Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: drEpWMVUKYEjdEnQ94j7UQkKyLIgRvXdiWfR7Ss0Sr8=
Subject key identifier: A0:14:3A:6B:4B:69:0E:2B:8D:20:7D:57:39:AF:63:16:09:EF:C4:14
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 019F9F2892AB79A5528650EF15EEE0AB6A09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 014C
Signing time: Sun 26 Jul 2026 16:01:04 +0000
Manifest this update: Sun 26 Jul 2026 16:01:04 +0000
Manifest next update: Mon 27 Jul 2026 16:01:04 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: 5vJJCoyG9Olrxej+VhC1tVdaBgZdIfhpZdZMpSovQdc=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9f:28:92:ab:79:a5:52:86:50:ef:15:ee:e0:ab:6a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Jul 26 16:01:04 2026 GMT
Not After : Jul 27 16:01:04 2026 GMT
Subject: CN=a0143a6b4b690e2b8d207d5739af631609efc414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:38:8a:b8:41:24:55:db:bd:15:24:fa:01:cb:
cb:6e:ed:bf:59:dd:6b:90:84:6c:f8:e7:19:c8:e2:
c1:9d:12:2b:bc:77:72:69:5b:17:32:a9:4e:23:f9:
bb:b9:7b:a9:4e:57:53:4e:73:b7:d6:de:fe:9c:99:
9c:16:e7:0c:ba:d8:1c:10:0e:b0:b7:91:5b:ee:e9:
cf:ce:0e:80:07:a2:82:0a:d4:e7:fd:6c:13:2f:e1:
4c:13:3c:b5:6e:ea:20:5d:de:fd:88:a9:a8:78:dc:
df:20:9f:fb:fc:f3:31:37:3d:69:00:6e:ce:8c:5d:
ad:c8:b7:6a:34:bf:42:f1:da:2c:9e:88:76:d9:b7:
9c:51:5b:0c:f8:fa:ff:15:b7:10:70:d8:58:9e:e3:
9c:9d:64:8e:b0:8e:64:46:09:5f:51:9c:33:f5:0d:
a5:1b:9e:ca:96:e6:87:49:88:d2:ca:70:66:18:ce:
04:d8:da:4e:de:a8:20:8d:7b:3a:dd:ff:32:65:a2:
d3:8f:11:7b:6e:cb:85:44:60:c7:06:c2:60:e3:3b:
7d:3d:6f:45:e6:31:0f:91:bf:54:1f:5b:0e:0e:a7:
8f:ff:5e:57:a3:a5:50:7a:e9:a2:5a:de:7d:f7:ca:
67:6e:cf:1e:51:d2:41:76:f7:2d:55:84:ba:c8:e9:
da:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:14:3A:6B:4B:69:0E:2B:8D:20:7D:57:39:AF:63:16:09:EF:C4:14
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:9d:38:f8:50:2b:80:5f:22:ad:22:cc:99:da:b3:7b:54:64:
9e:e7:26:c7:23:1f:15:03:01:b2:bd:42:ea:6c:18:d3:2b:ec:
74:3d:b3:e9:4b:44:c9:bb:c7:a4:4d:a6:a3:9b:54:d0:e3:07:
e6:24:58:85:fb:8e:3d:ae:84:b9:cd:9e:30:51:0c:5c:91:b0:
3c:17:c1:cf:14:fa:9c:5d:da:74:d7:fb:11:3e:c5:95:30:b9:
b0:63:e1:4f:91:0d:24:ba:f9:ab:f7:96:48:72:5a:9b:e2:a6:
0d:2d:c5:a9:3f:2e:ca:14:55:cc:c7:00:c6:0c:1f:38:52:66:
b7:29:4d:49:92:0a:c0:3d:5e:71:36:e7:13:b1:f8:df:e6:93:
ff:03:21:f1:d4:ca:70:df:1e:1e:5a:c6:36:a3:a3:2e:8f:b3:
d0:ae:74:fd:3d:f2:37:63:63:6e:fc:0b:7c:98:f9:6b:2b:0c:
17:ac:fd:10:76:66:a4:6f:11:23:f9:7b:2d:ec:32:cd:78:53:
26:4c:27:b5:f8:67:32:1c:27:22:16:59:3d:59:ff:f4:f9:92:
40:b7:e6:69:47:fe:dd:2b:fb:09:0b:be:79:42:75:02:62:f8:
ce:74:82:6c:0e:dc:54:44:35:a3:ce:21:0e:ec:dd:ea:f9:70:
de:d1:d6:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 02:09:52 2026 by rpki-client