Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
File: N4kaRySqxrXaAAUymqOlq-h3edY.mft (raw, json)
Hash identifier: U47grwEqRzmaaAc+JifnLkp7RXIcZHIDgth5Z/4xdZA=
Subject key identifier: 61:8E:46:6D:1E:54:5D:69:59:34:24:B5:06:37:82:56:3F:E7:8B:A5
Authority key identifier: 37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
Certificate issuer: /CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Certificate serial: 019FA718B20C6074A6E98A5FC6A36E42BEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
Manifest number: 19D4
Signing time: Tue 28 Jul 2026 05:00:41 +0000
Manifest this update: Tue 28 Jul 2026 05:00:41 +0000
Manifest next update: Wed 29 Jul 2026 05:00:41 +0000
Files and hashes: 1: N4kaRySqxrXaAAUymqOlq-h3edY.crl (hash: WOonZecfcmpIdhGZWl+hONSfuiQBGUj+apKSjBoULlM=)
2: UzFn8n9_tf4w-iKCTtFhG5SnWpg.roa (hash: MFFkmnS3mVWWhbrVUQrhXKSWf1rXCa5UvdnfcnOZCV4=)
3: rELVahjt1c8lTGoZpqa7vRSAnPI.asa (hash: Jkl0L2KnFtoO3o9B8qrY2SaLkPz/kGTYDBX13TOtZp8=)
4: s9j8m-8R6ZZMDkYNpOB9aWUHmH4.roa (hash: sc211FLd1kmYlTTkcgRulGWHSsW1mSr9tSsdYR3sIng=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 05:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a7:18:b2:0c:60:74:a6:e9:8a:5f:c6:a3:6e:42:be:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37891a4724aac6b5da0005329aa3a5abe87779d6
Validity
Not Before: Jul 28 05:00:41 2026 GMT
Not After : Jul 29 05:00:41 2026 GMT
Subject: CN=618e466d1e545d69593424b5063782563fe78ba5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:2d:3a:0e:32:22:7d:26:4c:70:4a:fc:52:34:
1b:16:fa:81:dc:85:c4:4d:5e:1b:18:ff:e8:6d:18:
ed:74:04:db:87:a9:92:0b:d7:12:e9:59:48:37:88:
09:68:d4:ba:21:8e:b3:7d:15:b4:3d:d3:e0:25:8e:
e3:d9:c8:1e:e1:bf:94:3c:f1:4e:f7:80:6d:84:38:
c6:c2:28:70:43:ea:23:0d:db:b3:0a:1c:b3:bd:b6:
07:19:8a:51:78:36:5c:e4:1b:1e:7d:db:9b:d4:38:
f0:7b:79:75:6e:d4:47:a8:2d:2c:03:3e:f6:e2:76:
56:6f:2f:70:5b:7c:db:d0:79:ac:7c:19:85:ee:cc:
2c:48:f9:d1:ba:9d:8a:50:9a:b2:9d:e2:7e:13:93:
a3:e5:9b:ba:60:b0:d8:11:94:0a:68:05:78:4f:f7:
1c:9e:68:52:2d:b8:b5:35:ff:f5:a9:1c:02:09:d0:
77:c9:ee:ce:55:d7:96:28:9e:a2:75:97:7d:68:3f:
f2:4c:a7:50:ee:a8:3d:0c:bf:58:99:79:4d:53:d1:
7a:a9:0e:47:59:c9:62:ad:18:70:b2:a7:7b:1e:05:
2a:5b:45:a5:ce:b4:38:7c:5b:f9:74:db:2a:18:f3:
e5:7e:8d:ee:e7:b9:17:1d:32:3e:8d:f2:52:fd:ec:
0d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:8E:46:6D:1E:54:5D:69:59:34:24:B5:06:37:82:56:3F:E7:8B:A5
X509v3 Authority Key Identifier:
keyid:37:89:1A:47:24:AA:C6:B5:DA:00:05:32:9A:A3:A5:AB:E8:77:79:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N4kaRySqxrXaAAUymqOlq-h3edY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e128e0-00a6-4689-95be-524c2109cb05/1/N4kaRySqxrXaAAUymqOlq-h3edY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:cc:77:40:41:44:39:3d:ac:8b:cd:e4:16:55:61:aa:3c:7c:
09:58:42:29:47:20:19:e8:68:bd:76:50:d9:5e:a5:48:6d:e6:
12:5f:71:9a:27:c6:75:c4:78:e6:d3:c6:23:bf:90:d9:94:52:
bd:51:5c:4d:b8:62:7e:e9:ca:d5:71:35:81:49:14:fa:b4:88:
af:79:a5:1c:34:ae:9d:e7:c5:a6:0c:ed:ed:01:fc:fe:5f:37:
33:0d:a9:e7:d7:61:ce:32:1b:8a:95:91:4d:df:0b:22:e5:cf:
97:36:0e:2b:19:ce:cd:aa:a4:68:f3:3b:1b:d0:5d:ee:3b:68:
b1:1d:b5:22:b9:43:36:ae:47:60:9f:a1:81:7f:10:2f:39:05:
e6:5b:4b:66:b2:9c:b7:57:3f:08:a0:ef:ad:21:bd:05:3d:f8:
11:f6:23:8f:62:c9:45:fd:47:2e:b4:cc:44:18:20:f0:ea:4a:
48:6e:96:c0:8c:01:2d:81:4b:a5:bd:ae:18:43:a2:ea:c9:ab:
80:e8:11:1c:d6:b7:44:47:8e:b0:1a:a6:f8:b3:76:6d:18:9f:
25:13:be:09:67:33:1f:f8:f1:ca:fd:4c:a7:9f:5f:06:53:0c:
da:71:60:bf:34:fd:49:6b:a8:b9:42:1d:5b:e2:85:bf:c7:94:
45:90:e0:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 14:47:22 2026 by rpki-client