Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: LzvsRivwHDpJ0CONdWsV+AHW2mbbx+CQcw34E0+Iq6c=
Subject key identifier: B6:C6:34:3B:DC:9A:50:5F:9C:10:8B:8E:B9:2C:56:B9:B0:79:13:80
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019CE711D751707F438E4836FC12E654F64E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 17C0
Signing time: Fri 13 Mar 2026 12:00:31 +0000
Manifest this update: Fri 13 Mar 2026 12:00:31 +0000
Manifest next update: Sat 14 Mar 2026 12:00:31 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: Zoun4aZuib7448oYYemXeVimg2PGdDSKMx1xPoMBMB4=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:11:d7:51:70:7f:43:8e:48:36:fc:12:e6:54:f6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Mar 13 12:00:31 2026 GMT
Not After : Mar 14 12:00:31 2026 GMT
Subject: CN=b6c6343bdc9a505f9c108b8eb92c56b9b0791380
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:fe:80:fd:8b:67:ed:8c:ce:19:93:94:85:c5:
38:7b:8f:45:c3:0e:e3:09:b6:64:3f:1b:9c:98:b7:
ef:c8:e1:7c:3a:cd:e6:77:06:7b:5a:fd:f6:75:4d:
e6:0b:8d:60:19:c8:a6:b5:13:48:ce:29:85:98:ae:
97:12:00:7b:ba:e4:22:0a:d3:e7:e9:18:de:d1:90:
b3:bb:a0:ba:8e:02:89:06:a3:35:60:db:83:05:91:
aa:55:cf:fb:86:dd:0c:ce:d5:e4:11:48:47:a8:d2:
51:8f:62:f9:a3:d5:1f:73:37:15:bd:49:ea:07:67:
85:1c:4e:5a:d3:cd:5f:d3:2a:bc:1e:46:11:c0:11:
a2:e1:25:3c:3f:63:9f:90:e6:ad:ac:b0:62:d9:25:
ad:17:ba:2c:e5:5e:7a:e4:f0:a7:92:28:bc:54:9f:
6e:d6:a8:e8:2b:28:35:0a:a6:4f:0c:4e:61:25:ff:
c0:6c:7a:77:1c:91:d4:a0:49:69:02:de:1c:49:8d:
22:51:e7:f8:a3:91:d6:d3:f6:b5:0b:d1:12:f4:81:
b9:2f:c7:9d:5a:f1:56:b0:ce:ce:ac:db:d7:b1:00:
d8:c2:a3:16:22:67:43:f6:6a:74:fa:3c:a2:f1:d1:
db:c6:54:33:b4:42:7e:60:40:a5:df:47:37:a1:9d:
87:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:C6:34:3B:DC:9A:50:5F:9C:10:8B:8E:B9:2C:56:B9:B0:79:13:80
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:c2:ef:53:71:00:5b:b2:ac:aa:bd:1e:a6:72:18:b3:3b:95:
5b:8d:63:bd:ca:0c:8d:43:62:aa:8c:88:a9:e8:29:34:bd:52:
e8:32:8c:41:3f:b1:45:ab:f6:3c:29:a0:9c:24:77:85:1e:36:
8c:b9:3b:ec:9a:6c:d5:4c:7e:a0:e1:f7:e3:49:8e:d6:3a:4e:
d8:1a:a0:6c:80:9f:a6:38:e3:ad:5d:9d:cf:3c:1d:f9:d3:7a:
a8:b2:2e:ce:b3:97:3e:d5:36:d3:67:42:26:04:e9:f6:6b:90:
81:0c:c2:24:92:a1:dc:4f:fa:f2:19:d8:1c:d0:a2:2a:27:30:
49:58:18:59:7a:fb:43:47:06:77:ff:f5:36:7c:75:b9:d3:02:
d3:e9:c0:fb:5e:4b:f0:2b:d9:4e:46:2e:d8:49:2d:c0:21:94:
bf:7e:39:f0:45:5b:3a:81:db:87:19:d0:97:e2:7b:7a:aa:22:
df:f8:f7:a0:5e:ab:3f:9f:59:44:ad:9a:a2:ff:a2:fb:b0:c8:
cf:ec:d8:e7:38:c8:6e:1f:4e:f3:65:9a:3f:15:7a:7b:17:37:
0b:a7:71:45:1e:dd:98:70:07:ea:7c:9b:c2:77:17:15:e7:de:
c7:b8:40:85:f4:67:b3:a5:3d:5f:85:65:d4:50:5c:2c:77:18:
ca:7e:a3:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 17:59:43 2026 by rpki-client