Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: bC+5vC44izddwKBjLbZ6goyr6oHTs7t4vPGoOO/97uQ=
Subject key identifier: 34:F8:FE:80:68:91:1E:9D:BA:E7:FD:B1:27:27:CB:39:54:59:1B:C6
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01A03FA95681C6EBD168537C4AD9BC987833
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1A23
Signing time: Wed 26 Aug 2026 20:00:57 +0000
Manifest this update: Wed 26 Aug 2026 20:00:57 +0000
Manifest next update: Thu 27 Aug 2026 20:00:57 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: BKUJObSktOFC2ctPSHv2NxzkQWo3MrfNeTZaPtTgAFw=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:a9:56:81:c6:eb:d1:68:53:7c:4a:d9:bc:98:78:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Aug 26 20:00:57 2026 GMT
Not After : Aug 27 20:00:57 2026 GMT
Subject: CN=34f8fe8068911e9dbae7fdb12727cb3954591bc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:65:4b:f8:8d:a0:68:6b:e7:7a:1f:17:f9:
54:4e:e9:65:96:91:f0:5a:67:0a:10:80:c9:15:c2:
fa:bf:9b:e0:61:13:10:64:de:fc:e1:87:06:93:be:
18:4a:7f:30:4f:49:53:1f:45:1f:9c:bf:06:65:1f:
38:d2:a0:76:9b:2b:23:fd:44:24:f0:f3:0e:19:11:
ca:9d:a6:b8:fc:db:5a:ce:1f:50:42:e9:7c:f4:bb:
29:57:34:7f:a5:d3:d7:67:21:9a:7b:57:c8:41:9c:
c2:d0:60:37:0e:6e:7c:3d:69:17:95:6f:b7:bd:4d:
01:40:1b:11:12:e0:98:d4:03:d4:14:41:c7:b1:e9:
56:86:9f:12:f0:d2:4e:e5:14:a9:9c:5a:21:9f:89:
d7:29:2b:e6:3c:62:b7:cd:dd:87:11:62:84:96:2e:
a5:ad:e6:8e:9a:28:a4:38:98:1c:67:d0:6a:d4:bc:
f1:e4:af:4f:c6:8f:8d:e8:3f:81:31:45:f6:aa:9f:
c4:0a:cc:88:a3:15:5e:a8:36:f3:a7:60:e6:75:e4:
00:a7:d0:77:cf:6c:1e:18:67:00:e9:e4:3b:93:e2:
c0:d1:65:09:38:2f:c3:5e:96:7e:25:41:e6:ae:57:
f6:df:6a:80:c0:ba:63:1e:33:0a:b7:30:84:6c:da:
be:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:F8:FE:80:68:91:1E:9D:BA:E7:FD:B1:27:27:CB:39:54:59:1B:C6
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:06:0b:27:56:67:44:a4:13:99:96:b5:82:98:10:da:02:eb:
1b:09:5b:95:68:38:b4:78:80:e0:de:8e:93:c3:b2:07:70:ef:
71:45:cc:ed:e6:0f:56:c5:22:43:0b:cb:10:53:f7:94:4b:4a:
d7:51:6e:7a:85:e1:a7:4b:38:92:1f:d6:c4:79:35:87:12:62:
f4:69:b2:e1:6f:08:02:91:f4:ad:47:57:a8:54:a2:30:1d:14:
b4:2d:ed:1e:3a:de:f1:26:e2:4b:38:77:59:54:9a:9a:7b:69:
b5:22:5f:3f:f9:0c:bc:34:d8:9b:be:d6:a1:fc:a8:bd:6a:41:
a4:55:f7:2d:07:bb:43:84:af:7f:35:10:b0:e1:d6:08:8c:a2:
f0:52:b9:2c:85:b2:2c:23:04:3a:44:ce:0e:75:c2:79:b3:d4:
d6:16:f2:4c:bc:9e:23:85:0d:1a:b9:07:32:07:fe:11:df:8a:
82:fe:de:85:76:39:87:ea:a1:1f:8e:80:fb:22:83:ba:33:3c:
e5:23:1e:87:6f:7a:59:e0:f5:56:9b:ee:dd:c1:9b:de:bf:51:
92:f5:0f:62:4f:d2:36:38:1d:4f:b8:5e:e2:bf:06:ca:94:b2:
e4:7e:92:be:f3:e9:6b:80:a1:20:7f:09:2b:0a:6a:05:b0:c9:
1f:3c:be:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:02:25 2026 by rpki-client