Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: I3/LIqFM2B/85VLtMCE7QZ6TRoktCsaGhU3+RdCCDXo=
Subject key identifier: 82:52:CD:9C:B1:FD:A1:5A:77:71:33:B6:34:DB:D6:A6:5D:FD:D6:FF
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 01A0D45D08C6BF2662831715CAF7CAE0D72B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 1A70
Signing time: Thu 24 Sep 2026 17:01:01 +0000
Manifest this update: Thu 24 Sep 2026 17:01:01 +0000
Manifest next update: Fri 25 Sep 2026 17:01:01 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: kcAtN+9nSqj0VEtxn+c15RUs5oY5vfmaX6LjQ1TTJgE=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:17:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:5d:08:c6:bf:26:62:83:17:15:ca:f7:ca:e0:d7:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Sep 24 17:01:01 2026 GMT
Not After : Sep 25 17:01:01 2026 GMT
Subject: CN=8252cd9cb1fda15a777133b634dbd6a65dfdd6ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:27:e0:73:2f:60:fd:a9:2b:9c:7b:f3:26:cd:
92:b3:32:f2:40:13:c9:50:4c:ba:2d:18:c7:1c:1c:
0d:23:83:bf:2f:16:4f:0c:22:77:60:c7:1b:b1:29:
1e:26:ce:1d:4d:f1:51:ba:c1:17:9c:44:86:df:3a:
eb:4d:61:7e:88:79:ce:e6:a0:25:2c:e3:e9:09:9d:
3f:f7:e9:88:20:0a:6a:11:19:03:07:94:79:c2:0e:
c5:75:5d:d3:60:51:89:99:5d:3d:3a:17:b0:44:0a:
05:45:71:a5:5a:e8:19:49:42:3c:e5:07:03:dc:87:
1e:87:79:4b:8e:6f:b1:75:73:44:3a:e1:b7:d9:29:
0d:9d:2a:42:e3:18:11:7a:62:a8:87:1b:5f:57:a9:
62:d6:8a:02:1d:2a:19:6d:a3:12:c7:2b:d3:9c:b9:
53:55:a0:7a:c2:f4:d6:d8:0e:c8:36:27:e0:7b:bb:
c6:7e:2b:52:60:28:09:d9:25:be:82:9f:00:c2:34:
4e:91:15:1e:6d:b7:96:c1:17:07:ae:d4:21:6f:e7:
24:31:bf:cc:6a:67:b8:79:77:f8:8f:ac:be:82:c4:
3c:28:0d:a4:b6:22:14:59:f8:93:9b:8f:6c:39:1b:
04:00:e5:d8:02:e0:57:0c:22:67:a2:9d:69:66:85:
e6:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:52:CD:9C:B1:FD:A1:5A:77:71:33:B6:34:DB:D6:A6:5D:FD:D6:FF
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:61:7b:33:eb:72:7b:65:c0:c0:02:50:06:2b:e5:1b:de:aa:
3b:38:fa:24:77:5c:3b:5b:eb:00:ce:1b:1f:1f:80:b8:8d:b4:
65:a2:9f:8d:dd:31:3f:6c:36:d9:31:06:b0:b4:a5:57:36:e5:
12:e0:ba:78:94:cb:61:3a:79:39:5b:95:96:43:21:6a:67:4c:
44:bf:d3:9f:42:fc:33:85:97:61:61:ae:c6:19:c1:76:12:73:
0e:07:b1:6e:a7:6e:3c:4b:25:dd:22:84:4e:21:d3:2f:ae:13:
0f:ad:e9:19:bc:61:ed:c1:eb:d0:e6:dd:b9:73:a6:66:02:34:
b5:8b:ee:16:fe:34:59:fb:0c:4b:08:b4:bf:23:f6:1b:d5:13:
21:72:6e:66:d3:6f:73:ce:d2:9d:50:62:bf:4b:f4:94:aa:c9:
d8:cf:18:29:29:b4:9c:70:87:47:1c:49:69:01:fa:02:89:50:
85:e5:08:34:5c:98:07:9e:21:4d:a7:40:2e:00:b3:ba:af:5b:
eb:ab:4f:a9:e2:e1:14:65:97:2a:8d:a9:6f:f5:32:74:88:17:
54:a0:c9:35:f8:c1:8b:58:4d:2b:74:6c:70:90:0f:b0:99:d6:
ab:02:b4:bc:9b:02:19:32:16:e4:5c:b5:90:b1:1a:00:3a:b6:
d8:2f:74:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:23:30 2026 by rpki-client