Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: Op+/aN9tBGHtqXcGbW18z4hDdS7fuGvgk5rqDk2FR4Q=
Subject key identifier: C7:1B:AA:2A:84:0B:F6:89:C3:71:DF:55:7E:5E:53:90:11:62:FB:9A
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019CAD2295B56357AE7225A9C2A1F377662F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 050F
Signing time: Mon 02 Mar 2026 06:00:50 +0000
Manifest this update: Mon 02 Mar 2026 06:00:50 +0000
Manifest next update: Tue 03 Mar 2026 06:00:50 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: R41XKIv758J7/WQL692bBo5Wzx07ig43e92NmNfuVw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:22:95:b5:63:57:ae:72:25:a9:c2:a1:f3:77:66:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Mar 2 06:00:50 2026 GMT
Not After : Mar 3 06:00:50 2026 GMT
Subject: CN=c71baa2a840bf689c371df557e5e53901162fb9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3e:8a:72:c9:ac:27:5e:7f:2f:5f:c9:63:97:
32:3f:b0:6a:25:fe:d6:60:4b:7c:67:54:55:87:95:
58:48:7b:8a:81:97:db:cd:57:0f:77:2f:64:e4:23:
33:d8:5b:8d:9a:97:dd:f5:5e:88:b8:74:dd:9e:9f:
c9:3e:45:65:8d:58:87:b7:21:74:17:32:e2:3e:41:
15:cc:18:c3:29:bb:d5:03:1e:02:9f:01:f3:d4:50:
19:d3:f0:9a:59:59:e4:f4:ed:2a:cf:ec:fe:e6:08:
9d:aa:94:dd:e2:06:e5:e7:0d:29:29:53:b2:86:df:
77:8f:1a:08:04:f4:94:1c:a7:bd:52:37:31:c5:bf:
e8:42:06:14:e2:fd:40:23:b3:25:80:24:02:72:b2:
55:3f:ea:c9:8b:f5:93:60:2f:7f:8d:7b:b4:70:6e:
41:a0:7c:30:dd:e3:a0:a7:3a:f0:80:c0:db:56:b0:
9c:68:c2:bc:c6:7d:b4:b2:1c:4a:d6:f2:69:fe:52:
bf:65:88:c7:55:be:8e:08:64:fd:76:c3:a7:68:d1:
d9:8a:df:04:6c:c4:73:1d:52:48:4b:f1:7e:a6:50:
be:ac:89:ec:13:1d:65:01:1f:25:4b:3e:20:b1:84:
7b:02:90:fd:d5:d3:4f:f7:f5:4b:64:15:a4:6c:68:
57:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:AA:2A:84:0B:F6:89:C3:71:DF:55:7E:5E:53:90:11:62:FB:9A
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:bc:4f:67:a9:d8:7d:0d:78:86:b0:01:19:26:d1:00:06:d4:
71:43:ba:84:3a:78:1c:a9:41:d8:12:a9:53:cc:e2:38:87:6f:
f6:87:a9:aa:52:a5:ec:c0:60:05:cf:8a:e0:41:a0:af:a9:06:
8f:54:f2:31:99:d0:ef:09:b6:5f:5b:d7:76:c9:93:e1:dd:ff:
f4:9f:7f:24:c2:34:7e:a3:13:cb:1e:c2:fc:ce:7e:af:4f:74:
3d:60:9a:4d:de:de:81:8c:dd:d8:51:7c:0a:25:ef:63:a8:05:
0f:51:27:c1:4e:e5:b5:74:4c:f9:f1:1f:19:d2:66:e3:99:b1:
8d:50:35:f2:ef:a2:b3:d8:88:d6:41:83:38:f8:2f:fd:e4:1a:
dd:90:bf:a6:c3:83:bc:5f:6a:e0:e8:92:c5:23:a7:b3:bc:7e:
c2:2b:84:0f:9d:26:17:da:2f:99:6a:5a:45:7f:f8:23:9b:56:
e9:f1:91:df:6f:f2:b3:3c:75:66:5c:89:23:52:8e:a4:c8:11:
5c:82:b5:96:92:b4:9e:aa:0a:e7:3c:7c:f2:85:b5:a9:41:b1:
56:76:5b:b4:db:18:34:fd:0a:0c:3d:2a:c8:15:d9:be:6e:50:
a5:d5:4c:34:26:64:b3:e5:e6:05:e3:7b:f3:ca:df:cd:b8:92:
3a:b0:15:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytIpW1Y1euciWpwqHzd2YvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm
OTRkY2EwHhcNMjYwMzAyMDYwMDUwWhcNMjYwMzAzMDYwMDUwWjAzMTEwLwYDVQQD
EyhjNzFiYWEyYTg0MGJmNjg5YzM3MWRmNTU3ZTVlNTM5MDExNjJmYjlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxT6KcsmsJ15/L1/JY5cyP7BqJf7W
YEt8Z1RVh5VYSHuKgZfbzVcPdy9k5CMz2FuNmpfd9V6IuHTdnp/JPkVljViHtyF0
FzLiPkEVzBjDKbvVAx4CnwHz1FAZ0/CaWVnk9O0qz+z+5gidqpTd4gbl5w0pKVOy
ht93jxoIBPSUHKe9Ujcxxb/oQgYU4v1AI7MlgCQCcrJVP+rJi/WTYC9/jXu0cG5B
oHww3eOgpzrwgMDbVrCcaMK8xn20shxK1vJp/lK/ZYjHVb6OCGT9dsOnaNHZit8E
bMRzHVJIS/F+plC+rInsEx1lAR8lSz4gsYR7ApD91dNP9/VLZBWkbGhXhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMcbqiqEC/aJw3HfVX5eU5ARYvuaMB8GA1UdIwQY
MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt
NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll
LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfrxPZ6nY
fQ14hrABGSbRAAbUcUO6hDp4HKlB2BKpU8ziOIdv9oepqlKl7MBgBc+K4EGgr6kG
j1TyMZnQ7wm2X1vXdsmT4d3/9J9/JMI0fqMTyx7C/M5+r090PWCaTd7egYzd2FF8
CiXvY6gFD1EnwU7ltXRM+fEfGdJm45mxjVA18u+is9iI1kGDOPgv/eQa3ZC/psOD
vF9q4OiSxSOns7x+wiuED50mF9ovmWpaRX/4I5tW6fGR32/yszx1ZlyJI1KOpMgR
XIK1lpK0nqoK5zx88oW1qUGxVnZbtNsYNP0KDD0qyBXZvm5QpdVMNCZks+XmBeN7
88rfzbiSOrAVrA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:52:59 2026 by rpki-client