Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: yLD237W9tFftp/4NzTdvH0TonTt3ps7HuNHVTxu7CN0=
Subject key identifier: D8:FA:08:E2:A3:B9:A6:82:1D:4F:EF:01:CF:14:ED:C8:97:B6:76:92
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019D26CD389A3A19245F2F7BFA2FA13A3FD5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 17E1
Signing time: Wed 25 Mar 2026 21:01:16 +0000
Manifest this update: Wed 25 Mar 2026 21:01:16 +0000
Manifest next update: Thu 26 Mar 2026 21:01:16 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: XiWlRGP+sBdlQuOnMF9lZ+td2MHgIdO/H9OIkdoMzlM=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 21:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:26:cd:38:9a:3a:19:24:5f:2f:7b:fa:2f:a1:3a:3f:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Mar 25 21:01:16 2026 GMT
Not After : Mar 26 21:01:16 2026 GMT
Subject: CN=d8fa08e2a3b9a6821d4fef01cf14edc897b67692
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:4e:95:7d:a2:c5:2e:83:c6:46:d1:9a:5d:71:
96:84:27:66:7e:e7:aa:32:da:1b:62:ec:d3:3c:10:
83:f2:ac:b2:bd:9d:4c:f1:75:75:20:0d:9f:e0:6b:
9a:f4:b4:ab:9b:d1:72:7f:57:d5:6e:c7:a9:55:83:
2d:9e:e9:7c:2f:87:1e:e2:7c:66:0f:1d:20:ca:47:
80:cf:2e:a5:37:8d:25:f9:36:e7:5f:47:d1:6e:20:
0e:0f:c2:11:e6:0d:63:2e:66:92:ce:82:b4:48:42:
12:55:95:c2:e0:73:53:93:2a:fd:14:e1:eb:84:1d:
cb:e2:de:fc:df:cb:fd:cc:bf:da:97:cb:1e:fb:61:
b4:0b:bc:ef:4e:de:fc:a7:ab:0a:35:ed:63:2e:ee:
e3:79:5c:ea:91:b2:24:0b:3a:05:01:df:8d:05:d5:
a7:f9:64:c6:6d:aa:20:1e:71:94:e1:0d:f3:87:7b:
59:ce:76:6e:0b:46:a6:5a:10:24:07:48:dc:1e:58:
cd:4c:89:69:ed:b8:46:b4:d2:e9:b0:9f:95:14:38:
5e:17:0e:61:34:30:36:a1:c9:51:82:f3:71:f7:00:
47:50:46:ff:b6:4a:b5:45:bc:b2:82:b2:cc:7e:32:
2f:ce:a6:04:33:72:14:d0:dc:09:d8:d5:7d:71:92:
f5:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:FA:08:E2:A3:B9:A6:82:1D:4F:EF:01:CF:14:ED:C8:97:B6:76:92
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:aa:52:0a:13:61:9d:5e:25:df:1d:8f:ea:1e:fc:3a:40:ca:
26:0f:6a:93:9a:73:d3:2b:c3:16:c3:6f:6b:ba:d3:ff:4b:d4:
00:69:fb:90:5a:68:e2:67:12:e9:0a:d2:bf:b2:6c:6d:ee:c5:
8e:ac:56:e5:0d:d4:a4:0f:89:35:6d:5c:13:dc:63:95:4a:8d:
4a:90:a3:2d:5f:26:d2:de:ee:ad:51:e9:d7:88:8e:1c:d4:1e:
1e:79:f0:28:11:cc:af:74:3b:6c:44:02:16:86:95:31:f3:d5:
81:7b:4e:d7:92:d6:31:77:12:5d:57:b9:60:26:ed:36:12:64:
ec:fa:fc:e7:15:cc:84:d7:67:1d:63:03:f8:3e:e7:7d:9b:92:
91:ae:b3:49:b6:69:4c:1f:4a:5c:3e:58:97:ea:53:4c:a7:48:
6d:8a:09:1e:1e:2f:ff:af:c8:1d:c0:9e:dc:0b:15:6f:cd:fa:
2b:40:10:73:f7:fc:86:dc:b9:18:30:b7:a2:90:a2:bc:2c:e7:
15:eb:ef:28:a8:3c:ac:60:4c:69:be:10:1f:15:9b:90:4b:c3:
f3:18:63:3d:3c:f8:73:28:1c:67:5b:fc:f3:60:ac:c4:b9:d2:
2b:c2:5e:e8:cf:39:70:c4:10:9f:d6:7e:4b:c3:a4:f1:f0:5a:
e3:8b:cb:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:59:32 2026 by rpki-client