Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: mzd1Z1zKaveUMCVmuX4TduDMxbP8QCw5ZOeVEV/GIIk=
Subject key identifier: D7:BA:26:74:38:48:87:9D:D1:51:E2:4A:AA:00:BC:C9:B6:FF:95:9B
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019FA2299449865A79282B832A89EC76E8EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 192A
Signing time: Mon 27 Jul 2026 06:01:01 +0000
Manifest this update: Mon 27 Jul 2026 06:01:01 +0000
Manifest next update: Tue 28 Jul 2026 06:01:01 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: YH4gW5tUa/BCGMz7BgLSKp94Gb5WkATaiTsMszvKz4M=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a2:29:94:49:86:5a:79:28:2b:83:2a:89:ec:76:e8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jul 27 06:01:01 2026 GMT
Not After : Jul 28 06:01:01 2026 GMT
Subject: CN=d7ba26743848879dd151e24aaa00bcc9b6ff959b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:69:b1:e5:21:eb:07:05:16:9b:49:05:15:35:
56:f9:f3:9a:c7:d9:34:83:2d:c2:ee:82:17:b0:36:
a5:ba:13:73:e9:98:a3:20:81:05:14:88:f6:bb:93:
fa:e4:3c:3d:58:a3:31:11:79:e0:f6:74:35:29:0b:
64:25:53:11:96:c7:be:7d:78:4a:1f:66:e1:17:40:
5d:b6:a4:10:ce:15:fb:33:87:39:c2:d1:73:b5:22:
65:30:c3:4c:71:55:e4:c5:89:88:85:75:74:29:f0:
3b:54:76:6e:16:14:0e:e9:6b:30:4e:69:5c:61:ef:
d5:2f:9c:fd:51:b5:c9:53:a4:cc:c7:f3:fd:9a:4e:
6e:e5:6d:83:37:7d:2d:fa:61:4e:56:95:ee:cd:bb:
66:71:5f:78:ef:2e:ae:e6:aa:df:6a:4f:b5:53:a7:
d8:85:a7:93:6c:2e:5f:d8:ea:da:05:45:56:c0:ab:
59:c6:98:3d:56:26:e4:53:65:bf:b6:3c:5f:db:db:
93:12:73:1a:1e:f3:e3:d7:5b:fa:bf:a6:d5:97:a0:
94:a0:48:8b:4f:a9:7f:eb:de:6f:87:5b:a0:bc:f1:
29:5f:dd:71:e5:87:de:1a:98:3d:c8:c7:4a:99:17:
b6:ac:f1:54:e6:d5:f8:0d:6b:b7:8a:0d:82:e5:ab:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:BA:26:74:38:48:87:9D:D1:51:E2:4A:AA:00:BC:C9:B6:FF:95:9B
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:93:c7:07:a3:33:a8:6b:8d:cd:48:bb:a1:d6:d1:c0:8c:a7:
36:8f:de:3c:31:c7:b2:d2:c6:f3:1b:39:7c:8a:a4:9f:d6:56:
df:d0:2c:8b:16:f9:fb:91:81:77:5a:13:24:4e:fd:3b:b2:2e:
d4:2c:1e:1f:53:98:89:e2:d3:51:42:ab:61:56:a8:47:8f:93:
c2:39:0f:42:21:07:92:cc:42:9e:4b:ac:69:8e:a1:75:2e:33:
44:74:24:e7:f4:b8:2e:e8:04:77:fa:d8:53:7f:ae:5d:8e:2d:
3f:8f:4f:39:f7:49:f8:34:86:a0:c2:de:d8:8d:32:35:c9:74:
53:28:0d:73:3a:10:5f:18:b6:fd:73:2e:2f:fe:4a:11:05:09:
d6:57:81:3d:33:ad:20:ca:ef:8e:ad:2e:5d:17:5c:58:b7:09:
fa:c5:02:11:3d:d7:cb:36:0c:ef:a7:95:05:62:00:af:e9:10:
37:b1:4d:87:ec:49:64:63:f2:53:a9:5c:2c:13:8f:02:1a:b4:
8b:dd:6c:de:59:b2:ce:86:35:f0:1e:47:f2:b1:7e:81:50:95:
5a:a1:de:0f:73:66:15:08:22:23:0a:7c:b6:3f:2a:32:b2:e8:
93:e5:50:7c:81:b0:c9:69:bd:71:8f:0d:6c:db:0c:a3:60:93:
d4:be:0d:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:59:02 2026 by rpki-client