Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: vo13gm1r3SKvMRmPDd0ZNF87V5e6oqFl92rAp0deauM=
Subject key identifier: 90:5B:84:DB:73:AF:E3:95:60:F8:BD:52:FC:D4:39:1A:32:68:4D:49
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019D9A7502E82C572124BB951C448C75881C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 18C9
Signing time: Fri 17 Apr 2026 08:00:52 +0000
Manifest this update: Fri 17 Apr 2026 08:00:52 +0000
Manifest next update: Sat 18 Apr 2026 08:00:52 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: P2vC52X4j1G2+8EYc9i0u9qc6ZSj7LMVVvSHk5mtluE=)
3: UfNHSpJylWqCGj1xnLyUYs3XscQ.roa (hash: HqwmuScnIwcfsRW+0IJvtbF4YsRX/kFXsJcVfa0Phs8=)
4: aVybriSKg8J2Q7TvdQTwBVBbpgQ.roa (hash: CsGiY18ccHhD7M1a8C7IWEu0NTkbcJT9x/p8uOlc+a0=)
5: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
6: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
7: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
8: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:75:02:e8:2c:57:21:24:bb:95:1c:44:8c:75:88:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Apr 17 08:00:52 2026 GMT
Not After : Apr 18 08:00:52 2026 GMT
Subject: CN=905b84db73afe39560f8bd52fcd4391a32684d49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:1b:b3:69:0a:14:02:17:a3:ab:19:10:79:ac:
32:d9:e4:64:c3:ce:29:ae:5e:d0:2f:7d:83:fd:2e:
b7:fa:bb:03:a3:1c:84:0f:70:e5:2f:f0:e5:06:91:
56:3b:2f:3f:ee:a4:9c:b0:75:8f:cd:04:91:39:7d:
1d:25:4f:da:11:3e:f3:19:5a:e5:ad:4c:26:b1:2e:
ca:d1:83:93:43:c3:6f:3f:e2:48:9c:18:fe:ce:d4:
8d:f3:67:b2:7e:f7:90:21:0e:79:ca:42:9a:16:7a:
f1:21:fb:05:f5:34:eb:10:a4:8c:c5:b3:a5:cf:aa:
f6:af:0a:a7:77:36:4f:ca:d8:70:26:9d:06:a7:27:
80:cd:66:c8:1f:f6:0b:7e:51:a9:0e:e9:0f:a7:e0:
71:01:e1:de:43:b0:7d:ff:fc:43:ca:e8:43:9e:4d:
61:03:05:c9:50:45:61:73:58:6e:02:3e:8c:9d:75:
f3:77:3f:2b:42:53:fd:b2:98:f8:f8:32:17:42:3f:
e9:25:c2:50:c9:14:b1:7d:73:5e:85:f1:35:6f:7f:
00:22:3b:44:3c:13:47:2a:e8:4b:91:04:a0:46:6b:
4e:ec:63:ff:dd:fc:35:d7:fc:77:cb:dc:43:46:95:
2d:e7:ae:92:cc:26:1a:5e:26:ce:48:39:df:03:d7:
2d:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:5B:84:DB:73:AF:E3:95:60:F8:BD:52:FC:D4:39:1A:32:68:4D:49
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:c6:b2:0d:9f:d7:23:fb:5c:9e:87:40:ed:a1:cb:f0:ae:c9:
1c:43:d5:a2:1d:c5:72:8c:7e:15:1d:29:0d:58:d1:6f:72:53:
a3:a0:4d:2d:db:3f:bd:ef:35:ea:df:b7:8d:d1:35:55:15:cb:
33:57:45:21:ae:3e:82:41:e3:b0:40:d0:17:2f:33:77:25:1d:
2b:27:bc:21:ae:0b:c3:f3:06:b3:fb:ff:12:c2:bf:5e:dc:0d:
d3:d3:96:4d:25:99:e1:37:39:c1:44:25:f9:0f:a0:33:74:44:
d4:ee:ff:a5:5c:78:b2:af:98:0e:63:7a:8f:1a:17:df:ac:c3:
4f:57:a5:e6:cd:47:2b:81:4d:71:dc:8c:47:2f:9c:23:a7:92:
6b:d8:bc:af:27:78:39:6e:1a:d3:0c:4e:05:f0:27:cd:ad:f9:
2d:a1:3e:51:63:ab:72:10:b6:3a:d8:f2:06:f7:6c:c1:7f:90:
7c:b6:8b:60:1c:02:1f:f0:a5:ce:93:a8:1a:3c:11:1a:ce:07:
71:80:21:bd:03:0e:6d:b1:46:40:af:95:d9:69:4c:c7:1a:0c:
de:44:c1:83:4c:e0:02:71:dd:39:a6:f1:9e:aa:40:b5:c0:6c:
5e:fd:7d:2d:5a:b5:b1:3b:56:9a:7a:e5:d9:57:1f:d6:2c:c6:
40:60:d5:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:22 2026 by rpki-client