Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: saAiU8R4b5vDtG15hf+KizvR0lrBLHLYdqCKEv3UEOw=
Subject key identifier: 10:5B:27:71:49:3F:7C:A5:F3:1C:D6:F7:71:F8:28:06:0D:4C:C2:3C
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019E3229FA625E836EDC01F9ED3CB9C022A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 08C8
Signing time: Sat 16 May 2026 19:01:12 +0000
Manifest this update: Sat 16 May 2026 19:01:12 +0000
Manifest next update: Sun 17 May 2026 19:01:12 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: /hAVGdjz6QqNl3lkF0dnIuzYcCloTLrQ8RjUE8+whsY=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:32:29:fa:62:5e:83:6e:dc:01:f9:ed:3c:b9:c0:22:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: May 16 19:01:12 2026 GMT
Not After : May 17 19:01:12 2026 GMT
Subject: CN=105b2771493f7ca5f31cd6f771f828060d4cc23c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6e:22:9c:1b:26:d9:67:fb:3c:0c:fd:6d:71:
f3:72:d3:17:a4:fd:16:46:28:eb:01:6a:f8:87:cd:
97:24:3f:b3:04:44:49:fc:db:5b:0a:e9:e0:d4:0f:
34:48:98:39:84:44:2d:bb:69:c8:70:0d:52:10:15:
b3:a4:c7:c5:4d:71:24:a8:08:87:83:08:fc:49:27:
4c:79:ab:b7:df:75:94:6b:4b:97:76:8e:21:08:f4:
b3:1a:46:8a:6a:88:e5:6f:98:5e:9b:23:1c:d2:c2:
00:8f:11:5e:5f:17:01:16:0f:b2:5f:fb:f4:1a:50:
d8:76:f6:63:2d:9d:09:41:79:2d:01:9d:e5:65:26:
bc:c6:b6:87:86:5d:1a:7a:31:e8:7e:be:d4:bc:7f:
a9:cf:a8:d0:b7:9c:03:5c:d9:bd:45:4a:00:44:4c:
d7:50:c2:ba:6b:f8:f3:cf:ad:59:c6:b3:b9:4c:3b:
54:bc:dc:12:d9:71:08:7b:5b:0d:4c:67:e1:fb:ff:
29:36:37:1f:df:4f:f9:ab:40:98:34:ea:d4:02:e0:
b2:ed:0d:15:de:32:e6:af:80:fb:69:88:76:c1:b9:
2c:95:9e:bd:b5:26:e1:d0:8a:ea:a2:06:d7:c9:df:
34:18:53:24:d9:ba:35:18:77:c7:f3:fa:2b:42:82:
d0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:5B:27:71:49:3F:7C:A5:F3:1C:D6:F7:71:F8:28:06:0D:4C:C2:3C
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:77:d9:70:10:b6:50:27:50:de:07:50:df:b1:0e:f8:8a:f1:
0f:5a:53:98:b9:bc:20:4b:ff:12:74:73:20:3f:40:47:33:b3:
b3:52:6a:58:78:ab:29:0a:f6:72:c2:26:02:99:44:89:df:50:
df:48:96:66:67:b8:e7:f1:b2:ff:55:66:8f:9e:36:70:4d:47:
35:4d:a7:f5:af:08:df:09:0e:fb:56:9a:66:03:80:a8:9a:66:
6b:a9:a7:49:93:37:57:11:c9:13:d2:e5:71:e3:0e:17:d5:3f:
9d:7d:b1:cf:bc:f7:d9:ee:bf:14:b1:ae:41:d0:d2:f3:54:5a:
69:a1:9e:9d:3b:c3:e5:16:d9:49:47:e8:7c:a2:e9:2d:70:c2:
38:f4:14:b6:21:08:a9:90:cf:60:1a:08:64:43:4a:b1:ea:82:
f6:04:2a:8d:00:b9:fc:98:c9:7c:aa:b7:e3:fc:17:e4:51:ab:
9b:a0:33:37:88:37:90:0d:cb:71:52:0f:06:b3:3f:d0:24:6c:
40:46:ef:20:5e:fa:78:d2:19:6b:71:b2:0b:2d:7a:b6:15:fa:
1a:c0:42:0e:f6:e4:0d:b6:fa:85:57:c9:cb:b3:d5:07:d2:06:
e4:a5:e1:e9:de:a2:88:90:4f:bc:60:6d:69:30:b2:3d:50:e5:
89:26:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:41:23 2026 by rpki-client