Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: uoW9UJ7+bvfv/aeDMaFn4waCJ911FWTnSkWY3OffO+c=
Subject key identifier: C6:0B:A0:73:71:3C:87:B9:61:A6:A3:DA:48:F2:73:38:72:54:A8:84
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01A186E3E8C6C96489A5A9B7C26B8221C35B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 0792
Signing time: Thu 29 Oct 2026 09:00:45 +0000
Manifest this update: Thu 29 Oct 2026 09:00:45 +0000
Manifest next update: Fri 30 Oct 2026 09:00:45 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: L4urust/Tnhtvxv96KZVoaaxA8KPaD+6VzJAPCP/Yhg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 30 Oct 2026 08:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:86:e3:e8:c6:c9:64:89:a5:a9:b7:c2:6b:82:21:c3:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Oct 29 09:00:45 2026 GMT
Not After : Oct 30 09:00:45 2026 GMT
Subject: CN=c60ba073713c87b961a6a3da48f273387254a884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:12:3f:ed:13:ad:b3:4c:82:44:c3:64:65:e7:
7b:75:31:4e:8a:5b:c8:e0:9a:2c:a1:a8:61:06:de:
52:6f:6f:e3:8e:50:15:94:3b:45:33:04:b8:fd:da:
44:f4:0c:90:c3:67:46:7b:01:4a:5d:56:7d:0a:e3:
22:ec:9e:ee:06:6e:a6:9d:b0:cc:e9:80:95:2d:b2:
b9:84:47:ac:81:50:1e:f2:ba:2e:b3:da:e6:dc:40:
5a:07:36:c8:61:4e:a9:d8:f0:64:92:3a:35:f1:68:
93:fe:0d:ac:f6:69:d9:6c:29:d3:96:be:c2:da:58:
cd:2a:10:81:c1:23:43:b0:e3:3a:6b:5f:92:60:29:
37:31:00:b5:02:1a:1e:99:29:27:de:eb:54:68:d6:
93:7a:10:91:b0:c4:11:37:68:55:f9:ab:57:bb:bf:
77:eb:d0:67:94:fb:19:f2:bd:5b:f2:ae:6b:42:9b:
28:db:d1:32:37:f9:9e:3a:99:f3:a6:a7:86:c5:27:
c1:77:01:30:d0:2c:16:d5:7b:67:70:2d:52:e5:49:
57:a9:ec:a6:33:e1:4f:83:9f:90:b8:74:67:96:02:
95:4a:4a:58:1a:d0:d4:19:c6:34:d2:a7:92:e4:f1:
f0:69:3f:17:93:ce:6b:64:72:a8:f4:20:0a:c1:de:
06:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:0B:A0:73:71:3C:87:B9:61:A6:A3:DA:48:F2:73:38:72:54:A8:84
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:6b:13:af:23:78:cf:03:a5:f5:74:d4:6e:3d:88:53:d2:46:
ea:de:11:9f:c3:e0:25:ea:37:53:6c:03:52:f9:ae:fd:28:e7:
4e:a9:ea:94:d1:f1:17:88:6a:0d:9b:e0:cf:54:ef:fe:99:89:
a3:24:07:3a:ce:5b:71:60:33:00:a5:61:29:a9:f6:d1:87:b6:
58:0d:b4:4d:e4:c1:1e:63:60:3d:9b:0d:64:a1:b5:ee:68:9c:
5f:6b:88:86:f8:f8:4a:72:d5:f6:e3:88:06:df:90:58:75:fd:
c9:e2:3e:2a:24:97:2a:30:42:48:a8:41:a8:c1:43:17:2e:35:
b4:b7:ed:45:39:eb:c5:f9:e2:f7:02:82:4a:8e:1e:6d:82:a0:
fa:1d:7f:68:21:fb:fb:a9:76:92:75:fd:8f:af:ec:37:87:cd:
2a:cc:58:03:47:54:60:d7:c2:78:d3:56:f8:ae:1b:62:85:86:
e6:c9:2e:98:b9:97:42:b0:50:ac:47:4a:a9:11:e1:f7:1c:4d:
da:ff:b1:03:55:60:5b:f5:97:ab:42:91:3f:cb:e8:71:a2:83:
38:be:da:42:10:69:a3:51:16:5c:65:b6:5a:f7:6f:45:71:1a:
a9:74:f7:28:b7:70:0c:31:d1:a6:5c:f3:c9:ca:ff:fb:a4:78:
76:98:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 29 13:50:39 2026 by rpki-client