Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
File: N_9VuVdDqRW3k9ct5xrJbOYZipc.mft (raw, json)
Hash identifier: t48hji0+f+rXUwTtM7NraWm9pTfirPbrRFF3fMCl8L8=
Subject key identifier: 32:EB:78:D3:B1:34:0E:03:08:99:73:9B:C4:45:24:86:6A:98:02:01
Authority key identifier: 37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
Certificate issuer: /CN=37ff55b95743a915b793d72de71ac96ce6198a97
Certificate serial: 019F84C3B96C16556769AB2B2C61D72F3B77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
Manifest number: 1951
Signing time: Tue 21 Jul 2026 13:00:47 +0000
Manifest this update: Tue 21 Jul 2026 13:00:47 +0000
Manifest next update: Wed 22 Jul 2026 13:00:47 +0000
Files and hashes: 1: Kjv5ZqAKlQ-u26S6yymzYFVvtRA.roa (hash: sOevRBDCcbgFby2Me1gEDOPKrFjBhZ/Oz4Fc5/D3wtA=)
2: N_9VuVdDqRW3k9ct5xrJbOYZipc.crl (hash: bApnpmdo5WB/Vigw8ogR2EY55MhZyFCkVpXNpsknD4c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:84:c3:b9:6c:16:55:67:69:ab:2b:2c:61:d7:2f:3b:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ff55b95743a915b793d72de71ac96ce6198a97
Validity
Not Before: Jul 21 13:00:47 2026 GMT
Not After : Jul 22 13:00:47 2026 GMT
Subject: CN=32eb78d3b1340e030899739bc44524866a980201
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:ce:01:47:19:92:1f:02:1a:59:0d:32:04:42:
e8:cb:5a:10:fc:12:35:72:4e:ad:d3:d5:de:ff:21:
81:a8:6f:53:fc:68:98:a8:05:a0:ac:f7:1c:56:e9:
70:ac:57:16:b5:d8:c5:88:3a:45:58:de:ad:eb:d7:
b4:75:30:ec:ab:a3:5f:cb:1b:7d:32:d8:e7:e3:1c:
05:ff:ba:b0:60:cc:b4:f3:82:80:e4:37:c4:61:af:
9a:ea:d7:eb:6e:26:c7:b5:9a:16:6a:4f:39:d5:c2:
07:0e:13:c0:3d:d9:ee:e3:55:49:1c:f5:df:16:5b:
a2:25:d5:2d:07:67:cd:b8:cc:f5:b7:ce:d3:8b:bf:
d9:47:a5:9d:74:08:db:2f:cb:95:14:38:39:6c:0f:
b5:e2:57:11:8c:bd:d1:36:f1:c6:c5:a9:00:d9:e1:
d3:a8:f7:36:9f:4d:15:dd:82:10:2f:9b:46:db:7f:
69:5d:15:05:09:0b:34:98:3b:07:38:71:9e:7d:c6:
1d:51:4d:da:e3:84:dc:98:5a:e5:65:05:46:93:5d:
a7:75:e5:f9:aa:ec:1b:dd:5a:1a:1f:34:44:eb:1d:
be:64:c1:17:1d:b7:e0:26:cf:82:ed:92:ea:8b:9d:
80:87:99:f4:fd:46:85:c0:c0:16:77:53:5a:d8:96:
93:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:EB:78:D3:B1:34:0E:03:08:99:73:9B:C4:45:24:86:6A:98:02:01
X509v3 Authority Key Identifier:
keyid:37:FF:55:B9:57:43:A9:15:B7:93:D7:2D:E7:1A:C9:6C:E6:19:8A:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_9VuVdDqRW3k9ct5xrJbOYZipc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/e0059f-b910-4bb7-9341-7750972265aa/1/N_9VuVdDqRW3k9ct5xrJbOYZipc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:5e:c7:a6:39:63:71:06:9f:d6:f8:f7:1b:dd:f4:d1:d2:98:
3c:82:0e:bf:2e:e7:1d:b5:37:d9:db:d5:ca:65:81:9e:53:03:
d7:c7:f0:97:49:d0:37:45:05:e9:da:dc:31:b7:3a:f7:73:75:
13:8c:80:b1:74:74:57:49:d3:77:c1:3b:16:22:f1:54:9f:a4:
6d:a3:23:99:47:54:1d:84:ee:6e:21:9b:12:7f:a3:36:31:00:
9f:e0:f3:26:cb:d7:59:a3:b5:8c:bd:e0:59:c5:ce:17:b5:27:
b9:4f:a9:26:29:5b:de:34:c3:c3:34:6f:8a:d1:61:10:67:49:
c5:be:fc:21:29:05:c1:49:73:44:60:6f:e7:ce:16:af:5a:5a:
eb:8b:df:ab:7f:49:cf:2c:1e:18:be:9e:41:64:e3:50:e5:cc:
50:f7:41:3e:f2:14:a8:08:54:3f:cf:4d:ce:da:55:b0:b5:a0:
d6:26:fe:51:e4:94:0f:f7:37:56:da:05:47:30:f5:44:27:94:
06:87:bf:ec:9a:a4:e0:61:77:47:1a:1f:f5:9e:e0:44:af:53:
b9:49:19:04:82:fc:70:24:fc:56:a1:5a:53:2b:f9:b1:44:bf:
74:4f:9c:95:02:d1:58:b3:24:f3:f0:15:80:45:21:09:4d:5f:
42:05:38:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 22:37:53 2026 by rpki-client