Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: nzjSHhRYWpcmtNdCORkiWuctGDR6DzH5PJAzNpOghQo=
Subject key identifier: 3B:1F:34:88:B5:95:83:7B:97:BB:15:2E:1F:23:98:6D:A9:AC:4A:E3
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 01A101A4491ADDAFB2A68B9897C88E02CFD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 074D
Signing time: Sat 03 Oct 2026 12:01:45 +0000
Manifest this update: Sat 03 Oct 2026 12:01:45 +0000
Manifest next update: Sun 04 Oct 2026 12:01:45 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: OjY3kRWAgrLJbIaG7RFO3xlqoj/I0GK8qc0nG9dDW6o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 11:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:01:a4:49:1a:dd:af:b2:a6:8b:98:97:c8:8e:02:cf:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Oct 3 12:01:45 2026 GMT
Not After : Oct 4 12:01:45 2026 GMT
Subject: CN=3b1f3488b595837b97bb152e1f23986da9ac4ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:26:35:79:f4:14:75:6f:99:f8:1b:27:38:
3a:b5:9d:92:73:0e:1d:ad:4e:b6:5b:c3:8b:98:03:
51:d4:3b:30:12:cf:74:69:93:6d:43:0b:e9:c8:72:
7b:35:87:26:c4:ad:89:1b:8a:e6:d6:36:10:d8:e3:
4d:f2:8e:9b:7d:e7:9a:61:a2:08:ee:f7:3e:ed:f5:
3a:f1:74:c6:58:93:99:e5:9f:bc:e1:e6:7c:cb:d7:
fe:24:2c:8c:a1:ea:ac:ba:9d:e4:1e:7a:b9:d2:63:
e4:18:9f:57:3c:18:61:0e:2d:84:b7:f1:19:f2:67:
26:a2:36:b3:14:7d:16:fd:25:09:a1:37:e7:bd:4d:
8d:a6:fc:00:cd:cc:8f:72:7f:65:45:e2:61:1f:6c:
b5:b7:d5:db:64:df:fa:79:05:4a:07:81:2a:eb:12:
23:2c:f5:04:a8:30:d0:31:6a:7d:ef:b6:1a:ba:c0:
72:9d:ca:b3:51:ba:66:37:da:f5:66:42:14:78:86:
a2:73:fa:1e:ae:77:48:89:a4:63:33:05:d0:22:b6:
2c:e4:e9:ee:4f:d0:d4:bf:a6:39:4f:3e:5a:e8:5d:
08:c3:44:2c:57:bc:26:36:72:93:d9:17:84:a1:60:
38:bb:70:d9:b5:ad:a0:69:dc:3e:a3:dd:38:1c:40:
30:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:1F:34:88:B5:95:83:7B:97:BB:15:2E:1F:23:98:6D:A9:AC:4A:E3
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
d8:2b:42:29:3b:62:06:3d:34:0c:9f:48:ab:e2:ca:67:5e:0e:
a9:cd:9c:91:91:42:59:0e:ec:62:62:01:a8:61:77:95:2a:b8:
a9:5f:65:70:6c:ba:19:81:85:d2:95:0f:7d:ef:78:71:f0:3f:
65:06:d5:3b:27:30:73:ef:61:0c:5c:49:be:c6:5a:45:70:6c:
d5:a7:0e:00:4c:6d:07:e1:73:55:a7:5e:83:ba:1c:94:57:31:
17:31:fc:b3:03:b8:36:e5:69:71:f1:d5:6d:48:8d:97:9f:d4:
b4:eb:40:f8:32:bb:54:98:92:43:7c:1c:41:e2:b0:e3:fd:93:
1b:e6:0d:9b:be:04:10:dd:05:b3:54:3e:25:a3:6e:c0:fc:5f:
99:44:d4:e1:02:de:26:f3:e2:24:fa:89:de:a9:49:ca:6c:e5:
58:c3:67:31:96:6b:b4:02:d2:87:7b:ac:88:54:9f:19:cb:75:
dd:24:72:59:97:97:2f:f8:4d:19:1d:75:53:44:00:10:10:b5:
c0:fc:78:eb:a4:10:94:66:9f:1e:ef:89:b1:ac:de:f2:23:62:
a9:bf:f5:f8:83:12:46:32:7d:2f:b9:8c:ef:26:62:87:53:07:
aa:40:c9:5f:38:06:09:b1:bd:41:87:f5:1b:5a:1d:d1:9d:df:
6b:65:21:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaEBpEka3a+ypouYl8iOAs/UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NmQ1Zjk0NTg4MzhmY2YxNmNjMjg3MDIyNWVlNWY4OGZm
OTRkY2EwHhcNMjYxMDAzMTIwMTQ1WhcNMjYxMDA0MTIwMTQ1WjAzMTEwLwYDVQQD
EygzYjFmMzQ4OGI1OTU4MzdiOTdiYjE1MmUxZjIzOTg2ZGE5YWM0YWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr60mNXn0FHVvmfgbJzg6tZ2Scw4d
rU62W8OLmANR1DswEs90aZNtQwvpyHJ7NYcmxK2JG4rm1jYQ2ONN8o6bfeeaYaII
7vc+7fU68XTGWJOZ5Z+84eZ8y9f+JCyMoeqsup3kHnq50mPkGJ9XPBhhDi2Et/EZ
8mcmojazFH0W/SUJoTfnvU2NpvwAzcyPcn9lReJhH2y1t9XbZN/6eQVKB4Eq6xIj
LPUEqDDQMWp977YausByncqzUbpmN9r1ZkIUeIaic/oerndIiaRjMwXQIrYs5Onu
T9DUv6Y5Tz5a6F0Iw0QsV7wmNnKT2ReEoWA4u3DZta2gadw+o904HEAw+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDsfNIi1lYN7l7sVLh8jmG2prErjMB8GA1UdIwQY
MBaAFDdtX5RYg4/PFswocCJe5fiP+U3KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAt
NDQxMTAxMmFiOTllLzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jODBmNmItZDU4ZS00NzdiLWI5ODAtNDQxMTAxMmFiOTll
LzEvTjIxZmxGaURqODhXekNod0lsN2wtSV81VGNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA2CtCKTti
Bj00DJ9Iq+LKZ14Oqc2ckZFCWQ7sYmIBqGF3lSq4qV9lcGy6GYGF0pUPfe94cfA/
ZQbVOycwc+9hDFxJvsZaRXBs1acOAExtB+FzVadeg7oclFcxFzH8swO4NuVpcfHV
bUiNl5/UtOtA+DK7VJiSQ3wcQeKw4/2TG+YNm74EEN0Fs1Q+JaNuwPxfmUTU4QLe
JvPiJPqJ3qlJymzlWMNnMZZrtALSh3usiFSfGct13SRyWZeXL/hNGR11U0QAEBC1
wPx466QQlGafHu+Jsaze8iNiqb/1+IMSRjJ9L7mM7yZih1MHqkDJXzgGCbG9QYf1
G1od0Z3fa2UhTg==
-----END CERTIFICATE-----
Generated at Sat Oct 3 15:52:48 2026 by rpki-client