Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: t3R8dzvUYxaPgjwR5boPEz8gEYR8RDruyU6AewLr70E=
Subject key identifier: D7:67:14:70:70:64:46:E4:53:9D:3D:A9:1B:5A:8A:9A:A0:5B:E4:46
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 01A088D4F61B1E91F73C8971FA0809B494F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 01C5
Signing time: Thu 10 Sep 2026 01:00:52 +0000
Manifest this update: Thu 10 Sep 2026 01:00:52 +0000
Manifest next update: Fri 11 Sep 2026 01:00:52 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: GBW1NV13u6n3S+JxMT/cXzqzhmXzJKx/A8Nd/73Yyg8=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:88:d4:f6:1b:1e:91:f7:3c:89:71:fa:08:09:b4:94:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Sep 10 01:00:52 2026 GMT
Not After : Sep 11 01:00:52 2026 GMT
Subject: CN=d7671470706446e4539d3da91b5a8a9aa05be446
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c4:0f:e1:46:bb:b9:31:ee:bb:5b:3f:e6:dc:
d0:f7:d5:86:fb:b0:ba:80:bd:12:8b:e2:fb:ac:f6:
e4:4a:4f:47:ce:6f:6d:34:7e:96:d3:7f:15:59:ea:
fe:1d:51:a8:9b:56:4e:b2:1d:ec:62:02:52:ad:09:
1d:7b:9c:b0:ff:64:10:f0:2f:12:5b:a3:68:1f:49:
4b:da:8b:53:26:8c:0b:be:fb:54:6a:8f:b1:3d:a7:
85:85:ff:76:49:62:e7:65:5a:72:b6:56:cd:1f:f3:
4d:d6:77:68:2f:40:88:50:bd:54:99:63:a2:f5:b4:
dd:48:77:09:bd:c2:cf:9a:2e:fc:5d:20:95:db:e1:
b8:6f:f2:0c:79:5e:f6:33:6a:05:c8:b4:0f:66:b2:
41:49:34:b5:0b:e1:8f:cd:94:97:f2:69:e2:a3:5d:
fd:5d:9c:93:92:ff:85:77:cc:11:5e:23:c4:92:7f:
61:ff:e0:de:d1:1d:b5:19:65:83:aa:32:68:79:61:
81:48:83:5e:95:ca:b0:c7:c8:9f:7e:f5:bf:2b:83:
89:fe:3f:9a:06:5b:06:46:78:a4:4a:60:1b:ea:54:
14:a4:26:27:1a:ed:95:e2:a8:ee:1f:ab:79:8c:f9:
d0:72:97:9a:a4:f4:d7:cc:b8:d8:ef:70:07:8c:5d:
a0:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:67:14:70:70:64:46:E4:53:9D:3D:A9:1B:5A:8A:9A:A0:5B:E4:46
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:aa:26:52:12:72:95:c2:70:c1:50:c0:af:2a:3d:df:5d:63:
67:ec:cb:9d:b8:29:6a:0b:94:aa:89:70:2f:0d:f0:d6:cf:96:
38:7a:d9:a2:bc:11:f4:f9:60:94:9d:53:22:10:31:20:e9:c5:
4a:0b:8b:59:53:6b:ea:50:4f:8b:bc:85:e4:2e:3d:99:d8:ea:
eb:7c:fa:1b:b9:97:fb:7b:78:84:0e:26:ec:db:ff:0b:6f:24:
4f:4f:75:5a:a3:99:0b:12:da:b9:89:e3:67:52:e6:e6:6a:f7:
08:44:c4:48:5d:46:3f:b2:4c:92:ec:77:a5:c8:9a:79:84:56:
2a:b3:96:b1:c4:5d:8a:a2:81:1f:5f:20:43:58:2d:a5:de:90:
7c:7c:5d:8e:22:c8:e3:aa:e1:cd:72:48:74:e1:d7:4b:7a:f5:
03:d4:54:38:52:42:7b:7a:10:59:4a:89:e2:89:25:43:cf:d1:
23:4a:af:be:83:9c:79:17:35:e7:19:f1:8b:10:e1:3d:fa:55:
25:9f:86:dd:47:73:e6:e6:1a:2a:ad:5d:b7:97:d5:b6:5f:a3:
7c:a7:ae:44:51:a0:b1:5d:a8:ef:23:bc:dd:96:bd:6c:77:ba:
62:57:ec:d3:d9:e1:b3:b5:4f:d2:b3:af:f9:ff:3f:10:6d:e7:
d4:21:4d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 04:30:17 2026 by rpki-client