Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
File: N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft (raw, json)
Hash identifier: uwe94Zfqc0uM5HKWNxeXSMGSwiSNFECZ5LhZuTCu+Bo=
Subject key identifier: AF:50:2E:D6:B1:A0:E9:9B:1C:62:FE:65:1B:8F:55:90:7D:3D:3D:14
Authority key identifier: 37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
Certificate issuer: /CN=37ceaa626cbd89052f3545335dfdb31a13383004
Certificate serial: 019CAB34A429BC28AEF7779BB4207C8E1332
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
Manifest number: 17A1
Signing time: Sun 01 Mar 2026 21:01:19 +0000
Manifest this update: Sun 01 Mar 2026 21:01:19 +0000
Manifest next update: Mon 02 Mar 2026 21:01:19 +0000
Files and hashes: 1: N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl (hash: Srb2Z8tG1DxhHcqekZRadXxg+OpdnUJkPea1G/gvk4Q=)
2: ZdY9JbmuGwJjZBrSsybFrZALNak.roa (hash: MxUNrq+03Xb+mPzBkhQCtG9vhufKirzFv5rDtH5dNL0=)
3: fHxwGlzfMCLIiDp8Vv2OdxscGso.roa (hash: o4zFULkPLc/gsnlMwCBS25MbPklg6inUIBFIZjjQq/I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:34:a4:29:bc:28:ae:f7:77:9b:b4:20:7c:8e:13:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37ceaa626cbd89052f3545335dfdb31a13383004
Validity
Not Before: Mar 1 21:01:19 2026 GMT
Not After : Mar 2 21:01:19 2026 GMT
Subject: CN=af502ed6b1a0e99b1c62fe651b8f55907d3d3d14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:93:23:23:60:d7:d2:08:84:0a:e2:fd:7a:c4:
bd:57:00:6d:e8:d4:bb:6d:e3:dd:c2:4a:39:b2:77:
22:b1:24:4b:55:a6:11:8b:f8:5e:fd:ba:ff:de:35:
b8:5c:b2:9d:eb:03:80:36:e6:6f:84:70:1a:2b:6c:
9c:39:e9:8d:4a:b1:a4:d6:39:78:39:1f:78:66:df:
58:76:b2:84:af:ad:54:08:ae:51:b0:9b:f8:8b:54:
39:0e:cf:f2:58:2e:91:52:32:43:41:c2:c5:d5:26:
45:52:f2:20:ff:bd:36:de:85:10:ea:a0:86:e9:88:
0a:3c:8a:7e:8a:9f:40:9f:58:ba:a5:cf:40:b1:00:
94:9f:06:63:eb:51:dd:15:38:91:5e:f7:6a:a3:2d:
56:b1:df:4a:2c:6c:fb:1a:86:94:ee:b2:4c:eb:2f:
3c:3a:cc:67:c6:36:d9:65:af:59:6b:b4:1e:88:ff:
3d:06:f1:a6:05:27:60:f7:0c:91:d8:8d:b3:18:94:
47:2d:02:d4:c7:a8:73:4c:21:1f:11:bc:a7:ad:30:
7a:70:d9:ca:f3:ff:41:2c:9d:fe:b5:8a:06:35:7d:
69:2f:94:d1:ec:8b:66:4e:7f:57:02:fa:91:2e:c6:
62:cb:7e:9f:ea:e9:d1:a3:66:08:e2:07:55:ba:a2:
5a:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:50:2E:D6:B1:A0:E9:9B:1C:62:FE:65:1B:8F:55:90:7D:3D:3D:14
X509v3 Authority Key Identifier:
keyid:37:CE:AA:62:6C:BD:89:05:2F:35:45:33:5D:FD:B3:1A:13:38:30:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N86qYmy9iQUvNUUzXf2zGhM4MAQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/ad8994-51f1-4b65-aca0-e15a8b70e8d2/1/N86qYmy9iQUvNUUzXf2zGhM4MAQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:eb:7f:29:62:12:96:d1:ae:75:47:e6:86:d7:9e:90:08:b1:
40:95:74:0d:99:20:e5:06:1e:f5:6c:6a:0d:52:47:8d:74:9e:
59:f3:93:c0:2c:26:bf:27:44:30:a8:f2:79:c7:55:55:a2:b1:
a1:54:2c:67:e7:70:c2:ed:46:33:d0:a8:35:45:4d:cb:f9:23:
a3:63:5b:3f:a5:83:c1:9b:8a:8f:29:ca:d8:7e:ba:82:12:29:
ce:fb:20:9d:6d:62:47:29:4d:31:bc:aa:f8:fa:6e:4f:67:2b:
bb:dd:7d:8c:80:67:39:dd:1c:7d:35:93:75:11:2f:0e:38:31:
a3:63:d4:67:c6:1e:97:4c:21:40:77:c7:f3:72:d1:37:59:27:
a2:d4:14:a4:1a:ad:5a:03:f4:f4:75:72:db:b7:88:f3:19:91:
19:e6:39:72:1d:f6:c7:ce:5c:74:bf:fb:7f:9d:8d:d3:cc:71:
6e:9d:cb:e6:61:36:e4:b4:62:ba:07:be:59:8e:c3:37:2c:06:
71:95:de:1f:35:f4:32:0d:9e:bf:48:bd:e3:47:40:44:b7:bf:
8e:88:05:83:d7:62:52:a7:8d:00:91:7f:c3:cf:fd:55:ed:9e:
39:15:c5:a1:e3:e1:a4:1b:00:12:ac:98:8b:52:46:7e:1b:96:
30:70:33:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:05:23 2026 by rpki-client