Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: l4AOdybf6S7K5VhhTtYehAzSq48q8dns3X/leQjjnWk=
Subject key identifier: A2:F6:6A:1E:9A:BB:8B:7D:B7:9A:59:33:A4:35:FC:0E:DE:4E:7A:21
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019F19E88D838CC44CE9A78E3E023FF8C45E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0940
Signing time: Tue 30 Jun 2026 19:01:38 +0000
Manifest this update: Tue 30 Jun 2026 19:01:38 +0000
Manifest next update: Wed 01 Jul 2026 19:01:38 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: QbU+6jsLehoyd8dEr6AYso0tEDanV9c4uhLAbh9IYx4=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 19:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:19:e8:8d:83:8c:c4:4c:e9:a7:8e:3e:02:3f:f8:c4:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jun 30 19:01:38 2026 GMT
Not After : Jul 1 19:01:38 2026 GMT
Subject: CN=a2f66a1e9abb8b7db79a5933a435fc0ede4e7a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6d:5d:91:a7:23:41:c0:ec:8e:93:49:89:2d:
3b:8d:8a:a8:9a:b7:9d:6c:cf:5c:71:6a:44:b6:1f:
54:21:56:b1:19:1c:68:13:65:43:00:12:6b:9e:ed:
89:20:cb:fa:7e:b4:75:1a:1c:47:80:57:98:88:1e:
4e:d6:11:94:3e:ce:5b:64:36:a3:30:b6:b6:94:83:
d0:c5:84:78:c4:67:69:9c:9c:4c:dc:e4:a1:34:2d:
ab:f0:13:c3:17:03:ce:33:5d:25:88:7c:6b:e7:fe:
f0:45:ff:6b:39:19:23:0a:83:d2:64:50:2c:ad:04:
b4:3e:4a:40:cb:d3:f0:87:f5:41:63:7d:8a:d2:aa:
c7:22:7b:20:8b:75:48:ff:e0:43:92:c9:b1:17:fe:
ba:f5:1e:18:a6:ce:d2:c3:c1:31:0b:7c:00:a7:86:
cc:9b:26:ae:a4:08:52:27:a4:2e:84:19:11:29:b2:
23:4a:59:c5:82:da:2d:cf:53:bc:a4:a6:38:05:14:
45:04:26:9e:fc:25:b7:66:99:9b:fc:cd:4d:d4:ef:
73:e9:4c:d7:84:48:52:c5:33:56:d7:17:12:14:e4:
da:37:35:12:00:05:c1:4e:68:bb:b0:00:b6:3d:e0:
05:77:f9:65:4f:26:ce:7f:0c:9f:c7:e7:0c:34:c4:
36:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F6:6A:1E:9A:BB:8B:7D:B7:9A:59:33:A4:35:FC:0E:DE:4E:7A:21
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:33:35:f5:8b:95:75:60:17:fe:4f:23:fc:26:b4:52:7b:50:
b2:b4:02:21:0b:8c:29:71:a6:96:17:50:85:78:84:93:65:de:
bd:22:a0:87:89:65:43:f1:1d:34:75:29:65:83:21:49:bd:64:
70:c5:b8:4f:49:af:3e:02:94:48:9f:a8:db:1c:1f:70:e6:b8:
37:9c:f7:12:6c:26:3e:92:4a:72:ac:eb:8a:9b:31:44:93:e8:
a0:7d:ef:ab:1d:cc:27:22:b6:5d:a5:fc:ef:bc:a2:94:26:bc:
36:9d:f0:79:3d:1c:31:ad:f7:1a:85:69:0a:b1:3f:ef:fd:60:
ad:cd:bc:8f:05:c1:93:fd:a9:a7:8f:41:34:2e:a9:87:c8:59:
d0:bd:8d:f7:97:d9:2c:38:b5:fe:b2:93:c1:49:ed:63:51:4e:
dc:ea:ed:8f:35:ed:d3:be:ef:b4:19:c8:a9:74:e5:67:36:e5:
11:e9:96:9d:fd:54:ea:d5:cc:00:b2:b5:54:73:12:95:c1:53:
bd:46:c3:e3:53:83:0b:a6:e2:3c:6f:2c:8e:44:b1:fe:4c:92:
98:b8:d7:2f:dc:21:90:3d:70:01:eb:23:42:70:0c:74:91:5e:
f2:16:c1:ff:dd:0f:21:f1:0d:de:6d:8b:3b:d6:37:89:16:26:
80:34:f7:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 02:39:19 2026 by rpki-client