Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: /WUNlMusUUvRrgx/BydEb3oZZpf+bMJMk4FVUmsnS3s=
Subject key identifier: F2:A6:49:3F:5C:47:4C:15:FF:83:55:E7:F3:49:FC:B0:BD:47:F1:2F
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019F94A4775ECC13960CF85ADA82F3A46B2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1923
Signing time: Fri 24 Jul 2026 15:00:33 +0000
Manifest this update: Fri 24 Jul 2026 15:00:33 +0000
Manifest next update: Sat 25 Jul 2026 15:00:33 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: VUGx5fIvo71Km7kidJAVzn+v6mQ7p5rUyZUfgidetwU=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:a4:77:5e:cc:13:96:0c:f8:5a:da:82:f3:a4:6b:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jul 24 15:00:33 2026 GMT
Not After : Jul 25 15:00:33 2026 GMT
Subject: CN=f2a6493f5c474c15ff8355e7f349fcb0bd47f12f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:8c:04:db:f6:db:59:4d:dd:39:80:45:4e:23:
96:8c:32:59:a8:89:0c:69:29:a8:5d:9a:19:92:ee:
c0:fb:ec:c5:84:98:de:9b:98:be:ca:df:92:77:cf:
13:de:ff:3f:92:30:94:82:a1:6d:87:22:5a:09:c5:
d2:0e:82:43:29:6e:8e:18:13:88:71:9a:e3:e4:8c:
c8:45:1d:c7:2d:2c:b4:ab:1a:32:80:b1:39:ed:54:
26:87:07:73:db:80:4a:f1:ee:b2:da:03:3f:f4:34:
06:4f:02:ee:b6:29:12:ad:f9:71:c4:85:60:ed:70:
04:19:7b:e3:43:cc:bf:a1:d4:54:ef:6a:77:5c:23:
51:07:8e:30:46:c3:be:51:3a:4b:43:f7:76:e9:da:
b1:fb:bf:4c:60:f9:b9:e8:8c:66:56:10:d9:1c:32:
5d:cf:79:cc:9a:7a:d8:af:34:49:db:1a:6b:fb:3a:
4f:07:97:2f:1e:60:9d:53:89:98:a4:f1:14:d5:e7:
a0:17:3c:1a:4c:c1:dc:72:76:50:fd:56:78:f6:dc:
eb:db:5f:fd:5d:17:9a:aa:27:7f:0f:f4:45:50:df:
f1:ac:74:a5:59:a6:30:a4:cc:d1:d1:9f:e5:10:56:
ca:33:f7:d9:b2:df:19:54:7e:74:1b:8e:3b:df:13:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:A6:49:3F:5C:47:4C:15:FF:83:55:E7:F3:49:FC:B0:BD:47:F1:2F
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:5a:40:36:e0:f2:2c:be:84:fe:00:a6:e2:ea:8c:a7:5c:b7:
19:78:52:11:09:e2:08:5a:56:a0:ee:2e:10:6d:71:2d:ff:d0:
56:4d:8c:a4:b2:91:a4:c5:f7:a5:49:9c:4a:4f:3d:bd:24:a5:
0e:06:93:a9:0e:e0:32:ed:bf:89:60:ea:53:08:c6:e5:c9:7a:
24:23:d9:62:a1:8b:c1:74:ce:83:e3:e5:ee:23:bb:46:bc:a5:
b4:1d:1f:1f:1e:9b:f1:f9:9b:0d:68:49:0c:cc:3b:b0:fb:fe:
19:c2:ea:fd:bd:44:52:d1:07:83:84:f4:0b:6a:d9:30:47:38:
0c:0b:3e:e2:28:10:06:32:9d:4c:ec:45:2e:60:0e:3c:3f:28:
e8:92:a7:36:22:c0:37:24:91:6a:2c:80:06:a6:2d:c0:76:2b:
41:86:b7:bc:3e:b2:62:a3:51:1a:fe:28:89:10:cd:4f:48:e1:
33:c2:7d:70:eb:c4:aa:70:a1:55:5d:5f:cb:1a:87:52:02:56:
83:ab:47:a6:f3:a6:27:da:ba:1f:2d:73:1d:c3:62:de:87:14:
fe:f7:77:f6:cf:d3:b9:e8:3b:6f:4b:c2:ee:6f:01:9a:b1:92:
3b:e5:be:79:c8:d0:aa:54:45:ed:ea:66:fd:90:3a:e2:81:0c:
71:5a:d5:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 18:32:08 2026 by rpki-client