Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: gPZ/qs9lLrkvA8PIV8qugj9n/sXRLfKQ0gkz+ilW9wg=
Subject key identifier: D5:A3:0A:6E:3B:E9:D1:18:9A:59:45:91:FF:46:E9:0C:F3:B3:8E:5C
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019FADBFC56A265132362F63814D3DC1DFB5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 1930
Signing time: Wed 29 Jul 2026 12:00:54 +0000
Manifest this update: Wed 29 Jul 2026 12:00:54 +0000
Manifest next update: Thu 30 Jul 2026 12:00:54 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: 8vwWPMK3gtIqEZlxZVczK3xQ1QoKv7xI421d0XBLXEc=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ad:bf:c5:6a:26:51:32:36:2f:63:81:4d:3d:c1:df:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Jul 29 12:00:54 2026 GMT
Not After : Jul 30 12:00:54 2026 GMT
Subject: CN=d5a30a6e3be9d1189a594591ff46e90cf3b38e5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:bf:98:df:aa:61:f1:64:73:79:1f:4b:92:99:
4b:f0:15:16:ce:89:a5:67:61:80:54:c6:04:02:fd:
f3:1f:d6:cb:fd:57:67:99:2a:4b:d8:2f:65:e2:54:
58:e9:e2:6d:fb:2a:0e:30:dc:ca:c2:a3:e4:c1:e8:
a8:7b:30:f7:ba:a3:44:17:1a:23:d6:a1:ea:46:96:
28:cf:0e:b4:ac:69:0f:e4:9e:c7:83:8b:58:88:4c:
32:fe:68:dc:35:c0:87:01:f7:c0:82:3e:af:ba:d4:
ca:82:55:d8:b1:0e:dc:98:71:0a:80:3d:7f:87:38:
6e:9c:37:f5:6e:40:7b:d7:fd:76:aa:bb:52:0f:16:
69:8f:b4:ca:31:e4:80:59:ec:e7:6e:b9:62:0f:e7:
88:2c:89:dc:13:91:7a:ea:9a:02:39:e1:15:53:0e:
b8:4c:e8:a2:c4:5a:62:a8:27:8e:c1:93:ae:9d:20:
ae:32:2b:79:c1:22:91:7a:99:02:65:86:ea:60:a9:
f4:ee:85:70:5e:30:ca:bd:c8:b4:d1:3c:4d:c0:55:
ab:85:9d:27:2d:57:08:c0:7b:69:c6:00:fa:ff:d6:
ce:81:95:82:12:6e:63:1a:42:e9:4f:b2:83:37:59:
55:06:e0:b5:8e:fc:d6:7c:1d:96:a3:6d:49:f5:bc:
70:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:A3:0A:6E:3B:E9:D1:18:9A:59:45:91:FF:46:E9:0C:F3:B3:8E:5C
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:13:65:bb:ff:16:08:55:73:0f:51:bb:73:cd:da:4d:cc:d6:
8e:1b:a4:31:95:5a:30:2d:ef:5c:20:6a:e5:29:db:22:e8:7f:
25:02:6b:17:32:7b:8c:6e:8b:7c:00:6b:0b:26:50:e3:b0:0f:
6f:3b:53:0f:04:c7:cb:23:78:af:f5:b7:15:08:5c:37:bb:57:
a4:57:e1:88:3c:1b:1c:ae:50:ed:dd:01:90:8a:25:5e:7b:7b:
a0:12:c1:8e:6c:25:1f:bd:81:ec:8e:5c:b2:59:4c:83:28:69:
9c:20:74:4b:ff:7a:f5:46:b5:7d:85:2d:6b:3c:25:75:30:b2:
95:8f:50:68:9a:3f:4f:f0:4f:5f:b0:2e:5e:e1:b3:2e:40:0c:
3a:46:e2:f8:5a:f3:15:83:b4:3b:8b:63:f4:6c:e1:ce:62:62:
2d:2a:c4:08:f0:4a:73:34:ab:bc:f7:37:73:24:13:d9:d8:f0:
9d:1f:f0:77:f3:c9:9b:16:d2:a7:63:6c:30:a9:fc:6b:5d:79:
f9:79:b8:fa:0c:82:f7:11:5a:11:ce:de:14:63:c3:6f:3c:89:
56:06:33:dc:94:89:5c:a9:09:54:a2:b2:39:0b:9c:ef:19:2c:
c2:14:32:49:7b:08:c6:93:ee:af:b3:56:81:83:74:6d:a7:53:
de:62:4a:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+tv8VqJlEyNi9jgU09wd+1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3Y2VhYTYyNmNiZDg5MDUyZjM1NDUzMzVkZmRiMzFhMTMz
ODMwMDQwHhcNMjYwNzI5MTIwMDU0WhcNMjYwNzMwMTIwMDU0WjAzMTEwLwYDVQQD
EyhkNWEzMGE2ZTNiZTlkMTE4OWE1OTQ1OTFmZjQ2ZTkwY2YzYjM4ZTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA/L+Y36ph8WRzeR9LkplL8BUWzoml
Z2GAVMYEAv3zH9bL/VdnmSpL2C9l4lRY6eJt+yoOMNzKwqPkweioezD3uqNEFxoj
1qHqRpYozw60rGkP5J7Hg4tYiEwy/mjcNcCHAffAgj6vutTKglXYsQ7cmHEKgD1/
hzhunDf1bkB71/12qrtSDxZpj7TKMeSAWeznbrliD+eILIncE5F66poCOeEVUw64
TOiixFpiqCeOwZOunSCuMit5wSKRepkCZYbqYKn07oVwXjDKvci00TxNwFWrhZ0n
LVcIwHtpxgD6/9bOgZWCEm5jGkLpT7KDN1lVBuC1jvzWfB2Wo21J9bxwCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNWjCm476dEYmllFkf9G6Qzzs45cMB8GA1UdIwQY
MBaAFDfOqmJsvYkFLzVFM139sxoTODAEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAt
ZTE1YThiNzBlOGQyLzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi9hZDg5OTQtNTFmMS00YjY1LWFjYTAtZTE1YThiNzBlOGQy
LzEvTjg2cVlteTlpUVV2TlVVelhmMnpHaE00TUFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWRNlu/8W
CFVzD1G7c83aTczWjhukMZVaMC3vXCBq5SnbIuh/JQJrFzJ7jG6LfABrCyZQ47AP
bztTDwTHyyN4r/W3FQhcN7tXpFfhiDwbHK5Q7d0BkIolXnt7oBLBjmwlH72B7I5c
sllMgyhpnCB0S/969Ua1fYUtazwldTCylY9QaJo/T/BPX7AuXuGzLkAMOkbi+Frz
FYO0O4tj9GzhzmJiLSrECPBKczSrvPc3cyQT2djwnR/wd/PJmxbSp2NsMKn8a115
+Xm4+gyC9xFaEc7eFGPDbzyJVgYz3JSJXKkJVKKyOQuc7xkswhQySXsIxpPur7NW
gYN0badT3mJKww==
-----END CERTIFICATE-----
Generated at Wed Jul 29 15:31:14 2026 by rpki-client