Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: t86SrAsKENSU3+NcI/fBiVmIzMlp/8lYZYzbuGL14Lo=
Subject key identifier: C1:97:33:65:AD:B4:63:16:01:62:7E:14:A0:A6:66:98:9E:D4:EE:BF
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019F940025EB84B24E87D0B58FCE2B6212F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 19D1
Signing time: Fri 24 Jul 2026 12:01:05 +0000
Manifest this update: Fri 24 Jul 2026 12:01:05 +0000
Manifest next update: Sat 25 Jul 2026 12:01:05 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: HkkucaWx7QdednkxnwKjBjnWapRAy2MkNw4DJgQVMEw=)
3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 12:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:00:25:eb:84:b2:4e:87:d0:b5:8f:ce:2b:62:12:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jul 24 12:01:05 2026 GMT
Not After : Jul 25 12:01:05 2026 GMT
Subject: CN=c1973365adb4631601627e14a0a666989ed4eebf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:05:f7:58:b6:84:65:f2:99:2f:01:03:21:92:
e3:d5:f8:68:79:31:a5:06:30:aa:d3:5a:e2:d2:5b:
a8:29:96:65:8b:1a:85:95:e8:c0:22:4d:dc:75:d5:
19:33:77:80:09:ac:45:74:da:00:5b:d0:4d:bc:42:
d6:0a:fa:af:54:31:6c:df:ff:f3:88:60:10:10:54:
f7:30:ed:70:1f:67:f5:db:97:8d:7c:82:99:50:33:
eb:e6:38:12:05:c2:60:c3:82:bf:cf:02:21:e3:cd:
4f:cb:2c:93:94:aa:81:36:71:e8:c7:0a:6a:97:f5:
8b:01:3a:db:5a:11:e8:67:83:19:e1:7d:20:94:5d:
d8:03:a0:3a:95:d5:0c:ef:4c:ce:58:0a:3d:72:a3:
5e:87:90:27:62:86:90:60:49:48:1c:20:bd:d2:3d:
1b:49:82:1f:25:d8:7f:5e:95:23:8c:72:b9:8e:cc:
6c:e0:8c:df:14:cb:51:ac:be:5e:27:fb:58:69:b3:
15:94:df:db:ff:f7:cd:e1:5e:4b:45:c7:e0:81:ee:
f6:e0:64:f2:92:c0:86:25:7e:21:ec:33:d7:8f:e8:
9f:d3:00:73:78:8f:02:fe:60:19:95:9a:3c:d2:c6:
aa:fd:19:83:dd:2f:98:d4:4c:f0:10:f3:8c:7f:4c:
6e:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:97:33:65:AD:B4:63:16:01:62:7E:14:A0:A6:66:98:9E:D4:EE:BF
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c7:8e:1c:28:3d:8d:91:4d:e2:e5:af:e3:46:42:7d:ee:6d:a3:
c9:4f:76:12:b8:7a:f4:6a:d6:77:fb:08:41:d9:fd:f2:42:79:
9e:a9:05:01:28:75:72:48:d6:1a:08:8f:6c:0e:56:38:69:4a:
87:00:84:11:99:32:4e:3a:f9:8b:e1:98:09:12:25:87:a1:a9:
1b:9d:7a:ea:56:72:3d:58:61:5d:08:06:89:31:75:12:a1:87:
64:f2:0d:64:c7:f8:9e:8f:be:0c:24:c4:29:0c:30:f0:80:d8:
da:35:2f:be:79:04:56:02:96:27:a5:41:6e:7f:a6:ec:c5:d2:
e0:fb:94:93:36:3f:fe:f1:c3:01:8b:76:58:6c:34:47:a1:ac:
5a:fe:51:ef:5e:e5:fc:4f:87:42:55:9f:21:fe:41:05:ae:2f:
17:4d:64:ea:27:f0:f9:f2:4e:69:08:0d:19:11:d1:23:61:a5:
30:95:28:e2:93:c5:ce:94:4b:dc:37:d4:e9:7c:11:cc:fb:e2:
8c:f4:07:7c:e3:5d:53:a0:36:fc:a6:44:e2:cf:be:97:90:f1:
16:29:b7:d9:03:d6:85:df:14:2d:eb:c7:2e:d6:d7:b9:aa:11:
e8:4f:7e:93:d8:1f:bb:21:9f:69:d2:ed:3a:be:51:c5:35:7b:
33:34:cc:1a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+UACXrhLJOh9C1j84rYhL5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz
NmZmMTAwHhcNMjYwNzI0MTIwMTA1WhcNMjYwNzI1MTIwMTA1WjAzMTEwLwYDVQQD
EyhjMTk3MzM2NWFkYjQ2MzE2MDE2MjdlMTRhMGE2NjY5ODllZDRlZWJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gX3WLaEZfKZLwEDIZLj1fhoeTGl
BjCq01ri0luoKZZlixqFlejAIk3cddUZM3eACaxFdNoAW9BNvELWCvqvVDFs3//z
iGAQEFT3MO1wH2f125eNfIKZUDPr5jgSBcJgw4K/zwIh481PyyyTlKqBNnHoxwpq
l/WLATrbWhHoZ4MZ4X0glF3YA6A6ldUM70zOWAo9cqNeh5AnYoaQYElIHCC90j0b
SYIfJdh/XpUjjHK5jsxs4IzfFMtRrL5eJ/tYabMVlN/b//fN4V5LRcfgge724GTy
ksCGJX4h7DPXj+if0wBzeI8C/mAZlZo80saq/RmD3S+Y1EzwEPOMf0xu8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMGXM2WttGMWAWJ+FKCmZpie1O6/MB8GA1UdIwQY
MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt
YjUzYjY0Y2YwZDk1LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1
LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAx44cKD2N
kU3i5a/jRkJ97m2jyU92Erh69GrWd/sIQdn98kJ5nqkFASh1ckjWGgiPbA5WOGlK
hwCEEZkyTjr5i+GYCRIlh6GpG5166lZyPVhhXQgGiTF1EqGHZPINZMf4no++DCTE
KQww8IDY2jUvvnkEVgKWJ6VBbn+m7MXS4PuUkzY//vHDAYt2WGw0R6GsWv5R717l
/E+HQlWfIf5BBa4vF01k6ifw+fJOaQgNGRHRI2GlMJUo4pPFzpRL3DfU6XwRzPvi
jPQHfONdU6A2/KZE4s++l5DxFim32QPWhd8ULevHLtbXuaoR6E9+k9gfuyGfadLt
Or5RxTV7MzTMGg==
-----END CERTIFICATE-----
Generated at Fri Jul 24 21:30:00 2026 by rpki-client