Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: 9GkeNrmiVXpS992D1Av38tVEaBjjN77VCFPq5WRYpS4=
Subject key identifier: CF:41:DB:18:16:EE:28:E0:30:7C:54:31:2B:09:51:FA:F0:05:28:39
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01A08BD5EC551AE71757DAA80CA1EAAE95FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 0710
Signing time: Thu 10 Sep 2026 15:00:47 +0000
Manifest this update: Thu 10 Sep 2026 15:00:47 +0000
Manifest next update: Fri 11 Sep 2026 15:00:47 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: ZUNO9RjhnjUI50jouDFyRyMtlEdszjV52uKSyYFNAqE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:d5:ec:55:1a:e7:17:57:da:a8:0c:a1:ea:ae:95:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Sep 10 15:00:47 2026 GMT
Not After : Sep 11 15:00:47 2026 GMT
Subject: CN=cf41db1816ee28e0307c54312b0951faf0052839
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:4b:3e:d4:1a:e6:99:12:74:cd:8c:f2:15:5f:
ce:25:f2:2a:8b:9f:ec:fb:af:89:32:1a:40:5c:84:
50:61:d0:48:14:89:eb:9c:53:c3:71:56:57:76:5a:
7e:82:32:18:6b:b1:e6:2d:cb:e0:06:be:1b:d3:32:
00:4b:95:a8:e0:6f:c7:8b:bc:b0:ec:e2:a7:80:85:
0f:ad:9a:93:12:3b:ab:a8:54:c5:05:67:7f:bb:b2:
b5:98:fb:b1:cc:ac:62:d9:fb:3c:8a:e7:5e:7c:a0:
bb:13:1e:a9:2d:6e:8f:12:e7:3a:29:97:90:4e:36:
b1:cb:eb:96:5c:b0:b3:87:d0:e6:b4:9e:5c:2f:47:
41:80:d7:8b:4b:6c:46:7d:4d:c9:0f:71:a1:88:10:
9b:25:60:99:59:1a:08:75:c1:37:c8:92:a9:98:97:
9a:74:cb:a5:c8:57:81:ee:c6:63:ac:30:58:4f:ee:
e8:9a:c3:31:4f:69:60:41:4b:23:12:66:91:31:77:
69:33:e9:db:64:72:1d:09:a9:1f:c9:69:77:73:9b:
18:8b:af:d2:cc:5a:cd:00:3d:f9:93:c1:95:f4:5a:
c3:c3:62:83:8b:aa:24:bd:e8:83:1f:9c:d8:cc:92:
85:44:a7:80:03:0f:32:22:75:94:93:ea:a6:c9:71:
9b:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:41:DB:18:16:EE:28:E0:30:7C:54:31:2B:09:51:FA:F0:05:28:39
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:90:74:55:c0:61:ae:02:dc:ad:ae:06:87:00:7b:70:c1:5e:
45:c4:29:04:9c:e5:d9:e9:e8:26:4f:57:26:d0:53:c4:bf:82:
17:25:fc:b4:05:98:b8:3a:d3:dd:f1:17:9e:c1:ce:3c:62:b2:
89:e7:96:d1:5b:60:87:cd:ac:7e:d9:26:4a:98:15:8a:e1:2b:
c8:a0:0c:e2:e0:d0:1d:d2:f0:6c:5c:71:1b:24:20:7e:ca:19:
4d:93:b9:97:14:0a:9e:ba:d5:a3:b2:e0:d5:18:e8:87:fe:31:
11:92:0f:02:da:41:54:6d:c6:5b:a9:dd:ad:00:35:33:97:c9:
f6:b2:4a:58:bd:7c:c3:62:63:70:3c:ce:60:bd:86:b4:5f:7f:
40:40:a0:75:53:b9:f7:a1:17:24:e4:50:5f:88:1b:b0:42:60:
d4:15:c6:39:c0:4f:8b:2f:70:87:fa:a3:ab:5f:22:ee:17:eb:
71:15:3a:b3:71:9c:d9:ae:9d:03:d9:0b:67:35:72:5c:79:82:
77:83:be:06:1c:2e:96:d0:52:4a:8d:61:34:41:0e:0b:dd:c1:
2a:a8:41:d2:e4:33:4b:e0:7a:11:00:e1:5a:e6:13:7d:15:fb:
3b:24:64:2c:10:17:da:93:30:18:f0:37:8c:7a:33:22:9b:75:
09:ef:9f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 01:13:15 2026 by rpki-client