Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: 5NVCEwmyyPPKk1K9/qIfNOYQ0/SZ9+Gg0ZapLnCWRbI=
Subject key identifier: BA:66:A6:D4:35:AF:2E:B1:21:AC:13:49:52:FA:CC:39:28:4F:9C:3F
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 019D9D7620AF183F6AAB3C5F0CB9C98464F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 3F
Signing time: Fri 17 Apr 2026 22:00:57 +0000
Manifest this update: Fri 17 Apr 2026 22:00:57 +0000
Manifest next update: Sat 18 Apr 2026 22:00:57 +0000
Files and hashes: 1: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: U0VlP7eiNCzNxrX4tJrq9dC6iR9wKMrLQaxrnvVZwII=)
2: pYomtf1SWtfdxwK0By1Z7f81J9g.roa (hash: 9Tdoe2hUbvQQkVuoDseELmtNdkp6TbY6A9h5XS/GJxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9d:76:20:af:18:3f:6a:ab:3c:5f:0c:b9:c9:84:64:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Apr 17 22:00:57 2026 GMT
Not After : Apr 18 22:00:57 2026 GMT
Subject: CN=ba66a6d435af2eb121ac134952facc39284f9c3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:47:f0:9b:61:c4:8c:ba:3e:c3:3e:ca:43:8f:
52:e2:b2:c5:f6:ff:73:34:9d:12:41:e5:13:2f:98:
cf:0d:3d:41:67:2f:7d:8e:67:82:a8:66:fc:aa:1a:
43:20:28:26:7f:8c:3f:08:23:0f:25:a6:b1:1c:6d:
c4:a8:4c:6b:f0:79:7e:76:33:2a:9a:35:fe:be:fb:
e9:14:8e:67:b5:93:d7:bc:c9:39:d3:0d:ab:ce:ec:
96:44:17:d5:eb:ee:db:89:ed:10:a9:a0:7c:7a:b1:
2b:64:91:ae:d2:f6:15:7a:5e:19:04:4f:9c:68:03:
20:d2:5a:1d:79:a4:b4:96:2f:0c:0f:fb:db:c1:67:
ac:5f:32:d3:33:b2:38:a9:e7:7f:48:98:7b:b4:5b:
94:a2:80:ea:74:0e:48:22:0b:db:37:29:f4:15:22:
e2:72:9b:43:70:45:e9:32:2f:e9:d4:c6:f1:96:0e:
d9:49:14:a4:9a:d8:ce:e6:a0:ed:91:ed:61:9c:7e:
28:45:0b:02:7a:42:33:01:64:ba:bf:68:0d:de:af:
68:5c:a3:80:05:27:6a:3c:bb:49:59:ee:0c:a0:a8:
60:d7:2b:7d:ad:81:d9:c1:43:5c:fc:ec:c7:24:07:
d1:5a:d5:a3:f8:d8:f3:ca:cc:ad:11:ea:d0:05:f9:
cc:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:66:A6:D4:35:AF:2E:B1:21:AC:13:49:52:FA:CC:39:28:4F:9C:3F
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:af:e1:29:d5:82:37:b6:11:68:a5:99:bd:8e:e2:62:7d:7d:
92:ca:71:42:aa:17:21:41:d8:ea:0a:66:9e:f3:63:5f:81:b5:
50:99:0d:1a:71:d4:79:b8:e5:d2:85:c2:2d:65:1f:76:9b:58:
65:2a:29:1f:a7:53:93:16:03:da:91:66:0e:d9:4a:94:87:00:
95:ba:6e:5a:ea:9d:5d:b3:28:80:fa:a1:d6:dc:13:fa:50:98:
01:03:5b:79:aa:24:ae:10:bb:d4:ec:e7:05:a3:e2:08:63:ef:
e5:50:62:83:2b:73:a5:5a:f6:41:05:3a:21:2c:12:fc:7b:41:
77:06:d4:82:53:23:92:da:52:d8:42:b8:19:8d:f9:c8:3d:0b:
2f:06:55:73:74:33:b5:27:ac:40:3a:d7:1c:80:6a:93:7a:2b:
a6:80:d2:87:7a:49:e6:cb:40:11:e1:d8:f7:44:22:9d:fb:38:
67:63:eb:38:90:14:b3:2a:eb:ba:33:d4:e1:51:b0:72:71:ad:
92:ee:31:af:9e:8d:2e:61:52:97:42:bb:ff:8e:68:fe:53:51:
ee:1b:3b:47:42:57:98:b6:65:64:32:66:bf:00:fc:34:b0:c6:
a9:91:43:bb:f9:f3:3f:c5:50:8c:d0:f9:a0:73:92:2f:40:bc:
38:ba:62:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2ddiCvGD9qqzxfDLnJhGTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTYxOTIwMGVjOTYzZDE5NGE4MDE4ZDQxNjNkNzc4YTVj
YjUyNmEwHhcNMjYwNDE3MjIwMDU3WhcNMjYwNDE4MjIwMDU3WjAzMTEwLwYDVQQD
EyhiYTY2YTZkNDM1YWYyZWIxMjFhYzEzNDk1MmZhY2MzOTI4NGY5YzNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA10fwm2HEjLo+wz7KQ49S4rLF9v9z
NJ0SQeUTL5jPDT1BZy99jmeCqGb8qhpDICgmf4w/CCMPJaaxHG3EqExr8Hl+djMq
mjX+vvvpFI5ntZPXvMk50w2rzuyWRBfV6+7bie0QqaB8erErZJGu0vYVel4ZBE+c
aAMg0lodeaS0li8MD/vbwWesXzLTM7I4qed/SJh7tFuUooDqdA5IIgvbNyn0FSLi
cptDcEXpMi/p1Mbxlg7ZSRSkmtjO5qDtke1hnH4oRQsCekIzAWS6v2gN3q9oXKOA
BSdqPLtJWe4MoKhg1yt9rYHZwUNc/OzHJAfRWtWj+NjzysytEerQBfnMMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLpmptQ1ry6xIawTSVL6zDkoT5w/MB8GA1UdIwQY
MBaAFDdWGSAOyWPRlKgBjUFj13ily1JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYjhhNWUtNjZlYS00ZTIwLTllYTgt
MmVkZDIxNzgzNzAzLzEvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wYjhhNWUtNjZlYS00ZTIwLTllYTgtMmVkZDIxNzgzNzAz
LzEvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAka/hKdWC
N7YRaKWZvY7iYn19kspxQqoXIUHY6gpmnvNjX4G1UJkNGnHUebjl0oXCLWUfdptY
ZSopH6dTkxYD2pFmDtlKlIcAlbpuWuqdXbMogPqh1twT+lCYAQNbeaokrhC71Ozn
BaPiCGPv5VBigytzpVr2QQU6ISwS/HtBdwbUglMjktpS2EK4GY35yD0LLwZVc3Qz
tSesQDrXHIBqk3orpoDSh3pJ5stAEeHY90Qinfs4Z2PrOJAUsyrrujPU4VGwcnGt
ku4xr56NLmFSl0K7/45o/lNR7hs7R0JXmLZlZDJmvwD8NLDGqZFDu/nzP8VQjND5
oHOSL0C8OLpi5A==
-----END CERTIFICATE-----
Generated at Sat Apr 18 00:48:14 2026 by rpki-client