Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
File: N_sATjl93wTn0F82Q6A28hg2_xA.mft (raw, json)
Hash identifier: hstN48bHF8SFWur58/RfFS5KC24bETn0XzafVAfPDUI=
Subject key identifier: 80:7B:20:14:DE:C0:8F:D0:FA:4D:08:68:50:20:4E:EE:68:AB:55:FE
Authority key identifier: 37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
Certificate issuer: /CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Certificate serial: 019FAD1B0B1C64940C4412364C6FE4FF963C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
Manifest number: 19DE
Signing time: Wed 29 Jul 2026 09:00:58 +0000
Manifest this update: Wed 29 Jul 2026 09:00:58 +0000
Manifest next update: Thu 30 Jul 2026 09:00:58 +0000
Files and hashes: 1: 01d9ioiOPnPG7DZOjNZd7T61tR0.roa (hash: Peseaq3bVAG4nWtXqyyN3OnQ9QW0ipZzyhwlXYv87F0=)
2: N_sATjl93wTn0F82Q6A28hg2_xA.crl (hash: Ox+ayp2wDqw3PYnM9ohiinxfqXJjblsiBld3zKeY/4w=)
3: gkGO9TLlbJNRyT0FacNUzmIccKM.roa (hash: qMl7qor57uCNRT6iIX8k2+atdVcm1wyjq5Tw0xvWgT0=)
4: iWhsduS23m90Fn4lDMKgSgk15_o.roa (hash: C/45KVXK990losz9E6pysayco49xQaIVeuEB+qdVVAw=)
5: kulKF481vVCUBC9LIChr0PPnQ98.roa (hash: oPEQfzfrWrqmzt4RZKImfOn5GfilVn0rFFaSRAlyxh0=)
6: nVgbGv07d0xDGS2SqPeo81gbCks.roa (hash: SxNRJVUlxFYycDTJAn0orexujNBa+UsMV2bn5jf5cGc=)
7: nhNt2f4O-xCK4COg-s6KV2g8IiU.roa (hash: WCV/QqPcz/hGYiF0VERdtpGmxMTjQFCFNHDL++bEjSc=)
8: vLRVDoqJhEnm4t8SoVeIpa28fIY.roa (hash: iCTv3WCfuiRFfxGD7ij8pWfpqqGewb0XhY28F6ZYDbI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:1b:0b:1c:64:94:0c:44:12:36:4c:6f:e4:ff:96:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37fb004e397ddf04e7d05f3643a036f21836ff10
Validity
Not Before: Jul 29 09:00:58 2026 GMT
Not After : Jul 30 09:00:58 2026 GMT
Subject: CN=807b2014dec08fd0fa4d086850204eee68ab55fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:44:e6:c2:ea:47:3a:22:17:13:44:1c:36:e8:
83:1d:3c:40:12:4b:d3:fb:86:24:ec:93:29:39:23:
72:31:86:80:4d:4d:0e:ec:74:72:36:5b:32:5f:0d:
dc:2f:bb:65:d1:fd:eb:16:83:8d:4c:b7:6e:c5:27:
16:e0:d1:44:1f:e7:15:82:98:26:7d:56:1f:cd:1e:
c2:84:a2:6a:78:da:5a:7e:4d:09:38:d8:6b:69:33:
88:22:a6:ae:68:57:5f:c4:33:d2:4c:68:67:b8:b4:
3e:46:74:dc:a7:66:19:d1:f3:f7:66:34:d3:66:a1:
23:2f:13:37:0e:9e:90:94:4f:a5:f0:b9:b9:51:81:
7d:8f:07:b7:80:09:11:e1:80:92:94:1e:52:eb:df:
a8:2a:f5:cd:aa:22:87:c0:d3:df:80:29:83:00:12:
2f:d6:67:c6:e9:20:93:b4:64:d2:11:6e:28:73:36:
07:88:d9:b7:18:d3:a9:04:78:d0:59:7b:7e:5c:95:
59:ba:30:7c:c0:8e:e9:2a:69:a2:7f:82:9c:ca:fb:
40:71:16:cc:77:1d:51:7b:3e:fc:9b:11:16:e5:07:
9a:f6:78:ff:d4:83:75:95:4e:38:de:ce:4c:7b:da:
87:10:1b:7e:13:c5:c1:bb:12:a8:05:ac:6c:91:88:
64:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:7B:20:14:DE:C0:8F:D0:FA:4D:08:68:50:20:4E:EE:68:AB:55:FE
X509v3 Authority Key Identifier:
keyid:37:FB:00:4E:39:7D:DF:04:E7:D0:5F:36:43:A0:36:F2:18:36:FF:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_sATjl93wTn0F82Q6A28hg2_xA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/742299-f343-4321-b351-b53b64cf0d95/1/N_sATjl93wTn0F82Q6A28hg2_xA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:15:fb:96:d9:a3:a2:47:44:25:51:16:89:fc:f9:5e:bd:40:
ff:3a:98:70:1d:0c:69:56:f0:d7:ff:86:76:a8:cc:41:f7:44:
f6:e2:ff:90:d5:54:02:e6:84:81:0c:94:25:6a:1a:62:9d:8e:
62:de:93:22:30:b3:84:67:14:9d:29:f3:00:0c:76:8a:93:c9:
87:64:0f:59:70:85:43:64:e2:2c:62:24:64:f9:96:d8:31:dd:
d7:32:42:4e:91:fa:f4:54:12:9b:d1:78:f7:0b:4d:1a:1f:ad:
e5:ce:7a:f6:9c:82:33:f4:48:49:94:ba:26:cd:04:be:0c:fa:
ad:1f:cf:15:ff:53:99:59:8e:fb:a6:2d:99:04:8a:58:1a:25:
03:0f:83:e1:8d:fe:5e:df:05:e6:59:d7:25:12:d5:f8:59:40:
09:36:48:18:a2:f3:dd:83:ce:a9:ba:24:f6:7e:8d:b5:a2:02:
b3:6a:91:f0:ca:65:ee:31:fe:f1:ab:a9:ce:be:bf:5c:79:db:
d3:37:cb:63:05:c9:6b:bb:19:57:f5:31:0b:20:5f:b3:28:d8:
e3:79:73:f3:3d:58:e5:03:d4:9f:12:92:ba:8d:d9:fc:5c:34:
c5:88:fc:8a:89:5a:49:a6:15:7d:ec:7b:59:77:01:ec:f3:a5:
9b:b4:23:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tGwscZJQMRBI2TG/k/5Y8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3ZmIwMDRlMzk3ZGRmMDRlN2QwNWYzNjQzYTAzNmYyMTgz
NmZmMTAwHhcNMjYwNzI5MDkwMDU4WhcNMjYwNzMwMDkwMDU4WjAzMTEwLwYDVQQD
Eyg4MDdiMjAxNGRlYzA4ZmQwZmE0ZDA4Njg1MDIwNGVlZTY4YWI1NWZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkTmwupHOiIXE0QcNuiDHTxAEkvT
+4Yk7JMpOSNyMYaATU0O7HRyNlsyXw3cL7tl0f3rFoONTLduxScW4NFEH+cVgpgm
fVYfzR7ChKJqeNpafk0JONhraTOIIqauaFdfxDPSTGhnuLQ+RnTcp2YZ0fP3ZjTT
ZqEjLxM3Dp6QlE+l8Lm5UYF9jwe3gAkR4YCSlB5S69+oKvXNqiKHwNPfgCmDABIv
1mfG6SCTtGTSEW4oczYHiNm3GNOpBHjQWXt+XJVZujB8wI7pKmmif4KcyvtAcRbM
dx1Rez78mxEW5Qea9nj/1IN1lU443s5Me9qHEBt+E8XBuxKoBaxskYhk+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIB7IBTewI/Q+k0IaFAgTu5oq1X+MB8GA1UdIwQY
MBaAFDf7AE45fd8E59BfNkOgNvIYNv8QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEt
YjUzYjY0Y2YwZDk1LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS83NDIyOTktZjM0My00MzIxLWIzNTEtYjUzYjY0Y2YwZDk1
LzEvTl9zQVRqbDkzd1RuMEY4MlE2QTI4aGcyX3hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZRX7ltmj
okdEJVEWifz5Xr1A/zqYcB0MaVbw1/+GdqjMQfdE9uL/kNVUAuaEgQyUJWoaYp2O
Yt6TIjCzhGcUnSnzAAx2ipPJh2QPWXCFQ2TiLGIkZPmW2DHd1zJCTpH69FQSm9F4
9wtNGh+t5c569pyCM/RISZS6Js0Evgz6rR/PFf9TmVmO+6YtmQSKWBolAw+D4Y3+
Xt8F5lnXJRLV+FlACTZIGKLz3YPOqbok9n6NtaICs2qR8Mpl7jH+8aupzr6/XHnb
0zfLYwXJa7sZV/UxCyBfsyjY43lz8z1Y5QPUnxKSuo3Z/Fw0xYj8iolaSaYVfex7
WXcB7POlm7QjwA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 12:30:07 2026 by rpki-client