Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: Tj80J0PSjf3PE15QSrZ5271RMKJAoKeVw1S8g+iX6ZA=
Subject key identifier: 7F:A9:57:EC:E4:9A:EC:E6:2A:F8:4C:33:B8:C2:E9:70:3A:01:2E:76
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019F1265D7BC55D6CDE62B0254842314AA0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1987
Signing time: Mon 29 Jun 2026 08:01:31 +0000
Manifest this update: Mon 29 Jun 2026 08:01:31 +0000
Manifest next update: Tue 30 Jun 2026 08:01:31 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: +c8eF1Py4H7kTx3aqlJTAIF39HjjQYY7cTnZ8xZzln0=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:d7:bc:55:d6:cd:e6:2b:02:54:84:23:14:aa:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Jun 29 08:01:31 2026 GMT
Not After : Jun 30 08:01:31 2026 GMT
Subject: CN=7fa957ece49aece62af84c33b8c2e9703a012e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:91:b9:f6:9c:e0:0e:5b:fb:66:5f:cc:bc:ac:
5a:14:95:23:5f:a1:02:a1:29:d2:d2:09:c1:81:83:
35:ee:5a:ee:97:f8:17:b9:38:3e:3e:88:28:b8:30:
7b:3f:cb:da:73:99:4d:b3:c6:c4:c2:3b:aa:d6:54:
e7:e2:a4:64:6a:cd:41:8e:9d:bb:6a:33:1c:73:5b:
7f:a9:f2:c6:5f:ce:39:ef:49:5d:01:af:2d:8a:a2:
3f:68:dd:25:46:54:2b:6e:33:e0:70:4e:62:7d:42:
d2:52:fb:ec:14:ce:18:49:96:ff:7d:00:f0:0a:71:
a2:94:61:5d:0e:f4:98:e2:ea:10:8c:96:f8:0a:99:
b1:f9:b3:19:42:e7:fd:bd:a3:d2:d4:c8:42:68:b4:
0b:59:6c:bc:7a:66:a8:00:e8:00:15:eb:46:79:6f:
f0:4b:a8:13:38:08:41:8f:6c:54:06:64:39:28:d4:
48:1d:7a:15:39:9e:47:88:73:14:ad:e8:2c:56:5c:
16:e0:65:f1:bf:20:9f:27:da:76:37:19:4c:67:4f:
7a:ca:56:0a:9c:75:73:7e:4a:ef:21:13:1d:f4:ef:
bc:4b:5a:64:8e:9a:22:31:e1:78:e4:27:4e:ea:fd:
91:4c:1c:13:b7:1c:cd:5f:8e:a0:03:27:a5:9a:76:
3f:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:A9:57:EC:E4:9A:EC:E6:2A:F8:4C:33:B8:C2:E9:70:3A:01:2E:76
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:6c:c0:30:df:25:15:60:83:12:e0:9d:a8:1f:43:dc:9d:67:
09:fb:c2:5f:a1:67:c7:58:e6:cc:8a:cf:51:26:07:7d:71:9a:
26:d8:7e:8d:18:3b:cb:1d:f1:14:47:68:d0:5e:43:0d:f3:cf:
d5:f8:e5:35:36:ee:f7:26:05:fa:5f:00:da:ea:d5:3c:21:29:
c0:e6:ee:3e:2a:2d:d5:c5:c9:51:d2:9f:c3:60:ba:3a:f8:63:
71:9c:29:c3:ff:4b:96:4a:c1:e0:75:14:50:bf:be:d2:93:94:
d7:c6:43:4b:d4:8e:b7:4f:05:c6:a1:cc:7a:49:21:95:de:a4:
ac:94:2f:ee:f9:88:78:bf:6d:0c:00:9a:78:e2:09:26:e2:c1:
5b:71:42:0d:20:9b:6a:50:93:1d:4a:54:17:a7:5c:ed:6c:c1:
9d:e0:a2:b7:38:88:27:e3:db:5a:87:83:9c:e6:bd:08:19:0a:
0d:b2:5d:ae:2c:f5:38:cc:fa:e6:bf:0d:ff:ce:6d:18:6d:05:
ad:4e:f9:b8:80:a7:b9:3e:95:9b:2d:a7:93:31:e5:85:87:3d:
5c:f0:d0:8d:b3:48:93:f6:df:76:82:a6:d6:ff:06:e9:9c:08:
c6:81:e6:2b:ed:9c:d7:48:84:66:9e:61:cb:cf:1e:80:b5:af:
3f:ca:2f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:54 2026 by rpki-client