Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: InLiaLS8w4OHr1b9k+TTX9iR+Dx6coNpsEVaVTtSt34=
Subject key identifier: BF:25:AE:E0:49:2E:63:18:FE:83:7D:60:59:F0:42:E4:16:75:76:38
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01A174A6E27A6355F8A523BEE7DFB4F52CD0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1AC3
Signing time: Sun 25 Oct 2026 20:00:56 +0000
Manifest this update: Sun 25 Oct 2026 20:00:56 +0000
Manifest next update: Mon 26 Oct 2026 20:00:56 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: HVw6efKhjQ6CECSIr2JXirF5JlvrlZbjGkGSTBa8R18=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 20:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:74:a6:e2:7a:63:55:f8:a5:23:be:e7:df:b4:f5:2c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Oct 25 20:00:56 2026 GMT
Not After : Oct 26 20:00:56 2026 GMT
Subject: CN=bf25aee0492e6318fe837d6059f042e416757638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:83:1e:89:97:c4:68:df:10:46:f6:b8:ba:39:
2f:e5:66:2b:57:d0:73:5a:89:13:0e:9b:ee:39:ae:
0c:89:12:9c:12:23:07:0a:c5:0d:9a:d9:04:04:f2:
92:3c:7c:52:b9:85:41:fc:a0:4f:c8:ab:cc:e8:f2:
36:c0:63:99:42:43:8d:90:67:16:84:90:9e:43:4a:
af:d8:73:9a:cd:bd:a7:5d:0b:b1:de:96:73:65:aa:
29:04:53:2d:72:f8:d8:b2:02:cd:a8:ca:db:a1:ea:
36:d8:96:e1:1b:d0:8e:2a:a3:84:1f:ed:a7:33:ab:
db:e8:a4:d2:da:07:b6:34:e2:3e:23:da:13:7c:9c:
1f:63:0b:57:17:47:d3:ab:90:b4:94:f6:ea:1d:e0:
7f:40:5a:92:d1:a0:f1:c0:ee:71:c4:0c:9b:cb:1c:
17:25:f0:f3:02:16:10:67:90:61:18:db:86:ac:22:
d6:70:1e:70:46:c3:83:22:08:89:3e:d2:f5:d2:f5:
3f:51:a1:d0:a7:56:c5:70:12:1c:f8:4a:02:90:b1:
d0:4a:c9:15:50:0b:92:e9:9d:4b:89:94:15:af:14:
0a:ce:29:6b:c7:6f:e4:27:63:9f:29:ee:21:c5:ac:
6b:eb:0f:f0:97:66:b6:37:e7:02:e2:52:b7:79:f3:
ba:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:25:AE:E0:49:2E:63:18:FE:83:7D:60:59:F0:42:E4:16:75:76:38
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:29:cc:c9:67:fb:f0:21:77:06:2c:7a:cc:dd:0f:bb:63:ec:
7b:58:c1:b4:53:99:80:c3:e9:6b:dc:7d:03:db:7a:a6:80:c5:
6c:8b:bb:4e:55:57:6a:62:6c:f1:f7:2a:95:83:29:28:25:db:
d6:91:27:08:57:38:7b:91:5d:ff:62:69:da:c4:1d:a1:42:8e:
3c:fd:17:68:d7:48:08:aa:47:b7:3a:2a:2c:62:7e:8c:4a:22:
9e:6c:95:51:e1:93:65:32:50:f9:ce:6f:d3:df:bb:f9:ac:af:
27:25:a3:a2:64:7e:07:2d:db:c1:ad:37:62:ba:9f:41:11:9f:
7e:ef:f1:1c:21:f9:1b:2d:a5:ac:f1:20:8e:cc:57:58:7c:3d:
7b:11:7f:b7:42:29:3a:e6:d7:06:6b:ae:a4:51:a4:ac:14:82:
d9:b1:4d:be:83:e0:d2:ce:9b:c6:f3:a4:04:2c:f6:1f:6d:da:
47:ee:c1:06:52:cd:3a:73:2e:56:8b:85:4d:51:60:1c:e3:72:
a6:ff:26:9c:b4:03:ab:b9:b0:0b:cb:af:40:8b:e9:c4:da:d9:
f8:ca:f0:88:85:42:4d:c5:ed:90:c8:44:6f:3a:72:69:41:9e:
a1:38:6e:aa:bf:62:9c:54:09:a4:0f:38:7b:ab:ac:32:89:53:
2c:bd:a7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 06:22:23 2026 by rpki-client