Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: ycAjueYRpFCr8LQruGqmKY+0YxROwSvTS/YCNTOBwzg=
Subject key identifier: EE:0F:71:89:85:C1:45:DB:E0:BB:F4:D6:16:07:B8:E1:BC:8A:58:C2
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019D98BE26029CFDDD49A2F5B967EF75C4B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 181C
Signing time: Fri 17 Apr 2026 00:01:31 +0000
Manifest this update: Fri 17 Apr 2026 00:01:31 +0000
Manifest next update: Sat 18 Apr 2026 00:01:31 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: ez08335F/C8O5xafm4ErHm0aOaDsd3oM2g6iC1IeMqk=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:be:26:02:9c:fd:dd:49:a2:f5:b9:67:ef:75:c4:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Apr 17 00:01:31 2026 GMT
Not After : Apr 18 00:01:31 2026 GMT
Subject: CN=ee0f718985c145dbe0bbf4d61607b8e1bc8a58c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:40:c3:3b:ca:5a:7a:82:89:86:6e:ef:de:af:
3e:85:07:de:c2:03:00:ea:22:0a:18:ba:06:db:44:
fb:0f:d8:b5:6d:7c:bd:77:cf:f4:94:fb:17:f5:22:
9c:24:9c:4a:bc:75:6d:fb:f6:a8:85:28:db:f6:d3:
fb:af:52:a2:f5:7f:37:d3:1f:5d:b9:a5:09:6a:7e:
4f:2a:95:06:e9:50:9c:28:87:a6:47:a3:04:90:11:
f3:e2:57:1e:1b:24:6f:be:c0:5a:67:e9:71:5a:54:
f2:b7:9d:e3:88:db:4f:c5:b7:2a:24:23:04:71:c9:
ea:05:3e:b4:11:64:0f:93:77:1e:9d:e3:bd:4b:fd:
1d:4c:ae:8a:34:06:58:9f:61:74:b1:ab:e6:fc:0a:
5e:e6:8b:b5:ae:cc:56:a9:c3:65:b1:38:69:a2:09:
74:24:72:78:8b:4b:10:95:8f:3a:2f:17:a6:27:54:
74:bc:89:65:7e:a9:1a:6c:c6:9b:37:f1:3f:5c:8c:
e7:80:88:12:32:41:d9:08:0d:0a:9d:48:3d:b0:95:
8b:38:28:59:b5:bb:33:47:6c:7b:bd:40:0d:ef:49:
6a:22:3e:30:e2:34:9e:30:e6:46:4d:bf:c5:cc:1c:
ca:0f:6c:2a:80:8c:5b:6f:80:52:9c:cc:5c:4d:6f:
46:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0F:71:89:85:C1:45:DB:E0:BB:F4:D6:16:07:B8:E1:BC:8A:58:C2
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:bd:c6:26:02:aa:26:a8:a2:72:4e:64:de:6e:d4:3e:71:c5:
da:17:73:0b:50:39:f2:6d:55:ed:4b:62:77:fc:75:47:7e:62:
df:a5:cb:de:1f:8c:19:6d:18:05:0a:23:d9:e9:97:73:72:90:
0a:bf:65:fe:76:6a:bc:03:1e:ac:46:29:61:22:e6:3f:e7:86:
a8:49:55:36:61:3d:75:60:33:21:e5:01:4c:ed:3f:37:d4:bd:
91:5f:00:75:b8:f5:a5:f3:aa:03:bb:46:8e:fc:8c:bb:31:96:
62:95:26:fa:3c:44:9d:3d:d6:35:4d:22:76:99:03:34:8d:47:
ae:a6:92:d3:30:e2:56:f8:23:fe:6e:e2:65:5f:21:4a:51:de:
2c:23:54:9c:02:d2:55:85:9e:01:51:32:46:49:9a:0f:5f:db:
38:6c:0a:ab:c4:2e:c6:32:ca:f3:da:6c:71:0a:48:b1:79:05:
ca:9e:f7:97:5e:ed:6e:c1:7b:5a:71:2b:04:ac:4e:c6:fb:ba:
72:eb:67:57:d3:c8:ad:90:7b:2f:60:e8:04:13:e7:a1:f1:fd:
d2:7e:3e:4b:43:99:59:ab:6b:f9:0d:98:35:53:15:ad:c7:c9:
58:81:7f:01:51:b7:c5:6a:37:0b:0b:b5:68:8b:34:20:15:b8:
7a:3c:5a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:32:16 2026 by rpki-client