Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: YSmWTa3aBOygxyBOU3H5iAOHvIc2UkhVSs9HXStam3M=
Subject key identifier: 02:29:DA:91:F2:3D:7C:FB:A8:04:5D:89:AD:F7:14:44:5C:61:85:82
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019DCE9946616E73569870A38706222DC861
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 18E4
Signing time: Mon 27 Apr 2026 11:00:44 +0000
Manifest this update: Mon 27 Apr 2026 11:00:44 +0000
Manifest next update: Tue 28 Apr 2026 11:00:44 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: 0yW29Mo8IXfU0+NSI2962shq4CDnioiKaYttI0BrJro=)
3: UfNHSpJylWqCGj1xnLyUYs3XscQ.roa (hash: HqwmuScnIwcfsRW+0IJvtbF4YsRX/kFXsJcVfa0Phs8=)
4: aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa (hash: CsGiY18ccHhD7M1a8C7IWEu0NTkbcJT9x/p8uOlc+a0=)
5: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
6: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
7: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
8: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:99:46:61:6e:73:56:98:70:a3:87:06:22:2d:c8:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Apr 27 11:00:44 2026 GMT
Not After : Apr 28 11:00:44 2026 GMT
Subject: CN=0229da91f23d7cfba8045d89adf714445c618582
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:64:1a:91:29:84:36:13:82:d7:16:9d:c8:6b:
ea:af:5e:06:4e:d1:3b:61:f4:10:f0:3e:b7:75:f5:
26:3c:45:84:75:d8:f4:d7:2f:36:8d:a4:00:c0:7b:
56:81:15:b1:35:17:5a:a9:f2:d8:4b:c3:40:d6:5f:
c5:f0:ab:06:fe:ec:ed:f5:93:e7:2c:2c:89:86:fe:
79:4b:d3:1f:43:90:c9:76:57:8e:fa:e6:ad:f5:93:
da:c9:1e:8d:0e:9f:76:58:8c:12:d1:8e:f0:00:87:
1b:45:a8:36:24:19:8e:d9:a1:a4:d9:30:d8:fb:e2:
43:f5:69:a4:eb:c5:c2:97:6a:f0:c7:dd:15:4b:73:
9c:6f:07:e1:cf:17:c6:22:f6:ef:3b:cb:48:38:5c:
39:60:dc:4a:a6:99:a9:4c:22:f4:2f:1e:17:fe:4f:
5e:34:e4:e1:56:c6:4f:cc:0b:f4:b4:d4:29:2d:6c:
f7:77:04:47:a9:de:83:43:a8:8c:ef:2d:86:de:e0:
82:18:67:85:18:8d:a0:f7:46:92:01:64:68:c2:e7:
2f:4c:2b:0e:2c:08:ef:a0:34:48:06:aa:89:aa:20:
a8:ec:2c:dd:3a:27:29:ec:ae:b6:ff:d3:d5:57:93:
92:73:6c:20:e0:97:75:48:43:90:02:5b:18:eb:1b:
a1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:29:DA:91:F2:3D:7C:FB:A8:04:5D:89:AD:F7:14:44:5C:61:85:82
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:23:eb:61:0c:09:1f:24:61:8b:c5:07:84:ed:c8:42:33:4f:
fc:7d:ba:1a:73:84:10:04:3f:f8:03:c7:8c:cc:6b:04:20:cc:
7e:2c:2b:50:c7:50:26:84:f0:e2:cc:25:38:96:4a:1f:81:46:
1e:ce:3e:d6:9b:69:c7:d8:1d:b2:82:4e:6d:77:2e:34:ef:a0:
0f:4e:2c:1d:46:f0:89:eb:17:d6:58:98:4e:fc:b9:d2:c8:eb:
38:22:35:d3:da:27:d3:43:6a:47:df:73:f8:69:b5:50:de:9a:
e3:97:2f:55:7b:ec:e6:56:da:95:a6:fe:05:e0:27:32:db:c4:
22:b3:eb:f4:28:0b:03:82:b2:3e:51:86:11:54:78:86:86:db:
58:0c:e0:ff:c4:8e:ec:a8:86:29:7a:0c:74:ea:1e:49:6d:9f:
24:f1:bc:74:95:41:7b:e0:c0:b7:bc:e9:16:6f:98:2b:43:c5:
73:98:34:89:70:b6:c2:d0:b9:cd:99:1f:69:52:a2:66:9c:a1:
3f:6a:b7:22:3b:d7:0c:ce:fa:70:57:60:78:4e:8d:14:be:08:
5b:ec:13:78:be:87:27:5b:c9:62:4d:a9:46:fa:84:8d:0b:fa:
a5:f1:f6:ba:a5:16:45:88:f5:61:ee:f8:e8:28:99:a9:1a:d3:
1b:0e:bb:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 15:50:11 2026 by rpki-client