Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
File: N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft (raw, json)
Hash identifier: UYIMlYzPSdmA6ufpjGRSA7mQnOZ18SJH8tJAn1EB85Y=
Subject key identifier: 8D:84:8C:F8:C2:C1:63:D6:3B:12:55:67:AA:0F:8D:9C:FE:90:4F:B4
Authority key identifier: 37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
Certificate issuer: /CN=379cd67c0c18959239358553229e91f543cc5a5f
Certificate serial: 01A0CF35D0ECA86A65D3EE05F4D21E4AF9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
Manifest number: 1A4E
Signing time: Wed 23 Sep 2026 17:00:05 +0000
Manifest this update: Wed 23 Sep 2026 17:00:05 +0000
Manifest next update: Thu 24 Sep 2026 17:00:05 +0000
Files and hashes: 1: 1G7xfZS-7N9Bwv9zRGVTYavgwDw.roa (hash: NBwXIln+Lrk68hloVfF0NdhAEyHd00EUEH5nirBGf1U=)
2: 7mIgzFRr6XpzVVMsTQLKIHrILsQ.roa (hash: T0CPxkJ6b9ENop729OWssjPxSjAAOz8Aw63ICvojjNA=)
3: N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl (hash: 5eoJ7ornsPlJHsIrH8TbWDL9GQQxzXFiAWtxd8LyIW0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 17:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:d0:ec:a8:6a:65:d3:ee:05:f4:d2:1e:4a:f9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=379cd67c0c18959239358553229e91f543cc5a5f
Validity
Not Before: Sep 23 17:00:05 2026 GMT
Not After : Sep 24 17:00:05 2026 GMT
Subject: CN=8d848cf8c2c163d63b125567aa0f8d9cfe904fb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:80:33:d6:de:90:62:79:f6:e0:df:f5:ad:e4:
49:0b:10:73:dd:f9:02:b6:2b:97:bf:c5:90:dd:aa:
89:36:fc:1d:2f:76:2d:6c:b5:28:3d:01:60:31:f1:
59:c7:d2:df:62:6f:36:a4:bf:9d:1c:ec:93:d7:1c:
c8:25:e7:ad:fe:36:48:20:9e:28:00:0a:fc:d3:39:
63:bc:9f:73:e9:36:2a:80:3b:2e:b5:05:63:9f:3a:
f3:b6:11:e5:ed:e7:77:4c:8e:e6:7d:7b:93:62:96:
5d:b6:b0:47:37:56:57:5d:84:fa:05:47:b2:5d:a2:
4b:11:be:c3:54:ab:48:58:37:ed:02:86:4e:05:27:
4b:fc:70:7b:bf:20:38:b7:0c:1b:6c:d6:e5:16:ae:
3b:b0:00:9f:c3:6f:43:6d:c2:03:22:91:a6:fd:ac:
e8:fc:6b:14:1e:41:ce:b9:fa:1a:da:3b:47:19:3e:
b1:ba:51:93:29:14:26:d0:9b:67:67:c5:91:bf:ca:
5e:66:2d:0c:91:3f:9d:43:2d:8b:e2:87:be:ff:d1:
3d:80:b1:0c:21:a8:4d:3f:1c:a1:f4:e4:fd:b0:af:
ca:3b:9d:0c:c9:eb:b8:18:2b:ee:62:8b:0f:4c:73:
dd:a8:e8:2f:44:ac:c5:ce:54:6f:3d:9f:90:d5:f6:
41:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:84:8C:F8:C2:C1:63:D6:3B:12:55:67:AA:0F:8D:9C:FE:90:4F:B4
X509v3 Authority Key Identifier:
keyid:37:9C:D6:7C:0C:18:95:92:39:35:85:53:22:9E:91:F5:43:CC:5A:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N5zWfAwYlZI5NYVTIp6R9UPMWl8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/a60c29-74aa-4b2b-9066-99bbbafe9c4b/1/N5zWfAwYlZI5NYVTIp6R9UPMWl8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:9b:b0:d7:fd:63:fa:9e:80:cc:22:fc:fa:6e:fb:44:9a:03:
19:fb:9f:6b:1c:47:52:fb:3a:60:d2:e1:74:08:ee:ca:f1:17:
f8:8c:82:f6:13:89:f8:2d:dc:49:ab:ff:f2:d0:71:30:6d:7d:
28:fe:44:10:21:03:30:6c:20:bf:9d:30:ef:0d:dc:16:19:aa:
06:b7:0c:3e:f2:79:04:9f:05:9b:e8:9e:1d:7f:f0:f5:cf:b0:
c4:88:ad:c4:e2:e7:17:36:31:52:c1:e5:09:55:42:99:15:cf:
9d:da:d4:37:e9:7c:69:54:f1:22:59:88:73:a1:5b:be:ab:5b:
d8:bd:76:cd:6e:e2:29:51:30:18:e9:d7:74:38:c1:f8:a0:74:
7e:4f:7d:2e:59:9c:1a:27:25:fb:a5:c2:7d:b0:f9:51:a1:ae:
42:37:f6:fb:29:6b:30:f1:86:09:05:bf:bd:8d:d7:e5:b8:c0:
9e:05:dc:9d:07:17:77:66:2c:cc:a0:fb:b4:29:61:6a:a7:5b:
bc:e8:e2:80:7a:38:9d:95:ec:bd:e4:df:cc:a9:66:79:3a:e7:
2a:a9:12:b0:8f:a6:3f:a1:28:df:1a:73:87:f0:f0:2b:39:7c:
42:30:62:a2:17:1e:57:47:fd:69:6a:87:26:4d:dd:eb:cc:da:
c2:b6:63:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDPNdDsqGpl0+4F9NIeSvnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3OWNkNjdjMGMxODk1OTIzOTM1ODU1MzIyOWU5MWY1NDNj
YzVhNWYwHhcNMjYwOTIzMTcwMDA1WhcNMjYwOTI0MTcwMDA1WjAzMTEwLwYDVQQD
Eyg4ZDg0OGNmOGMyYzE2M2Q2M2IxMjU1NjdhYTBmOGQ5Y2ZlOTA0ZmI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyoAz1t6QYnn24N/1reRJCxBz3fkC
tiuXv8WQ3aqJNvwdL3YtbLUoPQFgMfFZx9LfYm82pL+dHOyT1xzIJeet/jZIIJ4o
AAr80zljvJ9z6TYqgDsutQVjnzrzthHl7ed3TI7mfXuTYpZdtrBHN1ZXXYT6BUey
XaJLEb7DVKtIWDftAoZOBSdL/HB7vyA4twwbbNblFq47sACfw29DbcIDIpGm/azo
/GsUHkHOufoa2jtHGT6xulGTKRQm0JtnZ8WRv8peZi0MkT+dQy2L4oe+/9E9gLEM
IahNPxyh9OT9sK/KO50Myeu4GCvuYosPTHPdqOgvRKzFzlRvPZ+Q1fZBzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2EjPjCwWPWOxJVZ6oPjZz+kE+0MB8GA1UdIwQY
MBaAFDec1nwMGJWSOTWFUyKekfVDzFpfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYt
OTliYmJhZmU5YzRiLzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS9hNjBjMjktNzRhYS00YjJiLTkwNjYtOTliYmJhZmU5YzRi
LzEvTjV6V2ZBd1lsWkk1TllWVElwNlI5VVBNV2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArpuw1/1j
+p6AzCL8+m77RJoDGfufaxxHUvs6YNLhdAjuyvEX+IyC9hOJ+C3cSav/8tBxMG19
KP5EECEDMGwgv50w7w3cFhmqBrcMPvJ5BJ8Fm+ieHX/w9c+wxIitxOLnFzYxUsHl
CVVCmRXPndrUN+l8aVTxIlmIc6Fbvqtb2L12zW7iKVEwGOnXdDjB+KB0fk99Llmc
Gicl+6XCfbD5UaGuQjf2+ylrMPGGCQW/vY3X5bjAngXcnQcXd2YszKD7tClhaqdb
vOjigHo4nZXsveTfzKlmeTrnKqkSsI+mP6Eo3xpzh/DwKzl8QjBiohceV0f9aWqH
Jk3d68zawrZjeg==
-----END CERTIFICATE-----
Generated at Thu Sep 24 03:17:52 2026 by rpki-client