Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
File: N8ZRc24kPV6mzsymOv20oDEtdzA.mft (raw, json)
Hash identifier: 9E6iBUm2qi5WE5ZfYl+kZPOqddNUZM6pf6qzdd/pNBI=
Subject key identifier: 22:3D:24:C7:2C:66:DE:25:24:3A:B2:27:DA:EE:37:67:B8:30:3A:36
Authority key identifier: 37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
Certificate issuer: /CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Certificate serial: 019DA3E5CD33CC73D7B462AE2AC9DFBC6592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
Manifest number: 18C8
Signing time: Sun 19 Apr 2026 04:00:39 +0000
Manifest this update: Sun 19 Apr 2026 04:00:39 +0000
Manifest next update: Mon 20 Apr 2026 04:00:39 +0000
Files and hashes: 1: N8ZRc24kPV6mzsymOv20oDEtdzA.crl (hash: 9W6NFGTOv1MVz+N9OgTwnZsxxr00v4s1sJHGzfr7ipM=)
2: nTe4XS35nHxQSCG2D80P-vLwCdc.roa (hash: VFddyo3u6Vm8UnAzJlN5YGNR/ZyZRBkt6xiG3mZLyRs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 02:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:e5:cd:33:cc:73:d7:b4:62:ae:2a:c9:df:bc:65:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37c651736e243d5ea6cecca63afdb4a0312d7730
Validity
Not Before: Apr 19 04:00:39 2026 GMT
Not After : Apr 20 04:00:39 2026 GMT
Subject: CN=223d24c72c66de25243ab227daee3767b8303a36
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:e1:04:c8:37:95:dc:c2:ba:ee:98:4d:bc:2c:
4a:60:81:3d:74:d7:6b:f2:6a:96:47:5b:98:9c:56:
33:33:27:b3:5a:bc:df:c9:d1:7d:f4:26:1b:5c:5c:
0c:b8:69:5f:05:5c:25:1c:cd:2b:1d:56:f7:d3:bc:
db:cb:6e:4a:2a:75:1b:88:f4:1b:25:56:50:a2:d9:
67:38:7d:f5:3f:bc:9d:7b:0a:11:26:88:40:95:78:
89:7f:07:15:51:60:77:df:63:44:62:b8:4b:2a:f3:
9d:cb:d8:66:63:f9:49:4f:74:96:aa:34:1c:c6:5d:
b9:83:81:56:a1:05:fc:64:02:bb:c5:9d:75:77:e1:
c1:9b:3e:f8:a8:e6:ff:d6:cf:82:6d:38:57:3f:73:
24:a3:36:ac:51:6c:2d:16:fe:d9:68:4f:65:ed:b9:
85:f7:3f:57:62:d6:8a:87:2b:43:98:09:07:10:26:
37:4b:ec:8c:77:16:ee:72:90:d5:64:af:a5:ef:a9:
f9:12:af:87:3a:6a:b3:d7:b0:24:56:f2:fc:59:dc:
e1:df:fe:81:9d:d1:71:16:d1:97:e2:20:7c:69:3f:
9b:78:58:6f:e0:7b:b2:25:2e:2b:d1:86:78:e6:d4:
98:03:e6:14:7d:16:ea:91:d3:ab:7b:f2:ce:6b:37:
b1:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:3D:24:C7:2C:66:DE:25:24:3A:B2:27:DA:EE:37:67:B8:30:3A:36
X509v3 Authority Key Identifier:
keyid:37:C6:51:73:6E:24:3D:5E:A6:CE:CC:A6:3A:FD:B4:A0:31:2D:77:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N8ZRc24kPV6mzsymOv20oDEtdzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/523c7d-3917-4137-9df3-abea625868a8/1/N8ZRc24kPV6mzsymOv20oDEtdzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:be:a0:6f:8d:51:ce:af:36:08:3a:ab:32:67:a2:d4:c0:58:
45:3a:c0:df:53:33:33:0d:f4:cf:ed:36:4a:4a:c6:38:c6:26:
04:9e:f6:24:7e:7c:05:92:ba:06:7e:41:c5:31:62:d7:9e:18:
f1:29:c0:bb:59:d2:ad:9f:9b:c8:6c:ac:52:3d:da:a3:1b:7d:
77:46:95:e4:0d:3a:be:73:2d:ff:19:06:1e:1f:60:f6:77:84:
60:7e:03:23:24:fe:9c:55:76:a2:a7:86:61:a7:c6:6f:1c:d3:
c7:ff:c8:a8:e9:9c:a3:51:a2:86:35:5a:ea:a8:93:7d:8b:ed:
bf:85:38:70:37:51:3e:b3:e8:37:b3:3f:34:cd:d8:6e:e0:ca:
9a:17:c6:9d:3e:f9:fa:9c:c7:6e:48:eb:34:7b:0c:2c:23:27:
7b:cc:b6:d6:98:83:63:34:d9:8a:31:62:5f:75:10:da:c2:af:
26:5f:88:a7:e9:d6:be:0f:6e:8f:69:e7:95:0d:00:dc:bd:c0:
2a:d2:ef:3f:c7:bb:c1:11:4a:78:80:bb:f8:b7:b5:af:4b:44:
91:be:9c:3d:7c:4c:46:8e:1f:1d:b0:03:2f:5f:50:4b:03:42:
4d:20:24:01:73:3d:d9:a8:73:75:87:99:58:2a:45:ee:08:5a:
e1:b5:6d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:05:38 2026 by rpki-client