Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: EPKk2eObiKDmALBbQeI9X2iEZu7iLr+gRoToCZWkeAc=
Subject key identifier: A4:72:D3:89:11:39:A8:F1:BD:D6:A9:23:C3:64:97:B9:F8:5C:08:5F
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019FA9E2A73CF746612625F94C14D495EA9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 069B
Signing time: Tue 28 Jul 2026 18:00:31 +0000
Manifest this update: Tue 28 Jul 2026 18:00:31 +0000
Manifest next update: Wed 29 Jul 2026 18:00:31 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: Y2dsccmNb1o8DwK2Vnu2D62PkO6FOq14JSeC10SbnNU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 18:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:e2:a7:3c:f7:46:61:26:25:f9:4c:14:d4:95:ea:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Jul 28 18:00:31 2026 GMT
Not After : Jul 29 18:00:31 2026 GMT
Subject: CN=a472d3891139a8f1bdd6a923c36497b9f85c085f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:df:48:92:ee:1c:08:e8:f8:63:99:7d:7f:50:
53:0e:7c:39:86:a8:36:1e:c3:12:d9:51:e5:3a:dc:
a5:39:d3:af:74:45:e0:43:e5:fa:a3:bc:86:93:d7:
5f:76:07:e9:41:09:eb:81:88:40:2a:b8:66:bc:34:
42:b0:d2:fb:3e:3d:b5:3f:3a:17:b3:fa:cd:1b:0f:
19:a1:8f:59:42:79:da:de:96:ab:c4:a5:5d:90:35:
02:d9:f4:2f:6c:e0:e9:7f:81:c6:79:d9:9a:14:4d:
9c:00:a5:c5:4e:fc:35:3e:dc:80:b4:ab:81:2f:7f:
33:9c:06:4e:ce:d5:1a:29:9c:b6:84:f6:1d:7f:19:
ea:19:f2:d2:4c:c1:0d:48:6b:6f:44:cf:f7:f7:78:
93:b1:39:01:60:a7:bd:77:c8:af:0d:c9:a2:6f:cd:
ea:03:11:2b:4e:ba:0b:71:57:f9:20:4c:27:ed:9a:
80:42:64:9d:2b:74:95:f6:ab:26:05:ce:69:e5:0a:
a4:31:75:68:ed:c8:e6:04:94:db:8e:1b:5a:31:e4:
46:a4:92:05:01:5f:9e:2a:58:89:57:ea:ac:63:76:
24:a8:c3:d0:5e:f2:24:39:25:3d:b6:33:67:7d:dc:
64:d8:6d:6a:69:f0:2a:2c:f8:07:c3:85:22:20:38:
99:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:72:D3:89:11:39:A8:F1:BD:D6:A9:23:C3:64:97:B9:F8:5C:08:5F
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:32:09:33:19:56:27:67:50:c4:f9:6a:1c:72:0d:59:71:5d:
ae:3e:e5:52:1f:d1:bd:26:f4:1a:98:9d:6f:ab:74:d3:d8:98:
3f:95:90:a2:38:a7:06:99:1a:8f:6f:bb:e9:6b:4f:9a:2a:0d:
8c:c5:58:b6:fe:d4:d1:62:f3:9d:e0:b0:a2:d4:1f:f0:8a:4c:
65:5c:fa:df:05:46:39:2c:42:a7:2a:d7:93:23:5f:ae:c9:bb:
00:16:78:41:e1:13:fa:6c:4d:e0:7f:5e:2a:7e:95:d7:05:77:
d5:73:30:b8:bf:e7:7c:1c:9f:a0:74:09:53:4e:21:a9:61:ab:
f3:10:c8:3e:c4:55:b7:0a:68:7c:09:cd:af:a3:e5:70:44:15:
10:0c:b4:6a:17:0e:dd:64:66:7e:38:79:dc:81:94:3e:04:86:
d7:c0:ba:1b:38:4d:37:9a:b3:54:2c:da:e4:b2:09:56:eb:5c:
a4:8c:31:5c:ef:7c:24:21:85:6e:a7:5e:69:50:11:fc:3b:ff:
0e:4c:51:db:52:0c:eb:f4:5b:c0:cd:e2:b2:70:25:d0:39:9c:
73:92:d2:3f:89:e9:f8:af:33:25:ef:e3:27:74:1f:2d:24:25:
95:bb:b3:cd:12:df:e0:d7:53:bf:5e:aa:2e:39:01:8f:51:c4:
c5:c5:af:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:12:05 2026 by rpki-client