Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: 4J+a/1JqRP5F+K+ljUsRgpspABvNK0EcN8HSbi98V94=
Subject key identifier: 4B:4D:AE:9D:BC:D8:3D:CA:E1:84:1C:E0:D6:AC:3B:D3:74:77:FD:14
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019EB87CEC11C42A62493DD4F6D868AE3266
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 18B1
Signing time: Thu 11 Jun 2026 21:00:55 +0000
Manifest this update: Thu 11 Jun 2026 21:00:55 +0000
Manifest next update: Fri 12 Jun 2026 21:00:55 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: Q3mNTn4fISypA9X1QcpcA1Qb3vfZ9MZOV38DQ3OZ4o8=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ec:11:c4:2a:62:49:3d:d4:f6:d8:68:ae:32:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jun 11 21:00:55 2026 GMT
Not After : Jun 12 21:00:55 2026 GMT
Subject: CN=4b4dae9dbcd83dcae1841ce0d6ac3bd37477fd14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fd:5d:08:7e:83:3b:37:3b:36:08:5c:3d:19:
21:56:fe:c0:ca:38:dd:ff:99:3e:2f:e3:68:a6:43:
14:20:67:56:20:b5:e3:a5:54:cd:79:26:68:9b:30:
89:87:45:a1:fe:2b:92:67:ed:3f:ff:95:8c:b3:a6:
5a:85:07:5a:50:f8:bd:ef:ce:cd:2d:47:35:ec:c6:
6e:31:f6:9b:db:b3:a5:18:d2:82:69:b6:27:38:35:
1d:0a:30:4d:ac:3b:6a:d1:4e:27:f5:d8:59:7d:d7:
95:ce:12:b8:a6:3b:d5:96:a1:c7:1d:91:93:da:3b:
63:74:93:80:61:49:98:cf:19:84:a8:97:ae:e2:7d:
4c:a6:cb:70:14:f7:6d:82:34:92:1d:3e:50:66:83:
19:f0:58:f3:a9:7a:c2:04:72:04:5f:94:b4:cd:97:
5c:25:70:1f:7d:8e:9d:3a:0d:af:57:f8:11:23:53:
b7:f5:48:3e:c4:41:d1:3d:cf:a6:55:9b:e3:cc:c5:
5e:b1:e3:65:de:ea:5b:8b:11:49:33:b0:45:bf:7e:
b7:29:b6:8b:56:d3:a3:47:2e:43:ac:4b:11:b8:13:
b9:25:75:5e:44:97:02:88:ae:ef:54:3b:38:d1:ae:
f4:52:7a:5c:4f:f2:4d:f7:c3:e4:e0:1b:43:9e:46:
17:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:4D:AE:9D:BC:D8:3D:CA:E1:84:1C:E0:D6:AC:3B:D3:74:77:FD:14
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:4d:47:b9:3e:35:e4:29:81:d1:9c:a4:fa:d4:a2:42:cd:bc:
62:5a:3e:45:51:f3:75:bc:b2:95:4f:33:27:12:0e:aa:77:1f:
ea:98:b3:7a:db:c1:77:d0:71:8a:62:dc:65:55:3f:56:9e:b7:
9f:cf:7d:f4:fa:13:17:50:b4:1c:ff:dd:38:4b:f3:f3:10:34:
f4:58:47:72:54:03:e4:69:fe:02:a4:6e:a8:9c:f6:ed:a5:a8:
a1:14:1f:29:86:06:5c:f3:bd:b3:58:84:a2:13:4f:e4:c9:0b:
07:96:ac:9d:03:96:3e:4e:0e:ff:ff:82:8a:a3:3e:ac:79:cb:
2e:11:76:71:d9:26:80:a2:bd:d2:7e:31:ac:ab:a9:72:41:06:
b1:aa:64:58:61:0f:b5:f0:97:a5:45:7a:5a:63:f2:76:ff:61:
7f:b7:31:23:8b:3f:b4:4a:bb:fb:8f:3e:00:4f:ee:6c:cf:c4:
de:76:f9:cf:ff:03:00:8c:04:68:51:8b:77:5f:22:2a:eb:48:
5a:86:9d:b9:fa:91:a1:22:59:ac:19:9c:d6:98:6a:fa:72:f5:
aa:72:54:50:37:51:07:25:12:bc:54:f6:07:fb:5f:d4:7e:40:
7e:7e:07:74:72:9c:55:5d:d6:61:9f:d0:ac:cf:3f:99:17:7f:
ff:71:43:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:40:39 2026 by rpki-client