Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
File: N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft (raw, json)
Hash identifier: T0InCJap94VnohMIEVZiaYMCy6tZo7kYrjlPVYFe1B0=
Subject key identifier: B5:CE:F9:3D:19:4F:1A:68:0A:8E:48:EC:C5:B1:03:20:BA:39:B6:8A
Authority key identifier: 37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
Certificate issuer: /CN=375619200ec963d194a8018d4163d778a5cb526a
Certificate serial: 019EC2FFFCCBE98A2246DBF26F6DF00F9006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
Manifest number: DA
Signing time: Sat 13 Jun 2026 22:00:16 +0000
Manifest this update: Sat 13 Jun 2026 22:00:16 +0000
Manifest next update: Sun 14 Jun 2026 22:00:16 +0000
Files and hashes: 1: CliA-0RCmBP5jjI5h8D48sPOGV0.roa (hash: hBPxznJHy10l61DTuSBXzJlYWq1lSf/i2dX6tg2v1PI=)
2: N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl (hash: v0TZFzTQlYskyYiiJIjLObmMJq1QpPq2ZJ8zBUunmXY=)
3: wdB9LGkt5Z89Nz8-5AtftRQ5SVU.roa (hash: c6g0hcWzs9a8z0GrkzCUUkEWc4LjOJBHcb0RnnSjyIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 22:00:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c2:ff:fc:cb:e9:8a:22:46:db:f2:6f:6d:f0:0f:90:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=375619200ec963d194a8018d4163d778a5cb526a
Validity
Not Before: Jun 13 22:00:16 2026 GMT
Not After : Jun 14 22:00:16 2026 GMT
Subject: CN=b5cef93d194f1a680a8e48ecc5b10320ba39b68a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:7c:04:ab:e3:48:88:32:e4:88:ab:31:1e:37:
f5:2c:4e:0c:9a:93:70:aa:ea:19:8d:75:2f:a2:20:
7e:ab:a9:7f:91:48:a4:5f:1a:20:78:09:d2:69:ba:
00:b4:55:98:95:34:e7:71:00:d4:54:64:47:85:32:
c8:37:b7:17:a7:87:0e:33:6d:04:3a:f7:84:15:af:
0d:46:7e:58:96:21:8b:b3:2c:e5:80:fa:0c:08:73:
28:e4:63:8f:a7:51:d3:5b:ae:2a:02:5c:a9:37:38:
b9:55:0a:0a:1f:4f:95:3d:d8:04:44:02:1b:56:35:
58:33:59:68:21:ac:53:6c:77:13:f0:55:99:28:78:
3d:e1:dd:d2:bd:2d:b6:e7:da:13:7d:ec:3e:66:6a:
bf:4f:49:47:c4:7a:4a:59:b8:75:69:ef:2b:b9:68:
6c:1d:4e:a7:c0:aa:09:4f:58:e7:e6:bc:73:2f:03:
a0:4e:57:f0:ed:eb:8a:82:09:f7:78:28:17:1a:a6:
ff:01:b4:11:18:ec:72:eb:07:08:84:cd:03:4c:ca:
f0:98:3f:30:98:a7:27:45:01:2e:6c:31:b3:97:9e:
c8:3b:3c:b5:be:af:ac:a2:52:e5:84:0b:fc:74:21:
13:1d:39:95:f3:88:08:c9:74:bb:83:23:8b:13:05:
cd:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:CE:F9:3D:19:4F:1A:68:0A:8E:48:EC:C5:B1:03:20:BA:39:B6:8A
X509v3 Authority Key Identifier:
keyid:37:56:19:20:0E:C9:63:D1:94:A8:01:8D:41:63:D7:78:A5:CB:52:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N1YZIA7JY9GUqAGNQWPXeKXLUmo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/0b8a5e-66ea-4e20-9ea8-2edd21783703/1/N1YZIA7JY9GUqAGNQWPXeKXLUmo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:06:01:fb:db:5a:ec:a3:f3:cd:3d:7c:31:00:80:13:df:8e:
9e:40:a5:0b:61:1e:4d:6d:08:b1:67:a4:5b:f9:87:83:5d:f4:
0a:90:11:3e:85:22:eb:eb:61:5b:b8:25:27:1b:fd:d3:00:21:
45:74:bc:f1:b3:82:1e:e1:fa:b9:08:b4:3d:52:24:03:8c:3c:
56:88:e5:67:f1:6e:5e:ef:b6:2a:e3:8b:73:30:22:eb:eb:09:
0d:d0:5e:6d:09:3d:ee:ca:1f:e4:52:31:a6:fa:ea:f6:6b:17:
2b:ec:f1:17:93:fa:a6:b3:5c:c7:f5:9c:6e:d1:93:9f:e1:8d:
c9:38:98:c5:d6:38:7f:6b:d7:4c:7c:b5:60:1c:d6:72:82:ee:
2f:e2:50:58:9a:f6:ed:ef:e6:a1:32:03:7b:52:d8:bd:1a:71:
0d:94:da:7b:ef:2b:59:98:8f:25:52:e3:b3:e7:eb:57:dd:72:
a6:13:34:32:ba:b3:ea:e4:3b:98:a2:f8:e8:4d:96:3d:b6:1d:
90:b7:29:9f:e4:13:36:92:13:a5:a2:b6:31:74:10:88:6c:a6:
82:58:7a:b5:45:a1:85:96:af:04:b5:34:93:fd:d2:57:d5:26:
19:a4:2d:0c:e3:6c:a8:75:ab:60:72:05:f9:18:f0:fa:0e:fb:
bd:1e:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 06:35:52 2026 by rpki-client