Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: 7g6DxK/pABtp5nhVH2KaZQNCyqLB+CbT2NEaarw5H/o=
Subject key identifier: 5A:2B:3A:31:25:43:06:01:3C:9F:7C:61:C9:E0:F7:A8:42:0A:DB:DB
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 01A18FE7520BD2DF18C888301E043C4F914D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 1AD8
Signing time: Sat 31 Oct 2026 03:01:04 +0000
Manifest this update: Sat 31 Oct 2026 03:01:04 +0000
Manifest next update: Sun 01 Nov 2026 03:01:04 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: Fer7l9DL+sspexZSbTr7g1KSymMFuIjLGOAjI06PP+I=)
3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 02:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8f:e7:52:0b:d2:df:18:c8:88:30:1e:04:3c:4f:91:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Oct 31 03:01:04 2026 GMT
Not After : Nov 1 03:01:04 2026 GMT
Subject: CN=5a2b3a31254306013c9f7c61c9e0f7a8420adbdb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:79:db:e5:84:60:0a:8c:36:1a:94:38:cc:a9:
d7:96:a3:18:a0:ac:3a:48:80:c5:ba:f2:d2:5f:59:
13:5a:18:26:c9:6d:a3:44:9f:a1:e6:0c:8e:3d:d6:
19:36:22:3e:87:a1:19:a9:6a:b2:5d:3a:99:42:fd:
0b:97:09:f0:9d:ea:a4:35:2f:8f:43:c3:55:9c:f2:
e0:48:20:1e:23:89:aa:a5:0c:94:8c:ee:6c:0c:92:
a9:bf:30:54:19:49:dc:b9:4a:51:13:2a:cb:65:6f:
e1:01:b2:b2:3f:8f:fa:8a:03:05:f8:f4:e8:4e:b8:
9f:c5:4e:86:15:ab:83:8a:7b:6f:5a:ff:df:a9:ea:
0d:ff:e8:26:0c:7a:84:61:fb:8b:b8:20:4d:55:e9:
85:9c:1b:6e:a6:02:8e:ca:a6:f3:1b:ca:db:f7:e6:
5e:3b:8d:e8:7a:ab:ee:a5:83:3b:32:bb:63:dd:14:
03:dc:51:12:23:f0:1f:a8:bc:97:90:78:13:af:b7:
92:52:c9:c2:23:75:fd:23:34:25:f3:e4:c6:6d:11:
89:ab:6a:bc:f2:c4:20:dd:77:30:cd:07:09:c9:23:
96:29:a4:cb:6c:79:97:e4:7f:9c:ec:62:43:ef:66:
4d:2d:85:86:7f:3b:f1:ed:95:e9:9c:f0:ab:ca:f5:
c5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:2B:3A:31:25:43:06:01:3C:9F:7C:61:C9:E0:F7:A8:42:0A:DB:DB
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
45:f0:0d:bb:7d:2f:c3:a4:b8:68:6f:5d:62:ab:c4:cc:da:9d:
e7:53:b3:d2:10:23:d6:e1:33:6a:8e:20:f4:11:69:ba:6d:fc:
ec:87:56:62:60:cd:63:a1:f7:b8:f4:6a:a6:d8:17:ae:8a:80:
01:52:22:3e:70:bb:2c:3a:28:d1:ad:e4:72:5d:f4:72:14:c9:
88:f5:0d:de:6e:0d:b7:dc:11:0f:7c:47:3a:63:84:c9:c1:2e:
d0:6d:3b:e8:fb:9a:fa:b2:97:bf:01:28:1c:55:6c:60:4c:97:
cc:29:9e:56:7a:6a:a1:a8:74:13:8c:34:cd:da:f3:1a:e0:e4:
15:ed:e8:dc:04:ec:ad:72:38:09:e8:32:0c:91:dd:15:08:01:
f0:f6:ae:81:93:8f:91:0f:45:21:73:b9:4a:2c:13:d6:e4:b4:
cc:08:b1:ac:d7:37:67:c4:e1:96:ba:46:e8:49:07:21:d4:ae:
42:39:9c:22:74:3c:ca:1a:5e:33:d5:51:47:0a:c7:2f:51:a8:
1e:8a:c8:98:34:fb:4c:33:d4:65:9a:8a:0b:20:3c:db:9b:45:
38:6d:ef:ec:4b:ed:89:f8:ff:50:cb:c0:f3:7e:a9:ba:a2:47:
55:48:c7:cc:e2:71:1c:fc:7e:e9:cf:3d:9e:45:25:b0:c2:24:
74:44:bd:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 09:47:11 2026 by rpki-client