Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: +Ngg1rrQLkWG7Z8TDMD44bJdcE2eIKaZpP6X2cV8o5k=
Subject key identifier: 56:6E:41:28:E2:82:5B:85:97:72:D3:D9:7C:D5:06:88:80:D2:C5:04
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 01A1795F21CACF0F8FD8D7C20F8DEB46D7EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1A1E
Signing time: Mon 26 Oct 2026 18:00:39 +0000
Manifest this update: Mon 26 Oct 2026 18:00:39 +0000
Manifest next update: Tue 27 Oct 2026 18:00:39 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: gGDNha2+okkq+zTKPhCtle3t02FiKyAxm8n27r1XYI8=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 18:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:5f:21:ca:cf:0f:8f:d8:d7:c2:0f:8d:eb:46:d7:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Oct 26 18:00:39 2026 GMT
Not After : Oct 27 18:00:39 2026 GMT
Subject: CN=566e4128e2825b859772d3d97cd5068880d2c504
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:e2:41:24:ff:b6:75:72:1e:22:ac:e3:49:a1:
57:b1:eb:55:82:f6:bc:52:fe:63:89:d8:c4:e6:e3:
f1:74:a3:76:a1:d2:e0:09:f8:4f:04:91:c9:e3:d7:
1f:15:97:ad:62:95:45:6d:b3:31:e1:ec:ef:98:3e:
f5:1c:8a:6b:4d:ef:0f:6b:3c:b6:cc:49:8d:4e:39:
7e:b1:f3:35:34:ca:cc:61:fd:67:09:52:cf:1f:ed:
85:22:a8:6f:1b:43:1d:26:1e:92:03:d6:cf:2d:63:
c6:94:40:2e:4b:49:8a:61:71:9c:d3:bb:93:88:11:
b0:66:9a:34:43:d3:6d:55:1e:ed:fc:68:9b:1e:a9:
63:a5:c6:c3:79:38:33:94:84:62:84:d9:c6:cd:f7:
ce:9b:bb:3b:e7:08:a8:e0:17:83:e9:c8:e5:c3:51:
20:9d:ac:b4:f2:53:3b:02:19:db:ec:03:87:73:78:
23:27:21:9b:30:46:12:c8:21:22:c0:cd:96:69:a6:
a9:fd:f9:28:69:8d:6e:17:ab:30:57:94:1b:61:45:
09:69:71:0f:26:5c:98:39:c7:91:30:36:f0:1b:7a:
0a:af:f5:9d:76:31:0d:ac:59:6e:30:28:bc:6f:e9:
09:26:6d:fd:0c:86:e7:87:9a:77:2b:3f:bb:9f:58:
a6:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:41:28:E2:82:5B:85:97:72:D3:D9:7C:D5:06:88:80:D2:C5:04
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:97:cd:46:32:d8:f6:60:7d:37:51:75:f4:bf:b1:eb:8d:70:
75:a4:c1:12:e3:58:11:6c:93:f7:4f:7b:0d:1b:50:0d:1d:57:
f1:37:3d:4d:90:06:13:8f:49:f8:24:d6:6b:80:ce:93:d4:01:
a6:75:c6:24:5b:54:31:e1:85:52:1e:22:f5:2d:80:21:1b:f0:
04:b1:c0:a6:4f:93:3c:38:82:24:f2:3c:b1:c1:d1:fe:a0:78:
a3:9f:3e:40:54:06:20:0c:1d:a8:5a:fc:43:b7:aa:dd:f9:10:
28:35:d6:57:6a:d7:a3:f2:85:36:31:52:62:16:32:8e:e8:f9:
b8:81:27:a5:67:f8:8f:ab:6c:43:76:2c:b3:12:fb:60:67:f6:
37:9d:ce:8c:b8:9f:ca:d9:81:07:d3:bd:70:23:e5:b3:ed:64:
33:cb:04:c8:2b:73:f0:a7:d8:12:29:27:28:de:b8:04:81:2a:
76:34:3c:91:73:57:ca:73:7b:e2:06:20:d0:c8:d6:ef:76:96:
3d:94:df:21:13:11:31:15:b4:91:01:2f:56:1e:3e:39:e7:2d:
5e:eb:a5:60:ee:f4:3c:25:17:28:63:1b:40:f3:4c:e0:a6:b2:
a9:9f:21:4a:90:83:0c:90:c5:8e:78:ac:6d:c9:d5:cf:7d:d5:
80:18:b6:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaF5XyHKzw+P2NfCD43rRtfvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz
ODMwMDQwHhcNMjYxMDI2MTgwMDM5WhcNMjYxMDI3MTgwMDM5WjAzMTEwLwYDVQQD
Eyg1NjZlNDEyOGUyODI1Yjg1OTc3MmQzZDk3Y2Q1MDY4ODgwZDJjNTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp+JBJP+2dXIeIqzjSaFXsetVgva8
Uv5jidjE5uPxdKN2odLgCfhPBJHJ49cfFZetYpVFbbMx4ezvmD71HIprTe8Pazy2
zEmNTjl+sfM1NMrMYf1nCVLPH+2FIqhvG0MdJh6SA9bPLWPGlEAuS0mKYXGc07uT
iBGwZpo0Q9NtVR7t/GibHqljpcbDeTgzlIRihNnGzffOm7s75wio4BeD6cjlw1Eg
nay08lM7Ahnb7AOHc3gjJyGbMEYSyCEiwM2Waaap/fkoaY1uF6swV5QbYUUJaXEP
JlyYOceRMDbwG3oKr/WddjENrFluMCi8b+kJJm39DIbnh5p3Kz+7n1imJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZuQSjigluFl3LT2XzVBoiA0sUEMB8GA1UdIwQY
MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt
ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy
LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQpfNRjLY
9mB9N1F19L+x641wdaTBEuNYEWyT9097DRtQDR1X8Tc9TZAGE49J+CTWa4DOk9QB
pnXGJFtUMeGFUh4i9S2AIRvwBLHApk+TPDiCJPI8scHR/qB4o58+QFQGIAwdqFr8
Q7eq3fkQKDXWV2rXo/KFNjFSYhYyjuj5uIEnpWf4j6tsQ3YssxL7YGf2N53OjLif
ytmBB9O9cCPls+1kM8sEyCtz8KfYEiknKN64BIEqdjQ8kXNXynN74gYg0MjW73aW
PZTfIRMRMRW0kQEvVh4+OectXuulYO70PCUXKGMbQPNM4KayqZ8hSpCDDJDFjnis
bcnVz33VgBi2vQ==
-----END CERTIFICATE-----
Generated at Mon Oct 26 23:53:48 2026 by rpki-client