Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
File: N21flFiDj88WzChwIl7l-I_5Tco.mft (raw, json)
Hash identifier: eDfP+dPzbl7kfhgYsbDHFvwkSqLrW+YqFsIkC7QFsHk=
Subject key identifier: 07:B1:E5:F6:A8:6F:B8:2E:64:15:D1:6B:10:8B:50:EC:19:23:91:35
Authority key identifier: 37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
Certificate issuer: /CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Certificate serial: 019D9AAC46F75B25C88B7773E54D19C7E56A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
Manifest number: 058A
Signing time: Fri 17 Apr 2026 09:01:14 +0000
Manifest this update: Fri 17 Apr 2026 09:01:14 +0000
Manifest next update: Sat 18 Apr 2026 09:01:14 +0000
Files and hashes: 1: Gg9zqLeaLJOWqcIJe4R96GgrwPs.roa (hash: A3XbY4n4IKHbukJ9o+OtGqlglh5YkDqMMDMy+0dz1Kc=)
2: N21flFiDj88WzChwIl7l-I_5Tco.crl (hash: EQTPRYZcStggDuDkuJNO92BQ4p0bfduvBKyvpwwfNd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:ac:46:f7:5b:25:c8:8b:77:73:e5:4d:19:c7:e5:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376d5f9458838fcf16cc2870225ee5f88ff94dca
Validity
Not Before: Apr 17 09:01:14 2026 GMT
Not After : Apr 18 09:01:14 2026 GMT
Subject: CN=07b1e5f6a86fb82e6415d16b108b50ec19239135
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a1:34:74:18:64:c0:ef:7b:68:95:84:bc:84:
94:08:33:cc:01:5e:42:30:8c:16:e0:2e:e0:80:07:
ae:a4:09:0a:14:c3:01:1f:3a:20:b4:19:26:cd:ca:
20:48:39:01:48:18:5b:1f:0c:c2:48:26:f9:c0:8d:
8f:38:5a:8e:a8:0c:37:85:29:89:c7:04:79:f1:61:
91:26:07:82:72:f2:5e:1e:9a:e8:d0:95:40:7f:76:
f7:64:65:8f:20:12:6e:cb:53:d6:1e:46:72:ce:46:
4b:ac:4a:f9:31:bd:ac:1e:57:90:3a:fd:75:df:6b:
97:e8:80:12:87:13:29:d3:45:5a:bd:21:19:ae:33:
f5:33:a6:9d:ff:20:99:15:01:db:df:6f:8f:b9:f0:
17:98:ca:57:da:71:47:26:21:7d:89:6f:c8:83:7f:
0f:f2:bf:e0:03:bc:5a:40:8f:c2:92:57:8d:48:da:
7c:17:3e:f9:f1:14:95:76:32:5f:55:73:3f:0c:44:
3d:9f:7b:36:d9:88:8a:63:05:2d:fb:5a:63:97:78:
8b:07:22:6c:53:cc:43:e5:d4:b5:5a:c6:3c:81:8d:
d3:bf:9f:31:40:09:93:84:03:19:cf:cc:c7:f0:ff:
f6:ac:09:b2:0f:e4:9b:30:c7:d2:a1:9a:4c:ba:66:
12:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:B1:E5:F6:A8:6F:B8:2E:64:15:D1:6B:10:8B:50:EC:19:23:91:35
X509v3 Authority Key Identifier:
keyid:37:6D:5F:94:58:83:8F:CF:16:CC:28:70:22:5E:E5:F8:8F:F9:4D:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N21flFiDj88WzChwIl7l-I_5Tco.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c80f6b-d58e-477b-b980-4411012ab99e/1/N21flFiDj88WzChwIl7l-I_5Tco.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ce:cb:c6:c5:d7:f3:25:9e:a5:5e:b3:51:d8:8b:0d:0e:6e:25:
0e:af:1f:46:39:7d:7b:e7:34:dd:74:10:66:c3:b3:57:b9:39:
8c:ae:87:c3:17:83:66:d5:b6:1f:fc:ed:02:9e:81:8c:2e:0b:
1b:1d:42:f5:4b:8d:f1:b5:8a:81:2a:d9:f9:a4:76:ff:2a:af:
95:a0:aa:3e:98:30:db:43:54:69:b3:5f:3e:80:2d:4e:8e:ce:
35:91:6f:13:85:e1:ce:9e:07:cc:b3:24:2a:58:c3:8b:22:aa:
c4:82:2d:51:d0:44:d3:92:40:10:78:2e:9b:72:ed:ae:8e:cb:
2b:4d:5d:e9:de:63:6e:a1:fd:b5:d0:0e:65:9a:79:0e:9a:fc:
e4:bb:80:b2:ca:cf:a7:b1:4e:47:8d:de:21:9b:7e:e9:87:18:
9e:cd:5f:5c:86:43:9b:2b:a0:75:a5:d6:5b:69:90:b9:a4:4e:
ac:ad:fd:83:a6:bb:a5:08:ad:b4:70:6f:29:0a:c8:35:96:bf:
e8:bb:3d:8b:50:22:2e:5b:6d:da:e3:ce:00:35:8a:2f:c0:af:
3c:cd:73:e4:8f:a5:d4:90:6c:43:f0:f3:60:19:08:06:15:c6:
3f:11:12:9e:ea:54:be:7a:b0:ec:76:42:3d:4f:46:6d:88:54:
b7:6b:00:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:07:34 2026 by rpki-client