Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: BTsFIOOfDWWvhuIxFj3kTDT2xC5bYQ9CCZBunWJRo94=
Subject key identifier: FE:E1:D7:87:04:8B:6C:CB:7F:53:C3:C5:8D:0B:C3:91:24:A9:6D:F0
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019FA2291C5D069A5C7655A053B3DEBC6895
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 0697
Signing time: Mon 27 Jul 2026 06:00:30 +0000
Manifest this update: Mon 27 Jul 2026 06:00:30 +0000
Manifest next update: Tue 28 Jul 2026 06:00:30 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: /hk3k40TSzBaFIp/K2KLBnIlf2C/+rKMwWlK26bHgCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 06:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:1c:5d:06:9a:5c:76:55:a0:53:b3:de:bc:68:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Jul 27 06:00:30 2026 GMT
Not After : Jul 28 06:00:30 2026 GMT
Subject: CN=fee1d787048b6ccb7f53c3c58d0bc39124a96df0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:bb:d7:bb:7f:bf:f4:49:11:55:9c:3b:61:69:
42:ed:f1:65:a8:5f:32:20:e8:93:89:66:90:b0:91:
cf:14:36:c2:55:ae:e1:0a:01:ba:be:cb:35:ed:15:
b6:3d:45:fa:bb:5f:e2:44:14:51:46:ba:c6:10:3d:
2a:49:4e:fe:3f:5a:45:a0:89:d1:91:84:d5:dc:81:
ca:7f:65:8b:b4:11:a7:f8:c4:98:a3:26:9d:5b:c9:
4f:1b:b2:ee:b1:81:43:7d:54:02:3a:39:f1:5b:9d:
a7:13:92:58:ca:ea:2a:90:8f:72:b4:1d:cc:91:1f:
d9:19:1d:94:91:e3:4e:db:17:db:88:33:1f:01:ae:
fa:38:13:5e:7e:9e:52:a6:0e:40:cb:8e:85:4a:d3:
e4:34:47:55:d2:e8:b3:b8:c1:7e:4f:71:e5:49:cc:
2b:44:3e:95:c3:63:0a:e4:98:4b:4a:a8:f4:2f:4b:
0c:3e:38:11:19:30:47:67:63:04:86:44:90:1a:01:
8b:cc:b6:b1:de:05:ed:a3:af:52:7b:24:de:b7:9e:
4f:52:e9:89:c2:42:6c:36:44:12:49:31:9e:95:d2:
45:05:c0:ae:2f:22:22:08:6a:3e:17:52:10:af:3b:
ed:d7:ff:0a:55:78:17:62:77:2f:ca:1e:a9:2d:a5:
aa:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:E1:D7:87:04:8B:6C:CB:7F:53:C3:C5:8D:0B:C3:91:24:A9:6D:F0
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:1b:41:b8:c8:fe:f0:cc:89:89:af:6d:f5:26:66:ed:89:ca:
f6:f6:74:69:3a:45:b2:85:3f:01:4c:8d:a2:7b:fc:d9:0b:a3:
f7:e2:08:9b:5a:3b:0c:33:9d:8a:04:d8:16:27:4a:fa:3e:3c:
a7:9c:d6:29:a6:0d:59:da:1e:8a:74:80:05:6e:78:5f:39:14:
77:8e:32:7d:6e:b4:88:98:e4:3f:67:87:f8:dd:20:bb:36:34:
0a:7f:f7:dd:7b:22:cb:e3:26:af:07:42:f5:62:15:88:47:5b:
68:c8:5d:6e:43:4a:21:a7:4a:97:5a:50:43:bd:5c:2e:5a:e8:
fd:d9:c5:92:a8:91:5b:72:bd:08:d0:20:9b:9e:7b:78:ca:a8:
c5:17:fc:3a:ac:0a:ba:62:df:18:a7:5d:63:bc:b7:69:28:a4:
94:9a:6d:48:c5:73:4d:d6:7a:36:9a:f4:63:4f:7f:7b:48:75:
6c:bf:70:26:f0:5f:6e:6c:25:e5:fd:9e:0e:b3:32:38:da:4f:
2e:17:ea:33:dc:c6:f3:4e:6e:b8:5d:86:d6:1c:63:de:0e:ae:
43:c8:d1:01:79:81:22:95:c7:15:ef:3a:d8:4e:07:27:40:ea:
e3:04:1f:f4:51:bf:c6:3c:fa:ff:e7:84:f4:62:a9:87:29:a5:
2f:d3:10:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 15:11:56 2026 by rpki-client