Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: hNYDfwW5dUm2baepzQUDmHuC8yNUTMsjhXKZjykSpfY=
Subject key identifier: 21:E2:21:67:92:37:78:59:7F:94:8C:BD:79:C3:5C:E8:60:37:9F:2C
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 01A0E0CF0B864FD4B2D7D39E785B091BC1CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 19CF
Signing time: Sun 27 Sep 2026 03:01:00 +0000
Manifest this update: Sun 27 Sep 2026 03:01:00 +0000
Manifest next update: Mon 28 Sep 2026 03:01:00 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: UBCLh6jojgFqPzU7fiKZiItcVtyCPQ/ZUTwO2p6FNoI=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 03:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e0:cf:0b:86:4f:d4:b2:d7:d3:9e:78:5b:09:1b:c1:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Sep 27 03:01:00 2026 GMT
Not After : Sep 28 03:01:00 2026 GMT
Subject: CN=21e22167923778597f948cbd79c35ce860379f2c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e8:52:4e:d7:c0:6e:7f:cf:94:d1:56:63:c8:
86:58:b7:cf:eb:d3:a5:87:48:34:fd:9f:8e:49:5d:
ee:db:af:43:92:9c:e5:e4:79:48:e1:42:b5:a1:f6:
1a:e9:95:ec:32:0b:f4:d3:29:23:a4:b1:16:fa:fd:
2b:6b:4d:b6:7a:9c:e2:8a:7e:48:6b:59:19:e5:a2:
98:a8:2a:49:66:70:be:31:d7:fd:f3:7e:92:e1:b9:
ec:b8:ce:9e:b0:ef:a7:b5:32:7e:c4:43:3b:b5:ad:
28:84:98:af:e2:95:13:e0:30:a9:74:05:19:19:14:
75:f7:5a:f4:f5:80:d7:91:b7:7c:23:04:a3:3a:66:
ac:5a:61:0d:77:44:be:ec:a4:98:a9:fb:a6:d9:31:
d8:ef:30:55:9f:84:e5:94:b5:ff:87:17:fb:58:f6:
29:12:40:40:02:f4:e0:53:71:6d:25:01:94:e2:d0:
fd:3f:01:91:ce:db:16:7b:4e:8d:2e:f0:b7:71:cb:
89:5a:ad:e5:d8:3c:49:6c:06:60:6b:6f:18:95:c6:
d9:14:59:c9:06:a1:45:58:7b:b7:c7:c3:d8:9d:58:
eb:ce:7f:3a:15:7e:23:6f:18:a4:5f:02:60:0a:b6:
aa:e2:d8:2a:4e:05:74:9b:ff:18:66:46:20:03:1b:
81:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:21:67:92:37:78:59:7F:94:8C:BD:79:C3:5C:E8:60:37:9F:2C
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
88:96:87:0b:0c:3d:9f:97:b9:48:93:52:9b:58:04:7a:01:65:
3d:4d:4f:21:9f:f7:b6:f2:03:a5:93:bb:ae:1e:30:af:01:58:
00:ae:e0:da:1f:3a:dc:65:fd:f6:70:be:39:91:0e:bd:59:4e:
aa:08:41:c5:5b:86:d4:ff:18:a5:ef:ab:c3:3d:1a:7f:36:f8:
07:40:ad:62:8b:b8:f1:d1:fb:19:38:d6:39:c2:91:a5:c7:c8:
fe:ca:88:ba:9d:7d:e7:e8:15:f2:96:e2:1a:32:b7:2d:02:4a:
09:72:05:5f:03:e1:c5:6b:fd:17:34:35:ba:04:88:8c:23:da:
a0:0b:9a:56:12:68:0b:4b:df:c5:5e:dc:3c:24:ba:f8:a4:88:
8c:21:e0:d5:69:99:d4:3f:f5:02:cc:0c:6e:b0:2b:cf:d1:ce:
f6:27:ff:d4:dd:2a:5c:a3:15:78:15:be:4e:7e:24:ac:6a:0f:
fd:61:f8:28:5f:52:49:bf:ec:b9:56:2c:0a:1d:40:4f:b0:63:
a3:f5:cc:62:be:cb:61:0e:eb:7f:5c:dc:a2:c8:39:5d:9a:bc:
a8:7a:84:40:5d:be:10:5b:b1:55:c9:b2:8c:c7:4a:11:f8:8f:
25:af:a9:b6:cc:46:04:4e:b6:0a:6e:cd:43:52:20:5f:b2:41:
e6:ba:f4:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 10:16:49 2026 by rpki-client