
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: 9EXnbclZC2j6QMctk1tL/ZDYLLNBELUfSl6gvm14dJI=
Subject key identifier: FF:42:86:23:59:64:D3:E9:A0:6E:7F:8F:49:8C:C9:13:52:A0:28:22
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 019E1DFDE10BC5DFF91CA1F5E8602BDDB1C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1908
Signing time: Tue 12 May 2026 21:00:37 +0000
Manifest this update: Tue 12 May 2026 21:00:37 +0000
Manifest next update: Wed 13 May 2026 21:00:37 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: r2LWOiDq/0eZOCXdZGFZ+SsFn7Q1ZWxDQ7k/JtdAYaQ=)
2: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
3: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:fd:e1:0b:c5:df:f9:1c:a1:f5:e8:60:2b:dd:b1:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: May 12 21:00:37 2026 GMT
Not After : May 13 21:00:37 2026 GMT
Subject: CN=ff4286235964d3e9a06e7f8f498cc91352a02822
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:fb:46:40:00:d9:52:27:42:33:3d:5a:6a:58:
0c:22:3c:6f:ef:20:ce:81:bd:3e:4c:34:75:58:4c:
24:40:9f:b8:fe:cf:1b:aa:47:d6:3a:9a:0e:7b:7f:
fc:71:99:e3:65:70:1d:83:21:14:45:6d:5b:6b:cc:
43:89:22:63:8f:e4:aa:6b:85:10:6e:09:eb:4b:63:
79:a9:de:e6:84:d3:49:90:50:25:44:1f:2f:bc:fb:
4c:e2:63:b6:1c:b6:e2:da:18:61:86:5b:91:68:5e:
20:3f:e0:ce:d0:11:10:57:97:a4:44:32:4e:59:43:
1a:a3:87:cb:a6:48:bf:61:8e:af:d6:5e:13:ca:35:
15:04:6d:0a:51:ce:56:ad:dc:bd:c2:90:67:54:3f:
e5:4f:3f:a8:55:e6:1f:38:a3:52:72:fb:aa:ce:d2:
b8:6a:62:3a:bd:42:38:bf:fa:75:c2:4b:a2:54:6f:
47:ac:e6:15:a0:a3:17:62:07:ba:59:5e:c0:ed:3c:
8f:2c:ba:9c:ee:43:07:6d:29:4b:2e:05:f9:6e:33:
53:f4:28:fb:1a:6d:98:ce:39:60:e6:5c:94:25:91:
54:d8:dc:ad:1f:72:6a:50:5f:7c:3f:9d:dc:9f:da:
cd:27:b9:88:0b:84:c9:58:e3:ca:52:06:dd:4d:71:
4f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:42:86:23:59:64:D3:E9:A0:6E:7F:8F:49:8C:C9:13:52:A0:28:22
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6c:a9:4b:f0:55:f1:a2:e9:b1:1e:93:5c:7e:8b:25:46:5e:
19:7a:af:92:58:b5:f5:f3:d8:9f:5c:fe:cb:0b:3d:4c:30:58:
e5:a0:2f:11:77:5c:ce:18:21:cc:d2:c7:bf:75:50:00:eb:21:
c1:ae:0b:3f:b1:17:13:92:be:fe:4c:b4:3c:ea:25:55:f8:8c:
62:96:e4:e2:16:01:03:9d:8c:82:6a:02:28:4e:ab:a8:4f:62:
b8:88:f8:9d:65:b8:04:49:22:d5:91:5a:b2:e4:44:42:ee:ac:
76:f6:1c:e4:a8:9b:92:30:bf:fb:41:35:76:cb:99:9d:f0:4d:
78:76:b3:90:44:14:f1:f2:69:6a:a7:89:ae:54:58:c7:4d:d3:
3f:df:3f:5b:48:48:e3:00:a7:d7:07:dd:aa:ab:0d:4b:57:12:
86:b6:fe:bc:34:c0:fc:a5:1a:2f:f0:a7:44:3e:0f:a8:de:a4:
ce:91:23:71:61:50:83:fa:9c:d6:7a:8e:d2:db:18:57:9d:80:
e0:22:42:ba:0e:b3:ad:35:e8:c6:fd:a6:64:8b:f7:85:a3:5e:
99:82:95:9a:48:95:a0:e8:df:48:a2:f8:20:f6:63:a3:38:16:
8e:d1:d6:e4:41:a8:4f:41:93:d7:59:ea:ce:30:b6:c1:65:55:
05:cd:99:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:33:48 2026 by rpki-client