Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: kyoneXbnB0+Wlay+I8nVFzxm8uLma7rTLiGw+Utio7A=
Subject key identifier: A4:95:C5:4B:34:BC:10:F6:7C:C9:57:92:59:C6:97:F9:1F:14:50:10
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019EB87CECA2BB70D32641480796D1F769F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1958
Signing time: Thu 11 Jun 2026 21:00:55 +0000
Manifest this update: Thu 11 Jun 2026 21:00:55 +0000
Manifest next update: Fri 12 Jun 2026 21:00:55 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: icJQl9ZnHcZWrWEM1kPTQGTOJvTonwsbSaQuKfPke34=)
2: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
3: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b8:7c:ec:a2:bb:70:d3:26:41:48:07:96:d1:f7:69:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Jun 11 21:00:55 2026 GMT
Not After : Jun 12 21:00:55 2026 GMT
Subject: CN=a495c54b34bc10f67cc9579259c697f91f145010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:ce:1f:1b:e7:41:45:ee:b1:07:f3:1b:8c:b8:
9d:44:87:09:5f:53:a5:ee:10:89:81:59:bc:74:47:
7d:8f:6e:f1:e1:b3:6a:94:15:cb:49:51:18:ef:43:
3e:fb:3f:a6:4f:be:b3:4e:3c:c1:cd:69:90:0d:fb:
41:05:29:84:18:4f:c4:32:f7:78:83:07:cd:fe:7d:
b4:0c:bb:d4:39:71:3b:bf:dd:e6:1a:ff:3c:14:ce:
3c:20:ae:16:8c:e7:84:bf:d8:7d:6b:fe:63:8f:a7:
13:56:e9:0f:47:9c:88:9a:16:db:d2:ad:d1:6d:d0:
5e:8f:8b:16:f9:78:17:74:b1:63:cb:81:49:79:86:
44:9d:18:fa:ea:4c:a0:2e:f4:62:4d:eb:53:77:6c:
62:88:09:92:fd:3b:a9:a1:56:d7:e2:fb:9b:36:4b:
6c:b1:45:e9:19:b8:67:5f:7a:99:71:a0:e9:f0:98:
10:ae:2b:a0:6a:70:0d:64:9d:d6:11:74:65:08:15:
56:a3:8e:a7:bc:5c:ec:5c:e0:2a:50:a5:aa:6b:21:
22:9b:1d:71:97:b9:cb:a2:a7:5c:b4:fb:9c:2b:1b:
4d:09:1d:72:e2:f9:09:ee:99:6d:4e:fb:39:b2:57:
07:14:20:4d:ca:80:c5:33:19:2c:a6:58:2a:bb:08:
37:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:95:C5:4B:34:BC:10:F6:7C:C9:57:92:59:C6:97:F9:1F:14:50:10
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:08:05:24:c8:72:06:2c:e9:7b:ee:84:71:d4:24:da:ac:b8:
3e:c2:d1:aa:ba:a8:3a:3c:59:9b:29:a8:77:cd:2d:9f:bc:94:
6a:07:54:b4:fd:6b:0f:b0:bb:2d:3a:e5:b1:d2:91:a0:95:e8:
53:3a:60:8c:e4:cc:50:d3:b4:05:1b:7d:56:81:52:7e:8c:3c:
e6:59:17:10:47:48:28:dd:11:ca:85:9a:b0:34:79:83:35:1a:
26:b5:2d:98:89:68:60:04:bd:07:1c:8e:54:db:b1:96:b9:7a:
f7:d1:5d:69:78:d8:3d:2c:3a:66:b7:7f:e2:ec:58:10:16:e0:
95:58:1b:64:66:4e:9f:e5:ac:63:62:57:56:3f:75:8a:df:b5:
85:f3:4d:6e:f4:5b:6f:5b:d2:8b:0d:e7:70:09:ee:f2:f3:30:
5e:4c:62:55:fc:31:19:ba:1f:74:5b:5e:cf:8f:17:c1:5f:75:
a2:1a:93:00:aa:58:7a:53:26:69:d8:9a:67:f2:d9:14:0f:54:
12:78:8c:53:2f:d3:ae:eb:17:69:86:67:b0:c0:4e:47:71:20:
49:51:b4:88:f1:89:ed:91:dc:cb:5f:47:64:ee:c7:86:e4:98:
b9:17:aa:b8:3a:60:6f:f8:72:40:81:08:5a:2a:0d:1f:4a:c4:
b9:40:ec:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 04:44:59 2026 by rpki-client