Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: EFbURs1MGZLbhU8Sf0M38mAlkqNZgJc1FYKeRACUqHE=
Subject key identifier: 82:CD:8A:75:C2:55:B2:C9:F9:C7:B8:CF:67:70:E5:98:A7:8B:B3:79
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019E28B99A2B84474C8D10949C2027FB49A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 190E
Signing time: Thu 14 May 2026 23:01:52 +0000
Manifest this update: Thu 14 May 2026 23:01:52 +0000
Manifest next update: Fri 15 May 2026 23:01:52 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: usv51bSoOqPFTqLwxoTG24gVLrx/nrNzUe5OV81g2/o=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 15 May 2026 23:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:28:b9:9a:2b:84:47:4c:8d:10:94:9c:20:27:fb:49:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: May 14 23:01:52 2026 GMT
Not After : May 15 23:01:52 2026 GMT
Subject: CN=82cd8a75c255b2c9f9c7b8cf6770e598a78bb379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:65:be:a1:62:58:88:43:c6:17:b3:4f:b7:8d:
c2:64:99:91:35:76:04:00:ba:e2:fc:8a:f5:e5:1c:
d8:97:d0:7d:a5:3f:87:52:af:ef:39:aa:fd:29:26:
d6:fc:22:92:9a:75:f9:48:17:9a:6d:85:f9:c6:4a:
5d:db:c1:b7:7b:15:54:8e:41:3e:97:91:af:a5:0a:
4a:da:81:1b:9f:24:86:db:04:5d:03:59:2d:26:ad:
89:41:70:93:90:1b:d7:b1:bb:f2:e1:f0:9d:e7:42:
e7:81:df:45:af:a8:29:7a:37:3c:7b:d3:85:5a:68:
1b:d5:9e:23:41:64:45:c6:08:00:83:34:b5:58:41:
58:11:3b:88:13:8e:ac:28:82:d1:ca:e5:d7:ef:72:
12:83:be:71:27:f0:f6:fa:6e:68:af:ed:f7:86:3c:
14:23:5f:8e:ee:0f:5d:b9:1d:a3:5d:9d:ea:cc:2d:
0d:6e:fe:cc:01:51:64:cc:f5:07:e4:59:b7:c6:82:
28:ab:6f:88:08:48:e0:d9:73:4c:90:a5:ab:b4:b2:
9c:e1:de:61:20:46:9d:6d:61:92:a9:39:49:57:06:
e4:37:3b:72:56:42:be:75:45:ee:65:a4:1b:61:86:
1b:05:2c:19:24:b4:ef:6b:bd:58:b4:f6:5b:72:f5:
b4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:CD:8A:75:C2:55:B2:C9:F9:C7:B8:CF:67:70:E5:98:A7:8B:B3:79
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:07:9f:be:a0:a3:2c:a8:9f:38:73:7e:6f:d5:9c:65:f9:5e:
0d:34:a3:f4:25:d8:a6:91:2a:37:87:ac:73:2f:c5:48:a2:e9:
74:a4:c5:41:15:46:8b:47:d4:75:72:f5:59:95:fa:c6:d8:41:
b1:58:d8:d3:72:77:e9:0f:81:54:15:8d:65:dd:98:c2:fc:38:
c4:c8:8b:46:ec:0f:11:dd:76:a2:61:b5:ef:da:c5:44:71:b8:
02:25:d4:63:55:a9:a0:91:f3:de:01:6e:65:94:27:07:cc:8e:
db:54:38:9b:bd:4e:1e:c0:58:29:14:a6:39:eb:87:d0:ab:eb:
5f:9c:58:b1:50:c2:f5:cc:cb:49:bb:76:1a:f2:b0:c9:fb:5d:
0b:6e:5c:19:91:3e:9e:da:67:a9:f8:68:24:da:ff:ee:43:03:
fa:9e:f2:5c:83:26:ec:1e:2d:eb:93:cb:88:a9:a6:16:11:e7:
a6:94:3a:98:90:d0:20:41:a4:75:49:80:ba:72:7e:bb:c4:b9:
0b:39:79:69:3a:b9:e3:53:c8:6e:51:62:dc:82:b2:57:dd:cc:
51:10:f1:c0:8c:65:47:00:06:75:d2:4f:9b:96:81:72:6a:48:
fa:07:2e:e6:98:0c:b1:05:2b:7f:37:cf:b7:dc:8e:6b:52:45:
34:37:0e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 06:20:15 2026 by rpki-client