Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: 9wzEpu5I4lrRKwOjmRe7JITUfralcDG3gcO/JZF7ozk=
Subject key identifier: C0:7F:A6:17:61:CA:9F:23:2B:E5:CD:57:D6:C5:7D:CF:AD:2E:58:40
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 019FACAD095AB7393CADAF89CD21980EEA6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: 0153
Signing time: Wed 29 Jul 2026 07:00:49 +0000
Manifest this update: Wed 29 Jul 2026 07:00:49 +0000
Manifest next update: Thu 30 Jul 2026 07:00:49 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: lMK1S7orprEL5MxgrzecKII+Zg9Y7hfkTdF1oPuY2uk=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:ad:09:5a:b7:39:3c:ad:af:89:cd:21:98:0e:ea:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Jul 29 07:00:49 2026 GMT
Not After : Jul 30 07:00:49 2026 GMT
Subject: CN=c07fa61761ca9f232be5cd57d6c57dcfad2e5840
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:65:29:41:34:42:4a:39:c5:56:ff:3d:6f:0d:
1c:5f:b6:6d:19:65:a0:6d:96:0d:06:a3:13:20:55:
f5:a3:0a:a0:36:bc:84:35:54:55:6e:c7:bb:f5:a5:
e8:ed:5d:8a:e2:c7:84:b0:52:00:36:c9:dd:d1:67:
5c:8a:9d:ad:b0:d8:a3:e8:55:06:33:23:39:f5:a7:
16:12:55:b4:60:81:50:2b:a4:ff:a3:bb:21:a5:8c:
44:49:0e:c8:95:80:d6:cf:ed:5e:67:cb:9a:aa:13:
1b:a4:4b:59:32:f2:a7:0c:b8:4a:24:b3:d6:50:78:
fe:b9:88:f0:d8:83:e8:ee:e9:bb:a8:03:b7:73:fa:
54:f7:4d:e9:8a:44:22:d8:f8:5a:79:0f:34:ae:fb:
d0:73:e8:a9:14:b1:32:e6:63:19:25:f3:08:45:f8:
a4:bf:ef:7b:e4:53:59:b9:59:14:26:e4:e6:bf:e2:
a0:3d:a3:1b:bd:2e:db:a0:d7:37:9e:61:bd:ad:b8:
c3:3a:7f:6d:db:69:c7:30:81:50:09:2b:f4:6d:2e:
18:00:59:2a:c0:e7:15:d9:d4:40:6e:07:83:0f:2d:
4e:03:85:29:8e:90:d9:be:23:b4:b1:24:89:db:bb:
f6:c8:52:f8:57:bb:26:0b:40:40:2d:78:a1:9b:58:
8b:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:7F:A6:17:61:CA:9F:23:2B:E5:CD:57:D6:C5:7D:CF:AD:2E:58:40
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c4:a6:8d:00:92:85:6a:c8:57:83:08:8e:e0:c9:4d:74:3a:
6c:9a:27:03:bc:ce:14:2f:eb:0e:77:95:8f:0a:5f:ea:c8:e4:
10:4c:e5:9a:a2:e8:b1:0c:6a:12:eb:7c:81:57:7c:17:8d:f3:
05:08:f4:30:0b:05:90:fe:ac:ae:54:82:bf:8d:5f:db:3d:4c:
1d:15:3b:b1:df:ae:8e:be:e8:77:b9:27:7c:6c:40:90:f7:0e:
e6:73:a2:0d:d8:40:63:05:17:5a:8c:74:f6:eb:04:e6:32:91:
72:54:08:e9:89:8a:9c:86:2d:db:7f:f0:c8:11:0f:14:77:bf:
52:ba:b0:f6:16:a0:6c:9f:5d:97:cf:7e:e3:73:b5:af:8d:fb:
db:bc:09:8b:b8:5e:fc:47:0a:ca:ad:f1:60:a9:8b:f2:66:fd:
b9:b1:2e:09:67:f2:5e:d9:de:4b:5f:1a:33:bc:8e:f8:a7:e3:
4e:61:17:16:cf:4a:5c:c2:c5:5f:2f:98:89:47:dd:2f:73:69:
4c:4a:a2:ad:42:70:d8:9f:16:3d:81:cc:a3:89:1c:77:9f:18:
6a:21:e5:8f:e0:98:b5:bf:43:7b:7e:e3:b6:13:57:ba:91:af:
1e:1b:98:fd:ce:83:8b:62:11:ee:13:cd:7e:b0:fe:9a:c0:aa:
0e:86:b2:4a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+srQlatzk8ra+JzSGYDupvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NTYxOTIwMGVjOTYzZDE5NGE4MDE4ZDQxNjNkNzc4YTVj
YjUyNmEwHhcNMjYwNzI5MDcwMDQ5WhcNMjYwNzMwMDcwMDQ5WjAzMTEwLwYDVQQD
EyhjMDdmYTYxNzYxY2E5ZjIzMmJlNWNkNTdkNmM1N2RjZmFkMmU1ODQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3WUpQTRCSjnFVv89bw0cX7ZtGWWg
bZYNBqMTIFX1owqgNryENVRVbse79aXo7V2K4seEsFIANsnd0Wdcip2tsNij6FUG
MyM59acWElW0YIFQK6T/o7shpYxESQ7IlYDWz+1eZ8uaqhMbpEtZMvKnDLhKJLPW
UHj+uYjw2IPo7um7qAO3c/pU903pikQi2PhaeQ80rvvQc+ipFLEy5mMZJfMIRfik
v+975FNZuVkUJuTmv+KgPaMbvS7boNc3nmG9rbjDOn9t22nHMIFQCSv0bS4YAFkq
wOcV2dRAbgeDDy1OA4UpjpDZviO0sSSJ27v2yFL4V7smC0BALXihm1iL9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMB/phdhyp8jK+XNV9bFfc+tLlhAMB8GA1UdIwQY
MBaAFDdWGSAOyWPRlKgBjUFj13ily1JqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8wYjhhNWUtNjZlYS00ZTIwLTllYTgt
MmVkZDIxNzgzNzAzLzEvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8wYjhhNWUtNjZlYS00ZTIwLTllYTgtMmVkZDIxNzgzNzAz
LzEvTjFZWklBN0pZOUdVcUFHTlFXUFhlS1hMVW1vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAccSmjQCS
hWrIV4MIjuDJTXQ6bJonA7zOFC/rDneVjwpf6sjkEEzlmqLosQxqEut8gVd8F43z
BQj0MAsFkP6srlSCv41f2z1MHRU7sd+ujr7od7knfGxAkPcO5nOiDdhAYwUXWox0
9usE5jKRclQI6YmKnIYt23/wyBEPFHe/Urqw9hagbJ9dl89+43O1r43727wJi7he
/EcKyq3xYKmL8mb9ubEuCWfyXtneS18aM7yO+KfjTmEXFs9KXMLFXy+YiUfdL3Np
TEqirUJw2J8WPYHMo4kcd58YaiHlj+CYtb9De37jthNXupGvHhuY/c6Di2IR7hPN
frD+msCqDoaySg==
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:22:39 2026 by rpki-client