Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
File: N09vPjy5c7rIpD9sC4BrPRHJrcM.mft (raw, json)
Hash identifier: wRzlJ5b5Al/s/mM/ZkIGoeEC3feQ8w4yyzGiNdIcDsc=
Subject key identifier: DB:42:C9:6E:09:09:53:E0:44:4E:B1:91:B2:00:90:FA:A8:0B:DE:27
Authority key identifier: 37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
Certificate issuer: /CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Certificate serial: 019FACE46437CB221841774CC31394965EB1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
Manifest number: 098D
Signing time: Wed 29 Jul 2026 08:01:16 +0000
Manifest this update: Wed 29 Jul 2026 08:01:16 +0000
Manifest next update: Thu 30 Jul 2026 08:01:16 +0000
Files and hashes: 1: GabJ5twvONaV1oDv6R6xRBsqjPI.roa (hash: VboUrV+ncooHpKApDm37rXqvF783TBpkHD8FibYc72I=)
2: N09vPjy5c7rIpD9sC4BrPRHJrcM.crl (hash: av01L3PBw10iuNvEBm/8wl3b4JkO5/SaufVlUvqqvcI=)
3: WqDYkLVstMonrCj4dC5iBXxan-U.roa (hash: G8VWWDKI9sp/TM5uduS2yPz7BYIgFFNJMWsqqgCcC2E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:e4:64:37:cb:22:18:41:77:4c:c3:13:94:96:5e:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=374f6f3e3cb973bac8a43f6c0b806b3d11c9adc3
Validity
Not Before: Jul 29 08:01:16 2026 GMT
Not After : Jul 30 08:01:16 2026 GMT
Subject: CN=db42c96e090953e0444eb191b20090faa80bde27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:f2:bb:7d:72:af:1c:f6:45:a2:69:f1:79:7c:
cd:1b:4d:08:15:67:f8:36:c8:e3:ca:c3:df:dc:61:
26:ca:df:0f:e5:9f:41:39:3e:cb:94:0d:f6:5e:c1:
74:e2:7e:c3:52:f8:6d:e7:f0:03:78:17:15:d6:b0:
21:60:9d:35:c9:10:11:13:8c:cd:9d:65:46:0f:d4:
69:08:f9:57:54:57:a6:46:38:8a:12:c7:9c:55:2f:
a1:1c:99:7d:d2:7b:a7:9c:55:4c:c5:71:1f:d8:d8:
cd:40:22:de:7e:56:37:81:64:e2:6d:8e:c1:29:94:
6d:65:21:5a:fd:72:1b:4e:6e:e3:55:7c:aa:7a:03:
83:6f:cc:e2:c7:fe:ea:f8:5e:ca:71:49:a0:ea:77:
21:ef:0d:39:95:72:6f:39:0a:93:70:c9:f0:d7:a7:
95:02:ca:4e:4f:7d:51:74:6a:9f:e8:f2:bd:73:ab:
93:db:10:c2:9d:2e:62:9d:84:fe:ab:4d:46:f1:ed:
e5:de:bc:97:4f:a5:db:4c:0c:4f:d7:49:22:24:f1:
6c:44:c6:b6:96:1d:8a:a4:86:13:a7:3d:4b:5a:e6:
a2:11:be:1e:5e:94:d4:9d:cf:ee:22:d5:80:a0:7e:
6c:a7:7a:ba:dd:1b:ac:ea:c0:ca:7e:f2:3f:c2:ea:
13:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:42:C9:6E:09:09:53:E0:44:4E:B1:91:B2:00:90:FA:A8:0B:DE:27
X509v3 Authority Key Identifier:
keyid:37:4F:6F:3E:3C:B9:73:BA:C8:A4:3F:6C:0B:80:6B:3D:11:C9:AD:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N09vPjy5c7rIpD9sC4BrPRHJrcM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/8d1167-0c4d-488f-9a83-c0177dfda847/1/N09vPjy5c7rIpD9sC4BrPRHJrcM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
35:ed:c1:15:65:3d:f6:a5:2e:cc:98:c9:79:84:9f:40:30:9e:
84:f6:ff:8a:3e:bf:88:15:1a:9d:e8:4f:8c:9c:29:bc:fd:22:
a5:00:a1:06:42:ff:4f:75:b8:b7:95:3e:30:f7:be:87:3f:cd:
33:41:2e:ec:94:26:96:06:4b:8f:ef:08:22:fa:98:27:d9:98:
33:34:fe:08:5e:09:c1:e1:93:97:f6:64:85:5c:b5:e4:f4:9d:
62:6d:d7:74:a3:81:39:17:89:0b:76:12:00:46:51:1d:6b:f7:
fc:2b:63:c8:a8:ba:ba:6c:d8:e9:12:5e:bc:16:70:61:7b:84:
fd:7f:00:ea:74:00:68:a9:81:67:c3:de:4b:df:27:c5:ec:bb:
21:b0:6a:df:27:13:5a:b5:20:6b:d0:75:86:a5:1b:2a:e7:02:
59:3f:93:b1:e8:52:d7:93:45:db:40:52:8c:00:40:81:08:7c:
f0:bf:09:ad:46:02:3c:70:51:e4:45:af:3c:e9:51:c3:de:db:
1b:47:fc:d4:83:a8:45:34:a2:82:31:d7:73:b6:1f:1d:17:98:
78:17:ca:c9:6b:e3:da:4a:92:e2:3e:c4:3c:58:7c:7e:35:34:
22:ea:80:d6:aa:b8:27:23:a9:e0:53:c7:f6:8a:a9:54:65:bd:
5f:15:94:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 16:31:30 2026 by rpki-client