Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
File: N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft (raw, json)
Hash identifier: cyWsOvRSxG0WONLoc8S40wTJsmg9dd6KRB3VohtJKro=
Subject key identifier: A9:45:77:1F:7D:AE:74:07:9B:C7:E6:98:8F:B3:73:59:DF:1D:72:C5
Authority key identifier: 37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
Certificate issuer: /CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Certificate serial: 019D394087B07A542A375B5C365037092912
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
Manifest number: 1894
Signing time: Sun 29 Mar 2026 11:00:23 +0000
Manifest this update: Sun 29 Mar 2026 11:00:23 +0000
Manifest next update: Mon 30 Mar 2026 11:00:23 +0000
Files and hashes: 1: 2a6CDxxUrQGBmDt9bRl1JF_nyvc.roa (hash: ZSsnNRN6qb6nlLwR6tJUMByyx0s8BQTn0qVgNGvcWZc=)
2: N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl (hash: b8w77H31SDD0h/gWSRz2gL9H0C0/46IrtU9KeUf5dYQ=)
3: Ol3Cdb1XyRY6urO3sw4yVDwme94.roa (hash: tfUvfQzgGXJJiO1C8x+8AL672Tfl8NCYZs94wHKASfw=)
4: fJoKECLKUeD5DLyAzQSfUcqojno.roa (hash: 3zNqg/msTStClL6VJhx0R8PHg/rjNiAgrUFnWqVj+Y0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:40:87:b0:7a:54:2a:37:5b:5c:36:50:37:09:29:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=378aa6ed4b6cac6b3a52961bcfa229cfda00080e
Validity
Not Before: Mar 29 11:00:23 2026 GMT
Not After : Mar 30 11:00:23 2026 GMT
Subject: CN=a945771f7dae74079bc7e6988fb37359df1d72c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:9e:7c:c3:12:c7:65:ca:c8:d6:32:3e:90:
34:6c:d9:f3:49:9d:e3:b1:c5:00:77:e5:2e:bf:19:
aa:8e:b0:1f:ad:43:d6:2f:d7:b7:25:b5:40:cd:45:
6f:20:61:36:65:36:ab:8c:40:ad:df:66:e8:bc:74:
28:a3:a1:5e:03:0c:ff:8f:ef:a0:ca:46:4a:69:f5:
bd:ed:1e:98:64:ea:a6:58:d0:61:56:b8:13:1d:5c:
7c:01:0d:b1:9a:27:fa:40:3e:98:7b:64:87:f8:29:
9a:a4:19:1b:e4:31:50:29:0a:3f:08:76:08:8a:c6:
5d:f5:7f:6b:45:64:0b:31:50:6a:10:f4:aa:27:61:
c4:b9:ea:80:7c:2f:41:8a:6f:67:c5:ae:5c:c0:13:
f4:90:99:ca:ce:c1:ae:50:9c:a1:06:32:32:c7:19:
50:3c:5d:f5:07:c7:3f:f6:10:c4:f8:39:e2:9e:dc:
6d:4e:58:8c:da:76:61:68:e0:50:8e:25:7a:97:a9:
16:73:a8:51:32:ed:ab:58:0d:a8:69:7d:ce:b5:08:
91:8a:ac:1c:61:22:e7:d3:94:bd:bd:09:b2:b2:8f:
bc:cf:15:28:86:26:86:12:87:40:cc:69:c2:9d:39:
1e:3c:24:9d:a1:1d:d7:a3:ef:89:19:8e:68:1e:d3:
5b:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:45:77:1F:7D:AE:74:07:9B:C7:E6:98:8F:B3:73:59:DF:1D:72:C5
X509v3 Authority Key Identifier:
keyid:37:8A:A6:ED:4B:6C:AC:6B:3A:52:96:1B:CF:A2:29:CF:DA:00:08:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4qm7UtsrGs6UpYbz6Ipz9oACA4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/1bdda9-64ec-4fb6-8b40-f4b9da480ee2/1/N4qm7UtsrGs6UpYbz6Ipz9oACA4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:b1:73:01:3a:b8:c6:96:b7:4f:d9:4b:dd:f2:70:50:1b:69:
40:61:6e:4f:89:2f:5a:48:82:ba:34:b9:a0:df:c0:82:bd:77:
35:6f:3a:06:72:17:bb:ab:ca:83:9d:a5:b5:a2:1f:84:23:df:
4c:e1:56:d5:45:80:49:d1:26:85:b1:e1:f5:df:ac:07:2b:8d:
b9:b4:da:04:41:48:aa:68:2b:44:3c:7b:c0:3f:1a:5c:b0:f7:
a0:a3:a2:6c:b0:73:d3:a0:01:d7:2b:ab:13:ad:b9:5d:22:77:
ec:83:40:1a:37:7a:6c:c9:ad:70:14:7f:fd:e7:c0:e4:3a:0b:
35:7f:e5:f1:78:8b:17:e2:0b:a4:3a:06:84:c2:02:b3:28:ce:
c6:c4:9a:a7:2d:73:fe:cc:4b:06:86:fb:a9:89:9c:43:11:33:
72:32:9b:56:35:e8:e7:b0:b7:5a:4d:52:62:c7:4d:91:ba:df:
5b:30:e0:8a:ce:cf:e2:ea:91:82:8c:53:6f:41:b8:1d:10:f0:
59:19:4e:1c:35:27:19:8d:43:ec:c4:69:67:98:1c:52:35:e8:
d7:42:13:9f:ce:e7:dc:37:ea:19:f7:ca:b7:1b:48:da:2e:2b:
fe:0f:fe:8e:48:7d:33:40:27:6a:66:2e:68:5e:a9:06:8a:fb:
94:d0:f6:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:47:24 2026 by rpki-client