Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: 5hESGBbayyB7St+ygnUiv3V7r+EdPLC3YnxztusK6MA=
Subject key identifier: 3D:4E:3E:05:9F:B5:F6:66:9A:1D:B0:93:2A:F4:83:77:FE:0C:25:E2
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 01A15E1F390A3373C438159C214AB2C87A95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 1A98
Signing time: Wed 21 Oct 2026 11:01:06 +0000
Manifest this update: Wed 21 Oct 2026 11:01:06 +0000
Manifest next update: Thu 22 Oct 2026 11:01:06 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: ToTg9YG52+P4gLE0+oGuRywZ09vpxEjsr0PwjQ64agY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:1f:39:0a:33:73:c4:38:15:9c:21:4a:b2:c8:7a:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Oct 21 11:01:06 2026 GMT
Not After : Oct 22 11:01:06 2026 GMT
Subject: CN=3d4e3e059fb5f6669a1db0932af48377fe0c25e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:11:c2:da:2a:76:8e:01:81:8c:99:27:f2:77:
57:f9:e1:ef:41:75:b6:4c:4c:45:f2:22:60:91:ac:
fb:f6:c2:f3:af:68:07:56:91:da:5b:af:45:1c:06:
f5:19:c6:66:fa:0e:1a:d7:36:45:a8:ea:85:b3:23:
80:75:79:ec:5c:d6:81:b4:b5:3e:0e:53:f2:06:26:
d7:4f:3b:c7:90:c2:f5:68:c5:77:a4:9a:25:17:5a:
7d:2b:da:1f:c9:bc:60:6c:e8:f0:a0:11:86:30:63:
68:87:d9:00:25:2e:7d:29:b0:dc:55:18:57:27:32:
6e:5a:3e:30:a0:2e:76:01:9c:9d:af:24:b3:b3:8b:
08:ae:f5:ae:ae:23:27:90:26:58:1a:86:0b:f0:79:
82:2c:ce:0b:c8:b8:25:5c:f2:c0:5c:09:d8:b1:b5:
e1:e7:83:1d:48:21:d8:05:12:92:d4:69:a6:3c:db:
ec:50:de:f7:0a:ff:a2:ac:be:d9:2f:8d:a9:e4:c8:
49:2e:b8:be:a5:c4:f8:32:41:99:a0:a0:d9:6e:38:
6d:6f:f8:d3:21:ea:79:b6:67:2e:b0:d5:ae:62:bd:
d6:a6:23:bd:70:65:ad:eb:0c:6e:54:18:ee:8c:d1:
e9:24:ce:44:eb:df:f3:ce:65:7b:1c:cb:08:f6:e8:
c8:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:4E:3E:05:9F:B5:F6:66:9A:1D:B0:93:2A:F4:83:77:FE:0C:25:E2
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e6:3d:52:2f:94:69:88:d0:14:06:60:85:80:23:19:f6:95:
2c:3d:b1:37:8e:3e:24:02:85:0d:6d:8d:95:06:f4:8b:91:93:
ad:42:94:c5:46:d9:95:07:4e:05:2c:a7:be:9b:3d:70:23:fc:
bb:c7:aa:cc:10:d6:eb:d9:ac:03:90:23:32:d9:78:20:db:d3:
cd:79:22:39:82:05:15:66:8e:8f:b9:b4:1c:d1:10:25:42:4d:
99:fe:bb:86:37:42:1c:28:9a:0f:64:4d:1e:1d:b6:48:52:e5:
e5:31:5f:79:6b:23:0c:f1:61:8b:e2:8c:2e:0a:63:a1:03:1b:
ae:9e:57:5a:e4:dc:f3:5a:74:52:51:bf:04:49:be:e1:aa:2a:
82:f6:ae:b9:11:e1:c6:c4:5c:43:9b:87:d0:77:78:6c:0a:36:
99:c9:f4:33:58:d4:dd:b8:a2:f6:77:12:9a:8f:f7:e0:0e:e6:
dc:9f:e3:c2:72:27:14:97:f4:bb:28:37:25:28:75:f3:f8:5a:
e0:b1:d3:05:22:c7:c2:4d:c6:3c:0b:f5:0e:7d:88:3d:57:1b:
4c:0a:ce:f5:37:72:36:44:21:c8:23:32:34:5c:17:85:c1:39:
3a:ff:c2:35:e8:a6:1b:f4:b9:18:e1:9f:9c:ee:b5:38:0b:e5:
7b:95:84:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:05 2026 by rpki-client