Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: dwmpYjIgUD4cPprwLqpZY557aOaPeqRkYJnyRSTttl0=
Subject key identifier: 13:57:DE:E3:86:80:5C:0A:6C:E9:F2:9A:F6:02:A2:77:1E:24:D2:BE
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019D25BA1B33B5E4D4CED42F1962D3808680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1887
Signing time: Wed 25 Mar 2026 16:00:46 +0000
Manifest this update: Wed 25 Mar 2026 16:00:46 +0000
Manifest next update: Thu 26 Mar 2026 16:00:46 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: QtyZI2TUIskAmCFo7HIhfYSNQ+NgoIniFttpEwIiPsY=)
2: VTXP2YiwzSV9vXA0rbSUdcqK9nU.roa (hash: 6PLpiz3quSPpSuhj5ThEN3LZ+VImxKC5MTupvkiSL40=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:ba:1b:33:b5:e4:d4:ce:d4:2f:19:62:d3:80:86:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Mar 25 16:00:46 2026 GMT
Not After : Mar 26 16:00:46 2026 GMT
Subject: CN=1357dee386805c0a6ce9f29af602a2771e24d2be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:c9:d7:98:43:9d:44:95:5d:ce:29:66:5c:27:
57:95:0f:86:d5:90:87:e9:1a:09:76:6c:2e:0b:d3:
93:9a:0b:d7:17:6b:f7:4f:05:6c:d4:fb:d0:fe:93:
91:a5:25:8b:8c:3a:f3:80:f2:af:61:62:64:90:65:
67:b8:51:bf:8a:6c:fd:1e:48:3c:76:b3:ec:bf:79:
4a:93:63:15:3c:31:48:27:66:c4:a2:cd:00:cb:70:
32:91:b4:e3:95:85:5c:6f:06:4a:33:ec:21:5d:49:
3c:7b:b0:85:b9:e8:40:02:2c:da:0f:61:3d:1d:07:
96:ae:a2:07:a1:32:8f:ea:4f:f1:4b:ed:89:77:fd:
9d:d8:34:b4:f7:00:4b:ee:45:59:f2:1e:dd:4c:46:
40:0d:35:97:88:3a:a8:05:5d:49:60:fc:56:fe:ba:
cb:dc:ea:25:81:9b:87:87:70:42:1e:5c:14:64:a5:
0c:f9:e6:06:7b:ab:91:64:e8:d8:fe:24:ec:1c:c9:
b1:07:38:b2:b1:b7:8f:a7:ed:c2:92:94:e3:4a:b8:
cc:91:56:77:0c:6e:4a:66:8d:9f:3a:b7:d4:67:b8:
88:7f:13:67:94:ac:1c:f5:68:20:b4:e8:4f:a5:fd:
2a:3f:86:b7:d0:30:e5:a6:98:45:09:1f:7b:d8:1a:
0e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:57:DE:E3:86:80:5C:0A:6C:E9:F2:9A:F6:02:A2:77:1E:24:D2:BE
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:20:6a:90:cf:e9:a8:47:68:20:09:08:ad:69:7e:ee:1e:97:
16:51:5b:16:cb:6a:29:e0:f8:67:fa:a9:8c:3f:07:ff:2f:e8:
3c:e3:07:77:90:91:d9:29:3e:59:2a:81:41:4e:48:10:3c:07:
8d:c6:f2:c9:88:5e:7c:6b:e9:fd:d6:2e:d7:58:55:30:83:1a:
a6:ca:61:98:d3:0c:9e:58:51:7d:54:31:61:54:fd:92:d2:ad:
d1:f8:2c:fb:3d:c9:51:08:10:31:80:ec:c3:f7:9c:db:39:12:
61:c7:84:43:d8:54:29:c8:63:0b:f9:e3:25:f6:f7:7f:9e:1b:
f6:0c:7a:e2:ec:58:c6:15:80:a7:64:de:92:d4:49:7f:69:83:
8c:a4:f9:56:9f:da:46:36:38:cc:7f:eb:a1:18:5d:ff:29:18:
2e:f0:ab:18:9d:f0:bd:86:c3:4c:70:09:95:dc:2c:23:80:e7:
69:7d:e1:71:29:13:19:60:c5:20:a1:bc:cd:55:0d:fa:a7:0f:
f2:70:08:9d:bd:10:f5:63:f5:f4:fd:14:82:8e:a7:96:e9:9b:
5c:fe:57:4c:ed:d0:0e:5b:b9:f2:12:3f:b0:dc:79:8e:4b:18:
20:27:8e:ff:d9:6a:ff:52:50:00:91:3c:e9:9a:c8:86:33:56:
2e:57:ea:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 23:24:08 2026 by rpki-client