Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: OXp4cENs9E7wItw7UGBdEnFU1QOF8xMNa74aynJshf4=
Subject key identifier: 6C:F1:67:0A:06:D4:55:9D:62:6E:CE:7E:10:22:E3:62:3F:04:24:0D
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 01A12F57FD192C6A4C50281A782E6821EC08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 1AA6
Signing time: Mon 12 Oct 2026 09:00:57 +0000
Manifest this update: Mon 12 Oct 2026 09:00:57 +0000
Manifest next update: Tue 13 Oct 2026 09:00:57 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: BkFvw4Kiw41PG8jPxaOsdEt1NHVXhaBMEn8y36aBWgY=)
3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 13 Oct 2026 09:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:2f:57:fd:19:2c:6a:4c:50:28:1a:78:2e:68:21:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Oct 12 09:00:57 2026 GMT
Not After : Oct 13 09:00:57 2026 GMT
Subject: CN=6cf1670a06d4559d626ece7e1022e3623f04240d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:fa:f0:9f:04:b5:af:e6:27:ae:0a:b3:32:4e:
b3:14:9d:21:d7:7e:49:61:b3:d2:10:9b:1b:03:80:
d6:de:c8:41:03:2c:29:b0:f0:e9:06:7d:d7:c6:70:
5a:c7:56:5b:97:c9:a9:cb:fe:2e:e6:3f:e3:42:e5:
92:2e:d3:7f:a6:b3:99:2a:91:dc:58:8d:7d:cb:08:
e3:b8:5e:5b:ae:18:31:47:3e:69:6a:c8:f5:7a:15:
70:c0:8a:c6:ea:03:9c:2e:68:fe:c2:c6:fd:17:c0:
e3:be:c8:d0:41:63:93:71:be:20:6c:d5:3b:a4:fe:
5a:69:e2:0a:af:78:bb:b1:58:21:e2:16:a5:31:39:
86:ed:f6:e3:b6:55:42:1d:86:6f:db:53:4a:d1:80:
70:7e:f1:b5:a4:67:7b:66:61:be:4e:41:2e:37:85:
86:1a:46:90:08:1f:08:8b:47:d1:93:43:a7:d8:fe:
cd:cb:e9:20:48:47:25:e7:31:64:36:ee:aa:0b:41:
fd:b0:67:cb:20:ad:63:ad:bd:24:c6:df:0e:43:92:
42:c1:bb:a0:21:ae:3f:64:46:c1:9d:08:c4:ca:92:
a5:80:b7:fa:69:44:2f:c5:35:84:56:ad:aa:1e:ce:
3b:52:ff:59:9e:3a:19:2c:06:97:b2:00:e9:c3:06:
f4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:F1:67:0A:06:D4:55:9D:62:6E:CE:7E:10:22:E3:62:3F:04:24:0D
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:64:0b:2d:db:57:16:e3:8f:f2:c0:fd:10:20:0b:68:c5:ad:
53:50:0e:52:e6:34:ea:6e:ca:73:c4:2b:5c:89:a6:de:7a:6d:
ee:61:fc:5f:12:3f:aa:83:b5:aa:f7:29:63:b1:f4:bb:58:30:
78:a8:59:51:ef:6c:da:2c:c8:e6:8d:51:ea:a7:e7:4f:7e:9c:
9d:2d:44:43:a3:f1:6b:b7:41:1d:58:fb:41:99:26:a7:70:28:
f4:b7:b2:3c:0c:bc:e8:31:7a:c8:b9:b0:a6:0a:59:f4:f1:4b:
c1:3e:d4:0c:11:9c:d0:61:64:b1:f4:47:16:b6:84:c3:0d:38:
14:9e:ad:2f:7c:45:84:a8:3e:0d:dc:6a:24:75:e8:86:b5:ca:
c2:fa:2a:b4:e8:70:0e:bd:c5:d2:47:dd:5f:39:0a:16:ac:e9:
19:2a:6a:b2:fa:77:2e:d3:c7:02:23:29:e6:be:76:87:99:ac:
82:ff:bc:bd:08:e5:cc:83:59:29:a9:86:c4:28:0a:e5:9a:22:
7a:ad:62:6b:3c:74:45:35:d3:f2:90:ea:8f:c9:95:9d:d7:25:
7a:93:b0:f6:f1:f0:17:e0:02:69:2d:fd:a2:bf:d7:67:cb:5c:
65:55:93:59:56:a9:03:4d:ca:f5:b9:a8:bf:ea:b0:40:25:d3:
06:ec:48:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 18:27:27 2026 by rpki-client