Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: 6jC6j1DDFMTe0p8JbdN5Y43xkYBT9uQUQOdZpA4lgk0=
Subject key identifier: 12:9F:DA:8C:6A:41:01:11:6E:3F:DC:DD:B4:8F:45:D7:B9:E6:36:64
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019FA1F25C27E6CF5FB90199120E28D128CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 19D1
Signing time: Mon 27 Jul 2026 05:00:42 +0000
Manifest this update: Mon 27 Jul 2026 05:00:42 +0000
Manifest next update: Tue 28 Jul 2026 05:00:42 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: p1u1naFE3KKBGVVLUKQuADC+hgwgTic5KjGEcjpS3e4=)
2: e8LfT7gfSGa2muv0jF7A1t1LYdk.roa (hash: WRAYYzwkRc+Wb2Yiz2tOnruT9Tcor90WcXfJXFu2bXg=)
3: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
4: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 05:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f2:5c:27:e6:cf:5f:b9:01:99:12:0e:28:d1:28:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jul 27 05:00:42 2026 GMT
Not After : Jul 28 05:00:42 2026 GMT
Subject: CN=129fda8c6a4101116e3fdcddb48f45d7b9e63664
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:77:d6:2e:26:8e:b4:54:d2:b8:5d:8c:bc:dd:
4d:60:0e:62:3b:e9:b2:63:9e:47:1a:15:3b:59:9a:
f1:b6:9c:d8:d4:8d:fd:d2:68:bb:d8:0f:ed:2b:4c:
c0:07:5d:f1:1b:91:62:97:f9:7d:f7:84:0f:d5:46:
43:81:46:01:47:19:d9:34:d0:cf:8f:e1:c9:b6:7e:
4a:62:94:71:b7:2c:d3:63:42:1b:53:e8:c8:1e:24:
10:3d:24:80:83:c6:71:24:06:c7:af:18:1b:81:49:
e4:43:cc:84:78:05:67:f9:bc:ba:3e:cb:20:92:b1:
b3:f2:2c:26:0d:15:fd:7d:65:a9:c2:3f:94:73:65:
40:f7:40:eb:a5:ba:31:a9:cc:b5:8e:55:04:a0:ba:
31:13:0e:7b:b4:0c:8f:89:96:93:cd:b7:55:70:78:
2e:ed:fe:f5:2e:cd:9e:ef:dc:cf:83:f2:f4:7d:90:
5a:aa:f4:5b:ac:66:e1:fa:2d:9a:7c:c5:27:71:a5:
7e:00:04:9c:aa:bd:0b:11:f0:7e:38:f4:cc:18:db:
06:5f:4f:75:11:37:89:fc:fb:c9:d9:aa:16:5c:6b:
ca:9e:7f:bd:9e:ae:07:bb:3f:03:e3:de:3a:4c:f2:
7e:13:22:eb:c4:be:57:dc:77:47:74:de:48:37:1e:
e3:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:9F:DA:8C:6A:41:01:11:6E:3F:DC:DD:B4:8F:45:D7:B9:E6:36:64
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:83:ae:41:13:e5:51:92:70:79:ad:8e:78:db:ab:32:e6:18:
5a:c2:b3:37:d7:8b:60:01:ab:15:c7:a3:a3:7e:ed:96:6c:aa:
2b:9a:97:ae:f5:52:96:d5:97:72:f4:65:17:08:f0:b6:75:95:
fc:d4:6b:d0:e2:78:5b:b6:2b:96:2f:5b:37:ee:d7:71:81:8d:
e7:09:ad:74:81:b9:bd:38:2e:24:9a:4f:70:31:db:88:58:d7:
46:2f:46:75:4d:77:ee:c5:77:b4:36:86:a9:b0:43:a7:5f:71:
2a:90:d6:06:e1:e0:d8:ed:98:ef:6e:c0:5f:82:24:c3:9a:9a:
6b:53:35:d0:48:de:9e:89:97:e5:81:9f:a0:43:f3:8a:7b:46:
dc:cd:ff:be:65:72:5e:10:7b:48:11:7f:7e:d3:c7:e9:c5:79:
b5:be:69:4c:a4:5b:ce:36:91:60:d0:a8:26:b5:15:d7:9c:bc:
12:ed:aa:72:c7:dd:e5:4f:23:e2:f1:e4:fe:87:9f:11:4c:83:
c7:42:12:21:1a:96:71:25:11:e4:06:4f:ce:e2:26:b0:f4:6c:
fe:49:6b:8a:25:c1:9c:72:08:5c:d4:fa:d8:c2:11:a8:63:5c:
3b:b5:d9:ea:8d:ec:15:bb:c1:a8:3f:d9:28:17:51:ba:fd:0f:
13:ac:42:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:26:23 2026 by rpki-client