
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: AE0ih6ESzOyHnYUivjD+ZG5TUQzE4fgVlGBk1nUMU3w=
Subject key identifier: A0:FF:E7:82:48:E2:B6:23:5C:B6:42:1E:AC:B9:E1:8B:63:66:D6:80
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019EB87D0B17FEC62A330761211FFA00E187
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 061E
Signing time: Thu 11 Jun 2026 21:01:02 +0000
Manifest this update: Thu 11 Jun 2026 21:01:02 +0000
Manifest next update: Fri 12 Jun 2026 21:01:02 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: uY+n7MI95RZfyOIqaY3eT3CJZQALl2UXG6FOfsWp4GM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7d:0b:17:fe:c6:2a:33:07:61:21:1f:fa:00:e1:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Jun 11 21:01:02 2026 GMT
Not After : Jun 12 21:01:02 2026 GMT
Subject: CN=a0ffe78248e2b6235cb6421eacb9e18b6366d680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b7:15:e0:6a:1f:b4:9a:98:7a:de:c4:21:2e:
99:de:68:da:2b:49:73:5b:13:af:48:56:b8:30:04:
95:d0:1c:ea:52:db:9c:72:0c:12:1e:b6:28:21:fe:
82:a6:57:d9:b2:b0:59:ef:51:2f:c5:80:8e:d3:70:
cf:fb:60:89:4c:d4:40:47:5a:01:60:7a:bb:43:56:
ab:58:16:9a:dd:cb:a8:6c:e2:61:11:34:cb:06:0e:
19:ab:1e:4d:df:c5:80:de:a4:3b:dd:28:78:72:eb:
38:35:89:28:be:1c:13:d8:33:d9:82:36:35:9c:78:
7b:b6:ed:47:c4:c3:37:85:76:fe:41:f6:d6:6b:41:
0a:26:a5:0e:a0:bd:44:b9:e6:e7:1a:37:e6:3e:92:
3e:79:a5:0d:ac:a8:a5:98:8e:ae:cb:aa:50:b4:da:
de:21:2c:dc:2f:2b:31:8b:32:56:54:2e:56:6b:d3:
98:f9:39:5b:5f:58:cb:b8:32:82:5c:cb:fb:76:1a:
c6:56:ea:aa:a5:cd:38:7b:14:85:6a:6c:53:61:84:
a1:a3:c4:f2:ea:9c:3e:dc:35:7c:70:8d:e8:d3:2f:
a2:2e:cc:57:60:f6:3b:8d:ba:f5:f2:b3:3e:d3:ba:
cb:57:b6:90:df:5f:ef:fd:bc:3c:d3:2b:68:27:76:
58:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:FF:E7:82:48:E2:B6:23:5C:B6:42:1E:AC:B9:E1:8B:63:66:D6:80
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:e6:11:f6:e7:07:f7:df:4d:bf:d8:c7:1c:b3:f8:10:6a:2a:
44:a6:fa:a6:9e:76:0b:b8:f3:e5:3f:4d:f9:2c:00:54:75:f3:
6e:5d:67:99:bb:cc:46:2b:89:a7:31:45:bd:b1:9d:d1:1b:0d:
f6:72:32:87:58:05:99:28:3f:9b:be:e7:28:d7:d7:7b:3e:43:
94:ed:04:b2:25:fd:12:d6:e6:ac:fd:fd:49:e0:29:83:e0:f5:
22:ff:a9:58:06:b7:0b:ca:cd:31:df:d6:77:ec:27:b5:e9:48:
7e:5c:b4:37:c6:53:21:61:ae:97:5c:4e:91:39:d2:6a:67:66:
da:42:4a:20:d7:3f:fc:65:c3:e3:bc:3f:a1:e2:e3:58:7e:41:
85:d7:85:3c:aa:86:ee:b2:e0:51:73:c4:ff:23:65:7b:77:00:
07:3e:ed:4a:30:00:63:94:ef:b6:65:2b:46:ff:47:2e:65:03:
b1:e5:f6:57:b6:3e:ec:59:38:e9:0e:81:4c:27:f6:e0:16:21:
bb:f9:8a:75:ee:51:5c:5c:dd:64:0b:91:a9:c0:08:6e:9b:3e:
02:ae:bc:46:a3:43:12:95:32:d8:13:95:51:c0:1b:14:ca:35:
85:98:01:f9:d9:b6:53:8e:3a:b8:fb:1f:85:10:f5:c5:d0:a4:
32:da:67:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 03:40:04 2026 by rpki-client