Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: rKQCZAP3evsQ2jg4tLquiRlRgihm4mafKSSyEWAwfKU=
Subject key identifier: 4E:CC:8C:76:9E:F0:4B:3A:EC:A2:6B:ED:94:6A:3C:3D:5E:0C:67:C5
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019D999951B2D29721A015A1E1AE42DCE2C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 0879
Signing time: Fri 17 Apr 2026 04:00:55 +0000
Manifest this update: Fri 17 Apr 2026 04:00:55 +0000
Manifest next update: Sat 18 Apr 2026 04:00:55 +0000
Files and hashes: 1: 5h6iiCzzgrx94impUF3-0E0VH4M.roa (hash: gAmFQIrj0BhLKJIyD6cNTjoBJomwxcy0Bn5O+lbR7yM=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: lo7sHwFx7X8y1a6Aw83Ml6ShtHDi4swtv5mHdBfSdS0=)
3: NpNK-uzEZJdDjk5ocRPUpbcQCm4.roa (hash: +hYy5E8CGoO0sLwCG7Df7i4TXDNBZcQohk0iKBpaPD0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 04:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:99:51:b2:d2:97:21:a0:15:a1:e1:ae:42:dc:e2:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Apr 17 04:00:55 2026 GMT
Not After : Apr 18 04:00:55 2026 GMT
Subject: CN=4ecc8c769ef04b3aeca26bed946a3c3d5e0c67c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:12:cf:97:59:c4:6c:9d:7c:51:0f:30:c7:7c:
fb:21:ca:02:3d:b6:d4:0e:40:1b:72:b2:41:b7:41:
8c:e5:d5:c5:7d:b5:22:94:35:19:bc:ca:65:0c:5f:
42:a4:0a:d6:d9:66:ef:fa:7f:6d:3f:22:06:ee:3b:
11:d8:70:aa:c9:63:43:82:03:f7:8a:9d:6f:36:ed:
40:e3:f3:6b:71:1c:96:30:1c:a5:c1:f3:f8:30:6d:
ad:ae:99:f0:d2:c3:49:55:bc:4b:d8:bc:a1:2b:14:
e7:72:37:61:77:0e:00:21:03:d2:1d:91:89:6b:45:
be:27:65:30:89:0d:30:02:81:1e:79:5a:2f:c1:30:
30:9c:73:b1:12:f9:e4:06:94:b2:aa:41:0c:0c:b2:
27:d6:61:21:23:41:53:1f:2e:53:fd:99:6d:4b:42:
01:d5:a2:fb:aa:ad:7b:a9:9d:42:40:2b:37:70:a0:
d8:19:7a:62:6f:98:68:0f:11:90:9a:0c:93:82:44:
43:f2:e7:79:88:3d:65:b1:e6:d3:b8:08:c3:ef:d7:
1a:52:9d:53:bb:f4:0a:13:ca:fd:dd:d2:60:70:05:
22:cc:a6:3f:4c:06:ae:c8:a1:4e:76:f5:1d:e7:34:
3d:ce:bf:05:06:43:46:d3:b5:84:14:eb:63:90:d8:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:CC:8C:76:9E:F0:4B:3A:EC:A2:6B:ED:94:6A:3C:3D:5E:0C:67:C5
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:bf:ee:57:e0:24:45:90:1f:d0:53:30:0e:9f:8f:1b:4a:07:
e6:7a:3d:6e:62:df:a2:c4:36:23:87:b8:17:f4:e9:bc:18:b0:
99:35:34:e8:bc:b3:de:91:f4:43:ca:41:a6:a8:61:a8:a0:c3:
83:8b:c3:d1:22:b1:53:29:db:62:68:1d:c4:9d:82:df:9e:2c:
7a:0a:08:e9:31:d2:e7:51:2e:ef:87:f3:a1:cb:07:9c:57:f7:
c6:f2:fa:e2:04:25:80:fe:72:fd:de:e5:59:47:f0:3d:14:ce:
76:2d:03:31:e9:ed:f5:aa:50:39:b5:88:20:72:80:a9:f7:b7:
ad:29:32:ed:ee:3b:66:77:4b:61:d0:c8:f3:25:fb:63:a9:bd:
f7:7d:4a:07:27:66:97:60:1a:22:72:df:b0:52:86:ba:24:1a:
35:7a:3a:0f:46:74:ae:0b:bb:e6:fa:1f:02:2a:ce:c5:cd:88:
1f:e1:11:a8:ce:3b:cb:02:2b:2c:96:bf:0a:f4:49:20:5b:63:
1e:c7:e7:62:62:cf:7d:20:c9:3d:41:8d:2a:78:cc:a4:d9:5b:
ac:1e:5d:f8:fe:da:65:ef:a4:a0:2c:89:67:47:36:2b:02:11:
d2:6e:0d:e1:4c:46:34:11:18:1e:e1:ac:c1:f1:40:9b:e7:29:
3a:41:d2:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:32 2026 by rpki-client