Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
File: N97mrLx4K4x2lqQLKOgDOWGdDxs.mft (raw, json)
Hash identifier: fjTIcK7HOlcVCJ/IxAVrrkyJcoy5ckqAikmJLHmcn/I=
Subject key identifier: 4F:A1:FB:64:7B:74:56:26:A1:47:59:66:70:7F:76:67:38:5C:83:1B
Authority key identifier: 37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
Certificate issuer: /CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Certificate serial: 019DA3417F7CAC370EC939E26F3C34964189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
Manifest number: 18CA
Signing time: Sun 19 Apr 2026 01:01:11 +0000
Manifest this update: Sun 19 Apr 2026 01:01:11 +0000
Manifest next update: Mon 20 Apr 2026 01:01:11 +0000
Files and hashes: 1: N97mrLx4K4x2lqQLKOgDOWGdDxs.crl (hash: 6EvfbrNG3TaGYD0tmBofDplHbpDBXiVhx8HkUQ6wm3M=)
2: NRr2xnrc8q3h4uFkXN71z-KKA3E.roa (hash: P9SGhc4Yfp9gNj6Hs6UJwSGYWBkDoeITgWd2bUYfBvw=)
3: q8LLAWsYj15dDU4uGxTr8uDvbqE.roa (hash: +TDQWUOOqKp5vb78QVJ0zxHTWhdeGR0lnx+TBsmkF48=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 01:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a3:41:7f:7c:ac:37:0e:c9:39:e2:6f:3c:34:96:41:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37dee6acbc782b8c7696a40b28e80339619d0f1b
Validity
Not Before: Apr 19 01:01:11 2026 GMT
Not After : Apr 20 01:01:11 2026 GMT
Subject: CN=4fa1fb647b745626a1475966707f7667385c831b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:65:bf:d3:fd:3f:83:9a:de:14:46:d9:3e:1a:
1a:8e:97:02:85:94:0a:a2:e7:73:d4:41:32:1e:f5:
c0:7f:73:5f:37:3a:c4:54:bb:15:f7:da:f3:9f:04:
1f:99:fa:b1:49:62:19:73:9a:7c:25:f5:f8:ca:73:
fc:dc:27:30:3b:0f:78:64:5b:f7:87:7f:0f:57:15:
2a:cc:30:6e:2b:9e:69:bc:f0:2c:8b:22:12:48:cd:
d4:af:bc:ab:cf:a1:bb:a2:01:e3:eb:4d:ec:22:fb:
dc:1e:bf:2b:2a:b5:48:77:6a:d8:95:4b:b2:5e:71:
1c:3c:3b:24:25:3d:a1:42:4f:37:44:ac:37:bc:2d:
eb:8c:27:66:c7:35:81:20:ee:fe:4c:af:1d:de:78:
c3:af:a5:b9:c9:f0:a8:c5:85:a6:18:18:b1:a8:34:
96:49:2d:14:26:92:64:bb:7a:e8:2c:eb:35:ce:4a:
45:3c:0f:62:ea:f6:1b:1e:55:b4:b7:38:59:4a:03:
08:c7:a6:e9:93:ba:ca:c2:c6:18:7a:80:6b:f4:c4:
b6:64:aa:4f:0c:7d:5e:f2:c4:87:3e:06:40:20:ac:
42:e7:2c:e9:a1:82:da:ac:74:56:af:b4:74:9c:1b:
08:21:25:7d:f1:0c:2b:aa:2a:7f:eb:ac:8d:08:b7:
ce:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:A1:FB:64:7B:74:56:26:A1:47:59:66:70:7F:76:67:38:5C:83:1B
X509v3 Authority Key Identifier:
keyid:37:DE:E6:AC:BC:78:2B:8C:76:96:A4:0B:28:E8:03:39:61:9D:0F:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N97mrLx4K4x2lqQLKOgDOWGdDxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/020d47-2cc0-436b-b9f9-b73bfccb4e08/1/N97mrLx4K4x2lqQLKOgDOWGdDxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:04:b2:2a:f1:25:ec:c0:48:89:fe:15:54:cb:ad:36:d7:02:
8d:38:17:a4:74:6b:c4:3c:19:5d:60:c0:99:f3:a1:ae:11:b1:
9a:a4:54:e4:02:ea:a3:6f:e7:dc:2c:40:fd:2e:13:fa:35:b0:
e0:8b:bd:8e:18:95:7d:21:94:57:9e:c7:03:43:78:d2:da:f6:
df:41:17:5e:6e:67:66:33:9a:74:13:c6:de:ca:e7:31:24:4d:
02:8d:b2:37:5f:25:18:0d:2e:11:23:72:4a:c5:32:e5:b0:1f:
89:10:28:9c:fd:ba:e8:8c:bb:f8:d3:67:3d:50:ce:87:76:96:
24:57:99:f4:c0:6a:aa:ad:7e:b6:4c:08:cc:d2:36:f3:32:07:
62:81:ff:9e:c0:92:52:9a:5f:15:8d:14:b5:5a:b8:7b:8c:a7:
eb:f2:47:70:16:01:70:5e:aa:64:6b:d3:8f:fe:f2:f8:43:de:
de:47:01:f5:ca:73:94:10:6e:20:0d:18:a8:ab:67:5b:93:55:
a9:66:13:c8:b8:92:cb:b0:f9:b1:bf:9a:40:48:35:80:28:97:
99:94:ad:14:48:69:22:4b:fa:a2:11:69:94:f3:8d:2c:bb:8d:
78:93:75:a9:20:fd:8e:04:57:6e:e0:1a:4f:1e:6f:dd:1c:83:
d4:73:1f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:28:02 2026 by rpki-client