Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: 6QTnTkHAs0zmeVq9NdI29gdsWyHX8W9qcoW0lpJIeFw=
Subject key identifier: 2B:65:C2:FE:73:B5:92:55:91:9A:C9:4C:88:BE:F4:02:C3:E5:8C:03
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019FA03ABC416EDDDB7C59956EE05764E409
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1929
Signing time: Sun 26 Jul 2026 21:00:31 +0000
Manifest this update: Sun 26 Jul 2026 21:00:31 +0000
Manifest next update: Mon 27 Jul 2026 21:00:31 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: +9Ymgbtv2UZPC8AHMgXRg3ttmJ81mPsxSYLlnbmzlP8=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a0:3a:bc:41:6e:dd:db:7c:59:95:6e:e0:57:64:e4:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jul 26 21:00:31 2026 GMT
Not After : Jul 27 21:00:31 2026 GMT
Subject: CN=2b65c2fe73b59255919ac94c88bef402c3e58c03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7e:06:d6:94:93:88:4e:d1:84:04:fa:a1:10:
fc:9f:1e:71:3c:cf:41:c5:fa:45:69:c6:d1:7a:96:
08:39:35:d4:a5:c0:f0:b2:4d:f3:91:2b:d1:34:06:
a1:b7:4a:3b:a9:e2:2e:3e:f9:bd:7f:09:d8:a8:8e:
02:34:24:60:c9:c3:da:65:d0:fa:b9:81:b8:d3:58:
08:bb:f6:8f:06:a0:c3:5c:38:6c:dc:e9:71:8d:f9:
62:c2:db:fb:ea:95:40:d7:59:a7:bb:23:01:6c:4a:
35:3c:e1:68:ce:11:ca:cf:bd:d8:92:3b:41:57:94:
8e:ab:ed:1e:01:88:d8:8e:4e:ff:ed:51:e1:20:f7:
51:99:6d:7a:52:17:88:1d:e6:36:f7:fc:53:47:be:
a0:40:fa:0d:25:c0:fb:8b:99:ec:68:08:b7:17:d3:
43:87:6c:c6:5d:8d:d8:50:9d:a4:38:7f:42:ae:d0:
6d:e4:c7:0d:32:70:03:44:3d:6e:d8:25:af:55:a1:
e9:36:5a:7f:2b:12:48:bd:6e:09:a2:a9:f6:b7:9a:
2d:69:5a:15:83:9b:d9:c7:cb:9e:11:33:4c:6b:d6:
bb:4b:a9:44:48:bd:86:b5:9d:70:a3:0a:05:5b:98:
c8:f9:46:90:d2:b4:2f:8a:42:ed:44:a8:84:af:cf:
c5:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:65:C2:FE:73:B5:92:55:91:9A:C9:4C:88:BE:F4:02:C3:E5:8C:03
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:43:15:bc:03:84:f1:85:c6:59:e7:cc:2b:45:42:be:d3:47:
2b:f7:14:ea:48:34:77:0c:0c:12:fe:16:57:73:b1:58:c0:6c:
0b:53:f0:c5:b2:2f:01:21:0f:29:88:05:66:6e:82:0b:86:54:
25:72:b7:a7:99:04:38:04:fd:b2:f2:0b:3a:91:87:da:72:27:
b0:3a:1f:9a:3c:46:0b:1b:05:a3:24:f3:94:87:f9:6f:8b:11:
42:e5:a3:b4:6f:a2:9d:a6:51:8c:8e:e9:01:78:15:58:14:fb:
3f:c9:86:7a:b6:3e:14:1c:32:19:a3:9d:25:cd:43:15:3b:d2:
46:65:d6:d3:4c:36:cd:60:65:3c:ec:84:4b:2f:ea:d2:52:bf:
98:87:e6:5b:1d:c5:f0:0e:f8:56:30:83:cc:2e:fa:d2:29:33:
04:e6:43:d0:03:f6:57:85:7b:78:d4:bd:2d:fd:44:9f:f2:bd:
e4:f6:37:ef:79:f9:d5:2e:5e:6b:10:6f:e2:2d:b5:fb:f0:b7:
4d:04:ad:cc:bb:53:01:b0:be:f3:52:1b:05:66:bb:18:67:e5:
ee:71:fa:6a:2f:0e:cd:2b:57:6a:40:89:f8:d5:ca:1c:ab:ba:
eb:97:93:e9:14:37:63:32:ac:12:4e:49:b4:fe:98:e2:f0:b3:
1f:69:78:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 06:49:07 2026 by rpki-client