Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: g9XN5P0i5JGNQvEJYASFC4cAOCwovf9R2uXusLnP1t0=
Subject key identifier: 2A:6C:BB:A4:EB:BD:F1:F8:3C:CF:9D:2F:38:9A:E7:4D:8D:25:95:27
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019FA1841D9B62F8D3E380AFCF62500D4CF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 19D8
Signing time: Mon 27 Jul 2026 03:00:17 +0000
Manifest this update: Mon 27 Jul 2026 03:00:17 +0000
Manifest next update: Tue 28 Jul 2026 03:00:17 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: E3zNvAmUbQC9cXZmcQ+QXddAOt44/eQP8R1yrSoNv98=)
3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:1d:9b:62:f8:d3:e3:80:af:cf:62:50:0d:4c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jul 27 03:00:17 2026 GMT
Not After : Jul 28 03:00:17 2026 GMT
Subject: CN=2a6cbba4ebbdf1f83ccf9d2f389ae74d8d259527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:a9:e2:de:0e:bf:51:67:f9:47:e3:2c:29:73:
e7:4f:92:13:28:11:f8:6b:a0:39:ab:c0:00:28:08:
be:04:2c:39:41:0d:f0:57:59:a2:e0:06:91:92:05:
95:f3:c1:8a:3a:5c:26:99:7f:07:39:95:fc:34:08:
7a:06:85:9a:0e:23:69:81:71:fe:e6:ad:8e:7e:e8:
9e:05:c5:cf:80:ec:0f:00:16:45:f0:2f:31:21:da:
b3:42:ae:06:8d:8c:e2:c9:e6:73:a7:27:d6:c2:0f:
a8:e8:fd:b2:d5:1a:f2:0b:bb:78:53:9a:8b:86:04:
2b:74:bc:eb:72:d3:31:c0:e1:0f:a1:fe:30:0a:b3:
3f:d0:f3:b8:80:ee:ac:98:f4:f7:f3:b9:d1:20:9f:
27:eb:1b:f5:d4:c2:b6:ac:f4:c8:11:19:44:c5:94:
5e:15:6b:61:80:cc:9c:e4:b7:0c:f5:a6:75:51:90:
68:a5:c2:4b:43:24:37:17:7c:05:28:2f:74:48:5e:
43:d2:fb:55:74:c7:8e:45:d5:7c:91:b6:23:01:21:
0e:c3:37:60:3f:df:20:d9:7b:10:f2:81:2a:10:05:
d9:db:d7:65:e4:88:a9:2b:95:f0:f6:62:ce:83:ba:
37:33:1e:a0:9d:3f:90:4b:8c:45:12:5e:45:8f:6d:
33:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:6C:BB:A4:EB:BD:F1:F8:3C:CF:9D:2F:38:9A:E7:4D:8D:25:95:27
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:cc:a8:32:98:92:ce:81:ab:7d:28:10:2a:d2:94:7f:5d:a2:
24:b6:30:97:e7:1b:76:ee:67:bd:41:d2:32:ec:9a:3f:8a:03:
53:77:2d:cb:3e:7c:7c:f8:61:f1:7e:38:34:4a:ea:37:f0:9b:
ea:98:b9:2d:2e:4d:a3:ac:a7:51:2d:88:62:c5:ec:f3:af:16:
f5:5f:94:33:dc:d5:e1:39:1b:3f:10:b6:ed:53:24:23:b2:79:
e7:d6:20:27:54:90:c5:98:5e:40:9d:46:87:64:6b:4c:89:62:
50:01:93:36:e3:e2:cf:84:06:8a:af:05:c3:60:1c:71:b0:09:
31:4f:aa:ca:cf:bf:e9:65:44:bd:ad:cd:94:db:9d:b8:c4:81:
68:87:48:12:45:08:0a:2b:b0:57:af:a2:1a:99:01:1c:42:f0:
33:15:b3:c9:62:b9:85:a5:7d:69:e1:6d:81:1f:52:28:2a:37:
99:f0:57:bd:b8:02:46:5a:8e:99:7f:91:6d:cb:01:08:2a:12:
14:45:57:48:ad:49:ef:91:42:1d:50:12:be:05:86:46:3c:40:
f8:16:b5:9e:ea:cc:a7:02:a5:94:e7:b7:a8:2d:05:29:3a:8d:
91:15:ad:52:74:9d:b0:eb:a3:00:06:ec:9f:43:6a:44:f5:09:
2d:60:21:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 10:29:53 2026 by rpki-client