Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
File: N_vfL1-FXl4cpI53w73TO9R7RDg.mft (raw, json)
Hash identifier: XUUyGtFQko0boFFLGiSs2Dc/YDfckjYrkDTKVlGtILo=
Subject key identifier: C0:67:60:9F:CC:B9:73:A6:B8:B8:8E:53:D6:7F:21:55:E0:D2:13:DB
Authority key identifier: 37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
Certificate issuer: /CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Certificate serial: 019E4B7BAC1C713EA359B9344282961E899F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
Manifest number: 1921
Signing time: Thu 21 May 2026 17:00:56 +0000
Manifest this update: Thu 21 May 2026 17:00:56 +0000
Manifest next update: Fri 22 May 2026 17:00:56 +0000
Files and hashes: 1: 9Tg6eK2b_2sLSNQhw2vCbvdE0mQ.roa (hash: WVuRHrOmlMS6ytXr2Z+ySWU/cHgaZovcwRctB5udkTE=)
2: N_vfL1-FXl4cpI53w73TO9R7RDg.crl (hash: n/2GFKwNNQNxEEhT3sOsMPJ7nUkHuLp5WLyfYFON6w0=)
3: jcwqdhirBap47K8I2f73LhbiMrI.roa (hash: 92nuQiH7pyqjL/L1oEYcoXAA6/cRc3pynOqbszSmmCI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4b:7b:ac:1c:71:3e:a3:59:b9:34:42:82:96:1e:89:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fbdf2f5f855e5e1ca48e77c3bdd33bd47b4438
Validity
Not Before: May 21 17:00:56 2026 GMT
Not After : May 22 17:00:56 2026 GMT
Subject: CN=c067609fccb973a6b8b88e53d67f2155e0d213db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:34:28:9f:a7:a8:21:f0:b4:29:f3:a4:0a:e9:
36:a1:9c:25:65:86:40:71:1e:35:19:15:f1:5a:d1:
df:10:cb:17:4f:c3:72:f0:d8:de:55:f2:2d:c3:58:
17:b3:cf:9c:64:01:02:b0:a8:8a:86:66:fc:99:ae:
f6:3b:64:85:88:61:81:c6:6b:23:f5:a8:58:77:d8:
a7:05:9b:49:80:a3:b4:93:21:63:6d:53:4a:bc:4e:
6b:94:1a:8a:81:de:6f:f7:bb:3b:a2:0a:02:ee:92:
00:b7:2d:02:7b:53:de:98:97:5f:04:0c:88:aa:e8:
63:6f:04:c1:38:a1:0e:7a:4d:f0:72:0d:86:16:8d:
74:51:23:5a:2d:cb:80:54:07:1f:94:34:17:7d:47:
b1:0e:19:00:c4:5e:be:aa:c6:00:27:fc:d1:39:99:
61:7b:d0:92:37:ab:27:dd:84:f5:b8:e4:f9:cc:af:
84:b2:24:a1:e5:56:b2:e9:d7:8e:2d:fe:5e:85:37:
3b:ce:a7:a9:f1:fa:1c:2e:2d:74:07:1f:12:9b:b5:
05:66:a3:ce:7e:78:88:87:a6:a4:38:70:3c:c9:0f:
2b:d5:62:7d:62:94:94:cd:a6:04:bb:71:1b:4b:3c:
f5:a2:05:6f:ad:d9:5a:9f:6f:9d:64:f3:79:d8:77:
30:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:67:60:9F:CC:B9:73:A6:B8:B8:8E:53:D6:7F:21:55:E0:D2:13:DB
X509v3 Authority Key Identifier:
keyid:37:FB:DF:2F:5F:85:5E:5E:1C:A4:8E:77:C3:BD:D3:3B:D4:7B:44:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_vfL1-FXl4cpI53w73TO9R7RDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/1336c7-a33f-4ec6-82d7-f44166bb2db0/1/N_vfL1-FXl4cpI53w73TO9R7RDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:23:b9:5f:4d:b0:0d:2f:e7:a6:6a:04:2e:19:ff:cd:a6:9a:
ec:9a:eb:bf:5e:9d:f3:6e:e8:8b:a7:6d:c3:38:00:0b:5d:82:
cc:25:b6:f1:03:e7:97:c9:c2:f1:f1:07:e3:76:75:58:06:58:
d4:5e:3e:9e:3b:d0:ba:c5:3b:2c:08:6d:c4:b3:ba:69:72:cd:
6a:31:4b:ff:50:52:b1:27:e7:b1:2e:15:53:ed:d7:f4:c0:d1:
ba:51:af:26:fb:5d:cd:1c:de:07:f0:81:d0:53:19:59:58:d6:
b3:5b:87:d8:fe:3d:fe:52:4f:f9:b1:5b:9c:5a:bc:3e:c3:0a:
67:cd:ef:09:88:83:d7:7a:8e:86:3f:c4:5b:80:25:d1:be:ac:
ae:a1:c6:3a:e9:ca:4b:cc:bf:1f:30:58:fa:ce:5a:5b:5d:7a:
2a:ea:a9:2d:5f:26:b3:b5:a4:cb:a4:97:d7:51:03:53:5f:6a:
27:40:af:4d:28:2d:64:87:45:36:14:ef:0a:56:1b:ca:fd:a1:
bb:a5:42:59:20:41:b1:63:ba:1d:35:9c:fb:90:52:4d:49:1d:
f8:54:39:8e:2a:7f:fc:79:0a:e8:90:cc:7f:7b:be:9c:d6:e9:
9f:66:59:ca:49:60:65:39:bc:1c:71:6a:c0:6c:b8:ec:60:48:
67:00:35:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 01:40:50 2026 by rpki-client