Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: 8NrQ0ETw98sInXkqky1EdiEBIRYWrLtYoH0RAmX1vYI=
Subject key identifier: F5:1F:66:0A:00:F4:C1:30:72:AE:B2:05:2C:F0:AC:38:B3:91:E2:31
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019DCED0C33F711DDA1DC662ACB57D11569D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1838
Signing time: Mon 27 Apr 2026 12:01:20 +0000
Manifest this update: Mon 27 Apr 2026 12:01:20 +0000
Manifest next update: Tue 28 Apr 2026 12:01:20 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: baELDoMGRH2HZP+FmO/HGcJGjpfd5TwdxVbVZrTaywU=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 12:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ce:d0:c3:3f:71:1d:da:1d:c6:62:ac:b5:7d:11:56:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Apr 27 12:01:20 2026 GMT
Not After : Apr 28 12:01:20 2026 GMT
Subject: CN=f51f660a00f4c13072aeb2052cf0ac38b391e231
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:4b:12:0e:4b:d6:b6:b4:c6:34:3f:4b:44:
7f:dd:7a:17:75:49:04:b8:bb:f5:38:51:73:2a:66:
d6:e3:8e:67:c0:ac:a4:23:3d:b2:72:54:2f:78:21:
6b:bc:e0:1e:b4:39:a3:8f:f4:37:bf:ce:dc:ef:bd:
3e:86:07:86:ca:a3:5c:37:8d:b7:1a:19:2d:7b:76:
ad:1c:34:84:96:6d:73:0a:8a:b9:98:b6:64:19:c8:
1d:66:31:e0:fc:bb:29:5a:fe:5f:2a:2f:25:31:a8:
7a:ae:1e:7a:1c:76:ab:85:62:e4:2f:ab:fb:5f:f9:
4a:94:63:a1:23:89:65:3f:8d:f9:d9:01:7a:79:70:
5e:c8:75:76:6b:2a:26:af:8a:53:b9:10:93:04:97:
9d:d5:1c:7d:2c:ac:5f:40:00:57:ad:9a:03:94:f9:
2c:29:f3:60:95:31:4c:90:b9:1c:9d:91:51:ef:a6:
4b:22:07:b3:6e:4b:09:ec:c8:8e:b4:bc:18:e4:e3:
bf:f4:f4:f8:b9:7a:25:e3:ad:bd:d5:c1:e2:f8:3b:
a8:f4:18:47:62:c5:eb:27:6a:be:1a:90:bc:cc:21:
38:53:ad:dd:13:5c:02:b0:77:38:63:15:36:04:c3:
0a:7b:4a:68:6f:a6:1d:0e:fe:36:23:4c:c3:fe:5e:
7d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:1F:66:0A:00:F4:C1:30:72:AE:B2:05:2C:F0:AC:38:B3:91:E2:31
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:1e:30:d4:d5:1f:a7:9e:ce:8d:40:c7:06:41:79:62:42:9a:
50:0c:7f:26:43:0b:66:6f:7b:c8:ca:5e:32:7f:d1:e5:0b:a2:
08:9b:03:55:e4:9e:c2:4c:e6:f0:e8:a0:60:6c:f0:a9:71:a9:
90:fc:bc:92:76:2f:10:a4:e1:42:05:f6:8e:50:4e:d3:62:3a:
aa:50:da:39:1a:99:69:c9:2d:e2:d6:67:ca:a4:d2:91:04:0c:
1f:dd:e2:6e:3f:5d:f9:40:a8:c0:36:e5:80:d8:30:ce:c0:4d:
46:b3:01:96:e5:53:d6:20:a8:82:58:56:6d:c5:f6:06:ae:54:
51:5f:bd:ab:7a:32:cb:4b:d5:f7:13:8c:e5:53:a6:03:38:0f:
ce:85:02:6c:aa:ee:f9:0d:cc:1e:fc:59:7a:fa:6b:ee:0d:a2:
45:0e:27:54:53:9e:45:74:80:39:d4:ad:09:38:5f:30:12:03:
d0:80:6e:49:eb:47:5a:13:58:14:6a:3b:85:09:bf:5f:f4:16:
df:e0:2b:e1:be:7d:8a:a0:da:29:49:4e:ce:f1:07:29:5a:17:
e8:32:dd:46:b7:9c:65:35:79:0f:fb:71:b8:a3:94:b7:0b:84:
1e:a9:1d:c3:33:a2:67:9e:61:b7:80:4b:b0:d7:86:a4:55:41:
5d:75:36:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 19:06:25 2026 by rpki-client