Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: rckQ7UM8wMRCM1/xSy82sO8XZxmO/SIajF75Yd5+JFY=
Subject key identifier: 9A:30:B4:95:60:40:11:3B:A0:2E:D4:89:88:AE:5C:A2:5A:C2:60:05
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01A0D64B72604FDDC81095C02064886B40D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1A71
Signing time: Fri 25 Sep 2026 02:01:03 +0000
Manifest this update: Fri 25 Sep 2026 02:01:03 +0000
Manifest next update: Sat 26 Sep 2026 02:01:03 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: KOv0QGY3mTWovUg7ZbPE4Yswc3n+lpPc5yjO3u9fQI0=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d6:4b:72:60:4f:dd:c8:10:95:c0:20:64:88:6b:40:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Sep 25 02:01:03 2026 GMT
Not After : Sep 26 02:01:03 2026 GMT
Subject: CN=9a30b4956040113ba02ed48988ae5ca25ac26005
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:f8:0c:89:fd:bc:88:30:c9:3c:5e:3f:0e:01:
df:4c:73:e3:5a:6d:3c:f1:bc:c4:ee:d8:cf:51:fb:
4e:04:8a:5d:ce:38:22:90:4e:68:07:2d:d4:cc:54:
4b:fc:fe:00:5e:3e:a0:12:57:3f:26:b4:74:be:f1:
9d:a3:5b:bc:a4:8d:3f:5f:a8:21:4a:71:f1:4d:e4:
92:9e:cd:1e:f6:ea:46:68:a6:14:e6:11:6c:c3:fd:
c4:8b:9f:6f:d9:86:ec:b8:a7:2c:62:bb:8e:f0:09:
e9:37:27:f3:69:39:11:1d:00:64:80:60:b7:de:b3:
e5:50:9c:3b:e4:90:6d:1a:85:6a:c9:ce:91:fd:3c:
ef:d3:fa:18:67:26:ea:a5:07:7a:aa:66:0f:2a:e6:
3d:79:c0:2d:7d:a0:6c:35:a8:a5:c1:39:d2:8e:d3:
ea:1b:2d:68:82:bd:25:3c:ad:7b:da:73:88:74:98:
de:50:82:5f:11:0b:6c:f7:7f:94:ef:39:20:58:10:
ce:03:3b:45:33:74:72:6e:76:20:71:c5:1c:0d:55:
cd:c1:81:6a:14:a1:eb:e2:08:3b:68:92:a5:b1:e1:
87:c9:29:35:8d:c1:56:5f:22:40:1e:63:b5:2f:1c:
a5:65:2e:af:35:0c:c0:75:f5:10:29:4a:ea:4c:9c:
ea:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:30:B4:95:60:40:11:3B:A0:2E:D4:89:88:AE:5C:A2:5A:C2:60:05
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:8a:7f:80:1d:3a:21:b5:e9:e8:e5:6b:93:eb:d3:2a:a6:51:
a6:db:98:1c:ee:c8:56:fc:f4:1c:a9:4a:e5:e1:96:1a:75:79:
46:40:85:60:3a:80:9b:88:a8:a0:66:c0:60:0a:73:18:38:74:
86:2a:82:34:24:62:4c:63:d6:24:61:d1:21:20:0d:be:37:3f:
ca:3b:b0:15:94:2d:f7:93:75:db:0e:2d:b1:36:b5:ad:6a:60:
7e:43:46:87:b9:8c:fa:57:cd:b5:92:e9:b5:02:8c:30:b0:04:
45:e1:2f:e0:92:82:2b:43:73:30:f3:04:97:93:2c:45:c5:1f:
df:12:89:6b:99:02:c6:66:93:0f:7f:cc:4f:dc:04:cc:a6:4e:
71:59:73:95:f2:38:cf:5e:4e:fd:d8:81:f7:f4:7a:4c:1e:7d:
05:90:1c:1c:57:40:70:5f:e0:ca:81:ae:e5:c1:10:62:62:d0:
71:2f:a5:38:cb:4b:d5:15:15:11:7c:6a:b2:2c:56:8e:e6:1e:
bb:c0:6e:01:2a:6e:22:a6:74:4b:b8:bc:40:95:28:c7:f5:46:
42:a0:cd:ff:b1:34:03:83:5e:d4:df:c6:0c:8e:e3:d7:f5:04:
61:5f:2e:0b:b9:54:67:e1:d3:c6:a7:d7:b6:f3:7e:5e:0c:d3:
a4:96:a8:eb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDWS3JgT93IEJXAIGSIa0DXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ODkxYTQ3MjRhYWM2YjVkYTAwMDUzMjlhYTNhNWFiZTg3
Nzc5ZDYwHhcNMjYwOTI1MDIwMTAzWhcNMjYwOTI2MDIwMTAzWjAzMTEwLwYDVQQD
Eyg5YTMwYjQ5NTYwNDAxMTNiYTAyZWQ0ODk4OGFlNWNhMjVhYzI2MDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkvgMif28iDDJPF4/DgHfTHPjWm08
8bzE7tjPUftOBIpdzjgikE5oBy3UzFRL/P4AXj6gElc/JrR0vvGdo1u8pI0/X6gh
SnHxTeSSns0e9upGaKYU5hFsw/3Ei59v2YbsuKcsYruO8AnpNyfzaTkRHQBkgGC3
3rPlUJw75JBtGoVqyc6R/Tzv0/oYZybqpQd6qmYPKuY9ecAtfaBsNailwTnSjtPq
Gy1ogr0lPK172nOIdJjeUIJfEQts93+U7zkgWBDOAztFM3RybnYgccUcDVXNwYFq
FKHr4gg7aJKlseGHySk1jcFWXyJAHmO1LxylZS6vNQzAdfUQKUrqTJzqXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJowtJVgQBE7oC7UiYiuXKJawmAFMB8GA1UdIwQY
MBaAFDeJGkckqsa12gAFMpqjpavod3nWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUt
NTI0YzIxMDljYjA1LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMTI4ZTAtMDBhNi00Njg5LTk1YmUtNTI0YzIxMDljYjA1
LzEvTjRrYVJ5U3F4clhhQUFVeW1xT2xxLWgzZWRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArIp/gB06
IbXp6OVrk+vTKqZRptuYHO7IVvz0HKlK5eGWGnV5RkCFYDqAm4iooGbAYApzGDh0
hiqCNCRiTGPWJGHRISANvjc/yjuwFZQt95N12w4tsTa1rWpgfkNGh7mM+lfNtZLp
tQKMMLAEReEv4JKCK0NzMPMEl5MsRcUf3xKJa5kCxmaTD3/MT9wEzKZOcVlzlfI4
z15O/diB9/R6TB59BZAcHFdAcF/gyoGu5cEQYmLQcS+lOMtL1RUVEXxqsixWjuYe
u8BuASpuIqZ0S7i8QJUox/VGQqDN/7E0A4Ne1N/GDI7j1/UEYV8uC7lUZ+HTxqfX
tvN+XgzTpJao6w==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:55:16 2026 by rpki-client