
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
File: N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft (raw, json)
Hash identifier: Y+Zb/tMahMoIvCTnMArsbexPS4Uq5qaHkRISZvQvGSs=
Subject key identifier: 87:43:E9:98:D7:92:0F:B4:D6:9A:5A:4B:F8:2D:91:07:AD:83:BF:18
Authority key identifier: 37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
Certificate issuer: /CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Certificate serial: 019D97AA8C91F8A7A1C669B91A5578715F01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
Manifest number: 0A54
Signing time: Thu 16 Apr 2026 19:00:29 +0000
Manifest this update: Thu 16 Apr 2026 19:00:29 +0000
Manifest next update: Fri 17 Apr 2026 19:00:29 +0000
Files and hashes: 1: N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl (hash: xdYqQu/6Ia6tAZlPDGXCLk0SK2f4RkvaOM7j1eaF+Pc=)
2: TCXCSy8OTt2z48kEbdsf0Ii50x4.roa (hash: ABalj2aODIZMqx3xajCEDvRzB5V6E/YYH2xej8zDQ0M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 19:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:aa:8c:91:f8:a7:a1:c6:69:b9:1a:55:78:71:5f:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37f4b91a3ffce9f97505a73cfd5e4ad4e35e042d
Validity
Not Before: Apr 16 19:00:29 2026 GMT
Not After : Apr 17 19:00:29 2026 GMT
Subject: CN=8743e998d7920fb4d69a5a4bf82d9107ad83bf18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:e5:ab:79:82:b4:30:ff:48:b0:2d:a6:7c:60:
91:78:e3:95:36:92:29:af:dc:a1:ff:6f:62:34:87:
cd:a7:e6:f4:64:78:c9:2d:26:8b:1a:a5:8a:9d:2e:
7c:50:e1:dd:34:8c:c2:3a:e4:08:96:13:d4:46:e4:
bc:1c:68:a1:3d:25:89:6e:c8:36:2f:03:6f:3f:48:
b0:c8:93:f7:f8:5c:83:33:d4:3e:db:af:69:40:ef:
59:ac:48:0d:77:b3:f0:99:71:08:63:32:ba:14:11:
76:53:0e:e1:aa:8f:5c:e5:b7:3f:cb:88:9f:0d:dc:
a0:ff:52:c3:ac:a4:8b:ad:45:d5:c3:7b:6f:24:92:
08:51:67:77:e1:fe:a1:51:13:e5:40:0d:03:9a:27:
08:8c:48:62:08:78:06:5f:f9:21:ab:d7:5e:94:88:
2a:91:f1:36:3d:9b:32:69:cb:bb:19:a5:30:14:1a:
33:7a:47:aa:6b:ef:7a:ae:24:48:3d:82:18:2e:74:
5c:16:1e:8e:e6:a6:75:20:65:55:96:13:59:65:35:
09:6e:63:fb:0f:4f:30:77:92:77:59:0d:13:27:2f:
60:0e:7c:22:ab:35:ae:f5:bf:36:83:2a:7d:79:ca:
d8:e9:39:e1:a8:2a:ef:44:9a:e7:81:d7:df:47:8b:
41:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:43:E9:98:D7:92:0F:B4:D6:9A:5A:4B:F8:2D:91:07:AD:83:BF:18
X509v3 Authority Key Identifier:
keyid:37:F4:B9:1A:3F:FC:E9:F9:75:05:A7:3C:FD:5E:4A:D4:E3:5E:04:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N_S5Gj_86fl1Bac8_V5K1ONeBC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/85a03d-87c3-4401-9a0d-ab2bafa1ae4d/1/N_S5Gj_86fl1Bac8_V5K1ONeBC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:b4:87:96:85:ea:fa:5b:4a:c7:a3:2d:14:89:45:f6:1d:c5:
38:de:e4:39:f4:07:cd:ab:40:a8:42:a4:4e:ea:99:ad:df:57:
3b:e0:be:85:cd:13:45:78:7d:89:b7:e3:b3:c9:b1:0f:7c:48:
c7:69:7c:0f:ca:c8:e2:b7:46:73:59:42:36:ed:7e:12:59:13:
5e:16:31:41:85:60:f1:34:43:09:14:ec:a3:4b:54:0e:4b:29:
ed:e6:f7:eb:ca:fe:7e:bd:c9:5d:a4:0b:b2:40:ee:c5:be:0b:
69:97:5d:ef:48:9a:3d:72:94:b2:68:54:8a:9b:21:d7:0c:d5:
6f:7d:1f:1b:13:98:eb:84:3a:fb:c0:84:5a:8d:51:52:b9:3d:
40:18:7f:f0:b1:3e:d3:d8:0b:2d:10:87:99:01:bc:db:b1:94:
72:b1:d3:a6:fa:bf:a4:49:69:cc:da:ee:68:b4:2b:29:6b:7e:
2b:9c:4a:23:d6:1d:b0:e8:71:a5:f7:be:97:77:ea:2c:6d:bd:
16:e7:8f:4b:12:68:c5:a6:f6:75:12:4b:c1:3b:d2:95:65:d7:
d7:a7:73:d5:f8:e9:29:2d:ab:67:1b:99:70:70:2a:87:88:79:
5b:b5:26:29:b1:7a:f7:3a:82:51:b9:50:0f:9a:77:7d:94:11:
d7:2a:66:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:39:31 2026 by rpki-client