Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: SxU/vVZKoONn7zloiPukWlZR++7X9HKxZLv+VP0UbtI=
Subject key identifier: 8C:CE:FA:1A:C3:61:1C:FB:DC:04:CC:D3:41:BF:E1:60:1A:93:AE:7F
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 01A104DC0FB84DDAB69171676F7A63BEF36B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 1A90
Signing time: Sun 04 Oct 2026 03:01:33 +0000
Manifest this update: Sun 04 Oct 2026 03:01:33 +0000
Manifest next update: Mon 05 Oct 2026 03:01:33 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: i7of8vvBvYTTbnDNHv8Z4YYc2z/U7G2aC5YiOVKWlO0=)
3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 00:44:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:04:dc:0f:b8:4d:da:b6:91:71:67:6f:7a:63:be:f3:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Oct 4 03:01:33 2026 GMT
Not After : Oct 5 03:01:33 2026 GMT
Subject: CN=8ccefa1ac3611cfbdc04ccd341bfe1601a93ae7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:7b:db:d8:07:c3:a8:89:3c:39:eb:3b:c7:c7:
20:85:46:a6:93:14:c1:6f:4c:19:60:12:da:06:e7:
f2:a7:8a:49:62:16:d3:2e:32:d1:c1:be:24:d0:82:
3d:86:8a:03:7f:7a:7d:51:4e:6e:2d:d0:f6:8f:0f:
ff:24:16:01:c5:80:5e:93:90:b5:55:57:ec:d5:bb:
ac:16:c1:7a:72:7a:f9:b7:a5:08:9c:a7:41:dc:ac:
6c:64:5c:c5:e1:cd:31:13:c6:0e:42:13:17:37:ed:
0b:83:e9:fe:c2:b5:d3:5c:a5:ca:bc:3b:78:a7:08:
06:5a:20:19:95:cd:99:86:da:2d:77:49:03:5d:78:
0d:e6:24:8b:fe:65:35:30:88:f8:9c:66:9f:2a:19:
5f:42:02:0d:81:97:94:36:d2:ea:46:3e:1b:fe:4b:
37:79:71:33:53:b5:48:57:e3:0a:1d:79:b0:ef:fc:
36:b3:0c:a8:3a:db:b7:26:09:5f:83:94:63:13:a2:
9a:69:18:68:c6:16:70:47:63:97:01:5b:e7:50:d4:
f7:8d:6e:17:43:be:c0:1c:5a:38:4e:b9:be:2a:c0:
47:eb:b7:44:80:54:98:86:26:6c:14:32:0c:ce:82:
b0:da:8b:97:16:69:27:3c:66:bc:8c:d1:46:a7:c8:
9b:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:CE:FA:1A:C3:61:1C:FB:DC:04:CC:D3:41:BF:E1:60:1A:93:AE:7F
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:05:e6:f3:b5:75:e2:1c:db:24:cf:dc:c7:3d:af:93:ba:78:
d3:e0:8e:80:5e:fd:7a:ce:de:aa:e1:af:a7:4c:6b:9e:e3:be:
40:2f:6e:8b:b3:f3:ed:35:93:b4:6a:fe:a1:84:f9:17:2a:86:
b0:aa:7d:93:09:38:05:2c:01:30:2d:57:74:d4:bd:e6:ec:e6:
6e:37:41:1a:14:6d:9a:93:92:48:d4:2c:b0:96:e7:6c:c1:33:
f6:e9:96:ee:63:c0:c3:59:80:36:4f:87:1d:15:97:2d:f3:85:
e1:95:79:a6:da:1a:d3:84:f6:17:bf:32:32:e2:7b:02:a3:d5:
7d:00:c2:22:11:69:bb:11:f0:ee:53:ea:55:2a:f6:a6:dd:db:
9a:15:57:98:07:c2:d6:ca:0f:a4:30:05:a1:ba:f6:91:33:e0:
15:40:7b:a1:3f:7e:8d:2c:4e:a5:8b:16:c4:78:f2:b5:f5:6c:
f6:25:21:c7:ad:06:79:f5:87:22:ef:ec:29:89:0b:91:19:5c:
49:9f:7f:3a:46:69:39:f5:6b:e7:07:00:84:68:55:93:20:08:
83:2b:cb:71:83:3c:ec:9e:b2:71:89:f9:64:01:e9:6f:1f:86:
5e:90:75:fe:38:b1:a2:f9:bb:6a:9e:33:c5:d4:be:e2:33:0b:
6b:f6:fd:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 11:36:59 2026 by rpki-client