Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: t6QfS8F6+W3tzcmRtt/arO6b/l32RCQyKsL/OkiVzN4=
Subject key identifier: 76:E1:96:BB:50:62:B1:FF:13:33:3B:D1:AB:FC:1A:A4:32:FB:BF:FA
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019D2C613E9A6B484A00A0DF4837D5D39A96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 1890
Signing time: Thu 26 Mar 2026 23:01:03 +0000
Manifest this update: Thu 26 Mar 2026 23:01:03 +0000
Manifest next update: Fri 27 Mar 2026 23:01:03 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: dd2IUgswE8HDp/a5fxbHN03lA20pEiTkRSoDVDp4Sqs=)
3: UfNHSpJylWqCGj1xnLyUYs3XscQ.roa (hash: HqwmuScnIwcfsRW+0IJvtbF4YsRX/kFXsJcVfa0Phs8=)
4: aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa (hash: CsGiY18ccHhD7M1a8C7IWEu0NTkbcJT9x/p8uOlc+a0=)
5: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
6: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
7: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
8: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:2c:61:3e:9a:6b:48:4a:00:a0:df:48:37:d5:d3:9a:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Mar 26 23:01:03 2026 GMT
Not After : Mar 27 23:01:03 2026 GMT
Subject: CN=76e196bb5062b1ff13333bd1abfc1aa432fbbffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:6f:d8:b1:e6:74:e0:47:f2:61:a3:eb:45:10:
6d:b2:3f:ea:1e:dc:1b:d2:0f:5e:0c:5b:6b:28:1f:
11:e6:21:68:3e:e3:ae:98:e5:5b:12:c6:c2:ed:83:
2d:e3:3c:5a:d4:a6:6a:88:50:7b:31:d8:46:4f:a6:
74:af:71:48:c2:2b:d6:fa:c7:04:0b:00:09:10:3b:
e8:0f:bd:07:f8:44:0f:c7:65:dd:ef:70:3e:c4:87:
6a:e8:f5:ea:39:30:2c:ba:83:b2:85:65:d7:3e:a6:
ef:20:94:31:b6:7c:90:31:e9:3d:d5:09:52:e7:12:
d3:0d:4f:26:e6:71:6c:be:06:43:b9:e6:fa:fc:2c:
01:ff:bd:4b:d9:84:15:47:d1:fb:ad:45:0c:66:9c:
3d:7e:54:ca:37:b6:8d:2e:1b:5a:04:69:10:6d:a2:
1c:bd:75:a3:5d:57:af:26:14:7f:ec:42:1e:c2:b8:
a1:42:4b:f2:d6:73:1e:e1:41:da:5d:f2:da:f6:fc:
c7:17:0c:89:95:56:77:7b:e6:05:7b:bb:28:2d:98:
20:dc:0e:b2:95:7e:0f:00:65:5b:db:f8:3b:47:07:
3c:df:e4:5b:5c:79:cc:7f:b6:ba:7f:21:6f:93:30:
39:67:e0:b2:f0:4c:72:86:1f:5e:f6:26:ec:97:bb:
b2:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:E1:96:BB:50:62:B1:FF:13:33:3B:D1:AB:FC:1A:A4:32:FB:BF:FA
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:74:ef:36:e8:14:fb:12:5a:e0:90:b8:ff:5c:de:ec:a6:d9:
fa:d5:d5:dc:32:73:9e:70:04:53:69:e8:fb:51:62:17:78:44:
1d:4f:d2:fd:bd:55:c1:33:60:a3:9c:cc:b8:3a:fa:17:fa:d0:
28:6d:9f:d6:98:c0:8e:e2:72:65:ee:10:b6:84:76:a0:ea:ce:
64:68:e7:04:73:e8:c1:b7:43:94:d2:0f:ae:cd:6e:3f:e5:d0:
48:e0:31:b5:a8:cf:64:1f:e9:db:fb:11:5d:56:2e:6f:cf:b5:
cc:e5:90:e4:65:82:49:2e:bf:18:0b:2b:29:95:79:9f:74:b8:
f7:b8:e4:9c:93:29:6b:d4:cf:11:3b:94:75:d3:64:18:29:68:
c9:f4:94:92:f0:f4:a0:8f:ca:e4:c1:dc:fb:fa:87:13:49:a2:
b1:5b:49:62:f5:00:d5:a0:00:c7:8f:c5:29:2a:d1:a0:94:0e:
fa:ae:a7:ca:8e:ff:3a:fc:77:be:e6:0b:90:a4:33:fe:b4:cf:
88:91:f1:c2:d8:d4:76:d5:6f:ad:cf:99:ac:30:2c:4e:7a:10:
ac:81:19:ec:87:7b:66:29:06:9e:58:7e:4d:41:89:c0:e5:7e:
c6:49:a6:c3:84:d4:fa:9b:d7:bb:e4:ba:6a:66:73:01:da:eb:
e2:f8:4e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:57:52 2026 by rpki-client