Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: cHcgAqTDNHIyzVarjbzd8uJfvIX42rMUrFyB/sycMqw=
Subject key identifier: FC:32:20:1E:27:2E:B2:F8:5D:D6:59:4A:C6:AB:9D:AE:31:4C:4E:FA
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01A17A71DD413A10E51421F8B2C5ECAA60B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1AC6
Signing time: Mon 26 Oct 2026 23:00:44 +0000
Manifest this update: Mon 26 Oct 2026 23:00:44 +0000
Manifest next update: Tue 27 Oct 2026 23:00:44 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: PblSpRzW6bq+zB2OEeAhSQeCeh0jfaUM58LIIpT1jg0=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7a:71:dd:41:3a:10:e5:14:21:f8:b2:c5:ec:aa:60:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Oct 26 23:00:44 2026 GMT
Not After : Oct 27 23:00:44 2026 GMT
Subject: CN=fc32201e272eb2f85dd6594ac6ab9dae314c4efa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:17:08:f8:6a:30:ec:97:20:ed:a4:45:f1:ad:
59:7d:9e:9e:81:22:a3:5a:62:11:c2:16:0f:49:d1:
f6:e9:f6:ee:d9:d3:35:6b:bc:20:56:82:c4:df:eb:
12:4a:e7:31:a5:16:2f:bd:d9:84:69:19:bf:93:67:
8e:bd:96:f6:f6:df:1c:51:8c:a4:18:dc:f3:cd:2a:
21:e7:7c:18:14:cf:66:ff:fb:84:79:76:e4:f9:0d:
db:c5:57:e0:b8:7b:6f:e7:da:72:1a:25:0c:37:10:
d1:50:12:19:f3:bc:06:fc:98:0c:7e:66:6f:c1:08:
41:46:d3:b5:bd:dd:bc:38:1e:9c:a5:0e:5f:d3:a5:
26:8a:0d:0b:b8:9e:5c:87:99:90:45:20:aa:cb:cc:
cb:39:e8:99:6b:4d:b4:fa:c8:7d:38:8f:3f:99:3b:
be:16:75:d2:7c:9b:fb:ed:86:8b:70:47:59:2d:e0:
62:9b:9d:97:5a:c9:46:c2:59:e5:4e:f9:20:12:63:
d4:a4:e8:29:29:87:ac:96:72:53:e9:2a:c9:b6:8c:
ca:e9:f6:09:3b:71:97:ac:fd:fc:0c:54:ec:be:0c:
fe:45:02:84:cd:6f:ec:1e:91:0d:ac:32:6f:e6:13:
6a:85:2b:34:d8:df:fe:e5:2f:e8:f3:05:6a:f7:8b:
08:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:32:20:1E:27:2E:B2:F8:5D:D6:59:4A:C6:AB:9D:AE:31:4C:4E:FA
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:77:4b:11:dd:93:52:f0:0e:49:5c:a3:cb:2e:4a:72:77:ef:
5a:c5:5f:6a:92:e9:b2:ef:4d:59:5d:bc:27:00:9f:27:1f:98:
2d:82:e1:54:15:94:4d:aa:e2:d4:b9:89:bb:e9:26:7d:bd:73:
1e:e0:60:67:de:4b:7d:64:bd:05:56:51:7e:24:cb:7f:5b:b2:
d9:c3:f9:b8:ca:a6:c5:73:32:bd:54:9e:8f:48:8b:84:d5:f6:
04:bc:33:c8:f3:b7:08:61:c4:fd:05:14:4d:fd:71:6c:e0:cf:
34:4c:8a:7b:9b:7d:56:8a:b0:a7:1e:36:fd:47:0c:79:87:40:
dc:d8:15:b7:1b:42:e8:97:11:95:00:0e:53:37:38:be:6a:09:
eb:0c:8c:19:eb:f0:e9:29:c9:37:10:96:96:c9:52:ab:9c:9d:
b6:8b:62:3e:6c:a0:87:fd:31:48:98:22:b4:be:f5:6a:9d:96:
61:4d:2c:b3:52:cc:82:d2:2e:f5:4e:47:d5:17:8d:ea:6d:d5:
e8:0e:86:c8:76:74:7b:cb:87:6d:04:b6:49:34:88:30:96:4d:
89:2e:69:43:37:f1:64:5b:b8:be:20:ff:4d:3a:24:e5:d0:89:
11:e7:c4:c0:94:0a:6a:d0:9d:c0:73:27:1b:32:fc:b1:c6:80:
cf:5a:8e:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 04:39:43 2026 by rpki-client