Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: EKtPlvZ9t7nz+hPyOXcdzB8bmX84s5iHowuXD+YwPpM=
Subject key identifier: F7:CB:DD:AA:AB:56:F7:F7:47:BF:B3:9F:B2:4F:7D:BE:CD:DE:32:C4
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019E1DFE23A5E519E82792A16F0D891583D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1861
Signing time: Tue 12 May 2026 21:00:54 +0000
Manifest this update: Tue 12 May 2026 21:00:54 +0000
Manifest next update: Wed 13 May 2026 21:00:54 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: 6Jdlg1+ec0lpNaBKnVCrxUYdr5VAGtwf3XMwA51kUTg=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fe:23:a5:e5:19:e8:27:92:a1:6f:0d:89:15:83:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: May 12 21:00:54 2026 GMT
Not After : May 13 21:00:54 2026 GMT
Subject: CN=f7cbddaaab56f7f747bfb39fb24f7dbecdde32c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:e3:71:f5:9b:3b:c9:80:ef:69:48:bd:80:
92:10:1b:2e:23:9d:97:5a:23:e6:2d:fa:37:d6:88:
d8:20:65:c8:8c:52:72:81:26:fe:ce:28:35:42:e7:
a3:21:c5:fa:56:3f:8a:ad:1e:8f:65:78:94:d4:ba:
f1:09:12:85:0c:fb:a3:df:8d:33:03:63:b8:f5:55:
80:c8:60:03:7d:e8:f6:74:5b:1c:8c:17:2b:19:65:
88:94:b0:bb:48:75:74:3e:34:07:40:e3:c2:41:18:
3b:11:a7:23:b9:5d:24:9d:06:83:d2:30:66:71:67:
43:e4:70:b2:91:cb:4e:70:3b:2f:1e:f1:0a:49:3b:
15:a4:60:11:f6:da:10:1f:bf:b5:60:93:c9:32:1b:
c0:79:2b:66:27:59:4e:3c:c4:ac:7b:65:bd:c9:65:
e3:de:31:07:b9:d1:8e:3c:01:08:c4:a0:4f:df:c9:
75:99:4f:5d:af:6c:ae:9e:ce:27:e0:85:26:50:47:
a5:65:94:7f:5e:15:d4:cd:9e:c7:b8:5c:1c:df:c3:
a6:8f:e0:dc:68:a4:9d:8e:f4:c8:37:a6:47:15:ab:
f6:1e:e7:fb:58:82:fc:3e:7c:fe:cc:d5:fc:ee:fb:
2d:77:5a:62:8f:dc:18:b9:79:00:c4:26:5d:64:cb:
47:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:CB:DD:AA:AB:56:F7:F7:47:BF:B3:9F:B2:4F:7D:BE:CD:DE:32:C4
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:6d:fb:b5:72:e3:51:5c:a0:d3:01:33:85:87:74:32:e7:27:
e8:63:00:59:4f:3c:85:a6:5f:19:9f:8c:c0:4f:ed:18:74:fa:
c9:c5:aa:b9:ab:95:5a:75:b9:79:29:68:4b:56:e6:25:f2:06:
cd:04:8b:47:9e:90:2a:9d:1b:c8:ce:4a:d0:55:83:0c:59:ee:
24:c6:8a:39:86:60:db:bd:4a:67:a6:6d:d5:09:c8:f3:2e:f6:
a4:63:6a:84:09:78:da:01:82:b9:af:3a:72:3e:5e:7d:a6:43:
08:6a:ac:79:c6:e0:3b:c3:5f:b4:09:d7:fb:ef:ba:b6:4d:f1:
8c:9d:ce:42:51:34:c6:4e:1d:60:72:ec:24:ad:65:4a:a6:07:
bb:04:96:ae:90:1d:e8:44:1c:ad:ed:12:59:0c:f3:7a:65:84:
03:34:11:a0:c6:16:7f:f9:67:86:88:a1:69:63:25:57:9a:cd:
25:d9:cb:31:a4:ff:1d:36:1c:f8:73:4e:f3:65:d7:70:af:07:
d0:25:a1:fb:7a:6f:63:38:e8:2c:92:14:fe:f6:15:b9:ee:e6:
eb:ef:36:c7:e4:4d:de:be:cb:2f:c4:35:b9:a0:9b:d3:0c:2d:
eb:f9:9c:ef:87:d2:53:61:55:05:c6:00:0d:dc:72:2d:a4:e1:
d1:0f:d1:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:12 2026 by rpki-client