Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: aSeSw8z6c/OKOisGz2Gci5UjhkLz4Wen1dMDHXu5tOk=
Subject key identifier: FD:F1:55:9B:3D:6D:2E:0A:C0:90:D5:91:DF:35:E2:85:5C:C9:1C:E4
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019D371B4039BC0885312FCDF3FDFF903893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1890
Signing time: Sun 29 Mar 2026 01:00:25 +0000
Manifest this update: Sun 29 Mar 2026 01:00:25 +0000
Manifest next update: Mon 30 Mar 2026 01:00:25 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: EP0sadSFtSFhRKKKcaU5qF4kod7kM4/JB3lNPy/4UpE=)
2: VTXP2YiwzSV9vXA0rbSUdcqK9nU.roa (hash: 6PLpiz3quSPpSuhj5ThEN3LZ+VImxKC5MTupvkiSL40=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:40:39:bc:08:85:31:2f:cd:f3:fd:ff:90:38:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Mar 29 01:00:25 2026 GMT
Not After : Mar 30 01:00:25 2026 GMT
Subject: CN=fdf1559b3d6d2e0ac090d591df35e2855cc91ce4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:89:83:b6:cf:0f:62:78:9c:bd:3f:61:e1:d8:
9e:2a:9b:80:c1:25:4e:da:c5:1e:cd:cd:3a:90:70:
d7:1e:26:a5:41:1e:e4:1c:be:0d:2b:4c:f0:4a:33:
22:37:36:f3:e5:d8:94:0c:e0:7f:bf:00:13:e6:34:
11:d4:39:27:20:2d:a8:62:67:91:4c:b3:34:fb:68:
f0:7f:91:53:d7:d9:de:a9:14:ff:75:67:70:ae:9d:
da:37:d0:bd:be:14:01:c1:58:90:98:15:48:17:9b:
56:34:8a:6e:7b:05:c7:22:53:81:fa:42:9a:b1:ba:
6f:47:a4:bb:35:02:a0:4c:5c:1c:0c:b5:07:b8:3c:
b4:bb:32:61:ee:2a:89:f8:aa:e5:41:7d:34:26:ed:
97:07:a4:85:8d:6b:c3:38:46:eb:2e:51:ec:0e:dd:
63:87:51:2a:b8:5f:97:4b:04:79:24:10:bb:6e:8e:
34:89:b4:e5:ca:1a:6b:4f:c9:f9:9e:42:79:c2:56:
27:c3:93:1e:9a:18:dd:d3:01:9d:ac:d0:ac:7d:df:
a3:23:9b:4b:d7:6f:8d:aa:78:5d:85:d9:47:02:87:
d1:4b:75:ba:51:6c:e1:9c:de:c7:1d:9e:3f:a7:72:
44:a7:0a:02:08:20:40:e3:ea:f3:2b:8d:ae:aa:a4:
87:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F1:55:9B:3D:6D:2E:0A:C0:90:D5:91:DF:35:E2:85:5C:C9:1C:E4
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:c3:fb:fb:ce:e8:fc:a3:44:9e:d6:bd:08:aa:11:1b:34:56:
95:0f:12:83:85:1b:6f:75:8b:ff:c9:00:0b:91:86:fd:e1:2a:
9f:bc:18:bf:8c:9a:54:80:32:f3:a8:86:9c:ae:49:45:c5:fc:
5f:77:cb:79:52:a9:22:f7:fb:a0:64:0d:51:0a:f1:1f:8a:35:
9e:03:79:b4:32:1c:01:2e:22:a0:7b:a8:7c:8f:a6:5d:0b:6a:
96:c5:ff:ec:80:03:07:27:0b:48:4f:b0:d3:81:05:93:5e:4c:
6a:d9:2f:ff:93:41:1a:f4:7c:65:8d:e1:20:35:40:a0:9e:12:
a4:55:25:16:74:51:a0:b1:c4:b4:c4:9e:e4:4d:d9:c3:f0:29:
cc:0c:eb:eb:5f:51:80:4f:82:16:12:62:9d:48:01:d1:1c:33:
5c:67:c1:80:52:b7:d0:e6:dd:ee:eb:8f:cd:ea:49:50:31:e6:
3f:cc:b8:53:8a:fb:d4:e8:ad:61:72:0d:b6:e8:15:b8:6a:21:
22:a2:80:0c:6d:6b:68:e6:7d:5d:0e:b7:69:56:e9:4e:43:a9:
68:f9:4a:f5:e0:be:58:3f:3e:fe:8f:55:6b:f4:27:a1:08:fb:
19:ca:16:b7:18:1b:57:61:0c:67:30:94:55:ac:37:f8:ba:7c:
23:ce:9b:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:26:29 2026 by rpki-client