:b6:6e:08:4f:a3:08:1d:80:57:39:
37:d7:a5:7b:35:99:60:34:9b:f5:b9:54:b4:75:5a:
71:0a:07:e6:29:b4:bd:a9:e8:20:18:1b:00:af:9e:
fa:56:42:f1:12:be:d1:d3:1c:34:25:78:33:ae:8e:
9c:a0:da:ed:46:d4:34:0d:2b:fa:c6:28:78:07:7e:
88:8e:76:9c:4a:c5:8a:e2:a4:7b:cd:a8:26:2d:ed:
fb:d6:92:15:92:26:23:8d:fa:8f:44:df:86:2a:0e:
2e:60:9b:86:aa:6e:c3:8c:70:02:6c:00:61:49:2a:
0f:5b:d8:46:35:09:8a:cb:ba:4f:4f:9a:76:52:53:
0c:73:a5:5e:3e:66:bb:1d:e3:d7:57:f1:b9:76:7d:
d0:e8:a6:27:04:9e:d0:9a:07:97:ad:cf:08:18:8f:
aa:46:ae:36:a5:39:ff:eb:1a:a8:eb:b4:e9:bf:b8:
e5:dd:0a:39:58:81:31:ed:9e:a8:4c:e7:95:a3:f4:
57:44:a5:3c:a4:6c:0a:3b:2f:c2:5a:91:ec:f4:b7:
58:dc:d3:29:66:ac:f4:bb:ea:b6:1a:87:3a:7e:48:
10:ce:ef:3a:27:6a:32:97:98:d6:8d:51:5a:76:c3:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:4B:EA:55:F0:14:33:81:4A:D6:18:8D:FF:AA:FB:2D:1D:29:63:49
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f2:b2:0a:49:81:e8:cf:d5:3e:0a:5a:f5:21:f7:ba:f5:7a:
cd:a6:41:b2:49:fb:c1:0a:33:5c:8e:81:a7:2b:c1:21:63:3b:
84:fe:8e:70:9f:56:ab:e5:c5:9c:18:73:51:75:f6:ef:2b:df:
dd:91:35:35:96:3e:bc:d5:78:2d:c3:f3:80:a7:9b:cf:4e:d1:
cc:3f:62:ab:43:8f:5e:74:41:79:4c:93:d3:f1:fb:fb:1c:fe:
75:a3:e6:ed:8f:74:f3:26:5c:6a:32:ed:17:40:e8:04:0c:4d:
1f:32:03:9c:89:a4:12:a3:bd:6c:46:9f:2e:eb:ba:9a:2e:b1:
99:9e:36:ed:cd:37:51:06:c3:fc:25:44:23:cd:4a:30:49:a6:
ee:40:44:bb:2f:49:b4:5d:ec:13:42:75:83:5e:22:9f:e2:9f:
35:65:ae:a3:b5:a7:aa:b8:66:ed:c3:9d:4a:2b:98:fe:bb:76:
0d:1d:28:10:a8:cf:51:31:4d:19:d3:5b:fb:59:05:d4:55:13:
08:79:43:53:ed:5c:4e:e6:06:a7:67:c5:5e:2e:59:e0:de:3f:
c0:c6:44:83:9d:2f:f8:10:9d:8b:ec:a3:11:ad:a6:76:ec:30:
b4:e7:0e:d0:3a:bc:96:90:65:3a:83:74:1f:2f:11:dc:79:f2:
2c:3c:2a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 23:48:47 2026 by rpki-client