Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: VfUxLOA1bpdI5AnYD7Aa38PQf3HCxUfQ+vxUJUdduek=
Subject key identifier: 19:94:31:9D:92:33:20:D4:85:7F:A1:E6:A9:2D:5A:A6:18:38:C5:DD
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 01A17B4D36CC76BAEA314DB1AACE03C6FD20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1A1F
Signing time: Tue 27 Oct 2026 03:00:20 +0000
Manifest this update: Tue 27 Oct 2026 03:00:20 +0000
Manifest next update: Wed 28 Oct 2026 03:00:20 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: FSXhA4U+5LMHZRIJdOMjdaLFA6O2cJQLQKFb/TmYOno=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7b:4d:36:cc:76:ba:ea:31:4d:b1:aa:ce:03:c6:fd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Oct 27 03:00:20 2026 GMT
Not After : Oct 28 03:00:20 2026 GMT
Subject: CN=1994319d923320d4857fa1e6a92d5aa61838c5dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d3:53:00:df:d3:e4:bb:1e:27:0f:2a:29:d3:
14:50:0b:f5:0e:42:87:ae:38:17:20:9b:4c:8c:9b:
87:fe:d7:1f:bb:5a:37:8d:ca:9e:ff:09:4f:4f:d8:
2c:a9:1d:77:53:24:8e:da:55:11:f9:09:27:d1:ab:
c0:1f:5d:72:98:74:9c:07:59:65:8c:67:d3:bc:4d:
20:60:85:17:b3:cf:44:a3:7b:d2:77:93:ad:5d:06:
dd:83:58:d5:6e:91:e6:d3:ac:8d:63:0f:dc:c1:75:
87:8a:e0:45:50:02:8b:dd:90:a4:c2:c4:3a:09:40:
4c:81:41:fc:9d:b5:23:3a:18:78:ed:00:73:f7:ab:
dc:cc:52:0a:1f:9f:fa:94:fb:54:eb:f9:ee:c6:16:
60:80:4f:13:44:02:44:8e:27:ee:96:f5:8e:57:fa:
4e:a3:45:56:e1:42:8d:8b:98:87:26:d7:da:90:4a:
f7:0d:65:67:cf:3b:06:bb:15:4f:59:f0:be:5a:2c:
ad:98:71:0e:2d:39:91:b2:3e:52:db:60:98:0c:a2:
5f:86:12:d5:55:ad:5f:55:4c:63:c6:96:5e:f2:52:
39:0c:40:d1:75:37:41:97:42:df:82:77:7c:86:3d:
73:c1:39:33:d4:af:f1:a4:9d:bc:cd:b5:15:c1:ad:
e9:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:94:31:9D:92:33:20:D4:85:7F:A1:E6:A9:2D:5A:A6:18:38:C5:DD
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:aa:ae:4a:92:40:5f:9b:1d:e4:b9:6a:3f:43:3d:31:e7:6d:
d9:21:ff:4f:5f:1a:90:f3:89:28:f4:9d:e6:61:66:f6:2c:9b:
cf:39:a3:a2:71:15:07:44:aa:f1:76:29:f4:04:94:bc:ac:d1:
ff:31:ba:92:58:07:4c:67:50:3b:bd:1e:37:05:07:98:c5:e3:
d7:8c:79:b4:47:79:26:35:4a:fd:a0:e0:65:0c:64:77:aa:ab:
fb:6d:38:7b:bb:ed:5e:65:56:63:32:2c:e6:6b:48:9e:79:7e:
4a:47:3d:8b:6a:c9:ed:38:00:9f:d3:ef:3b:a5:cf:4d:94:29:
1b:a7:5e:66:c2:b4:bc:cd:ae:41:72:04:fd:f5:c4:fe:06:bc:
52:a2:6b:81:bd:41:a0:a1:79:6d:0e:2b:97:38:7e:8b:9e:0d:
f5:cc:99:98:44:16:dc:1c:9a:9f:01:57:4e:ef:65:df:0a:f7:
de:fc:f8:77:63:47:26:fe:36:a6:ae:1c:b6:47:62:05:ed:c3:
2b:22:c5:d6:6d:81:d2:e5:3b:a3:a4:ab:0a:28:de:16:9b:b2:
a8:f6:96:17:7c:9b:62:4f:cd:9e:b4:25:d9:88:4e:35:dd:44:
98:80:a6:e8:15:cd:2b:f0:c3:c1:21:2f:92:b1:82:23:3f:ca:
45:95:65:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:14:28 2026 by rpki-client