Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
File: N7giEJlIajsTPgE540uTQmTN1wA.mft (raw, json)
Hash identifier: z3zj+JrCckFz5IVMd4Z6hpMofOjy3+pG05iWTGPpFpE=
Subject key identifier: A2:6E:A7:0D:D8:09:E5:C7:01:CA:08:5F:8F:2F:D8:20:EC:C3:16:B6
Authority key identifier: 37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
Certificate issuer: /CN=37b8221099486a3b133e0139e34b934264cdd700
Certificate serial: 019D9A74EAFCCF31B9B99EF703DA8422E621
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
Manifest number: 1237
Signing time: Fri 17 Apr 2026 08:00:46 +0000
Manifest this update: Fri 17 Apr 2026 08:00:46 +0000
Manifest next update: Sat 18 Apr 2026 08:00:46 +0000
Files and hashes: 1: 9B6RvTj5E-6KAAA5Lh5MJHZLGiE.roa (hash: J/ckLwZzEt0PQV77vngn+NxdBjiE32bwHDQ3p9KUBfE=)
2: N7giEJlIajsTPgE540uTQmTN1wA.crl (hash: 7L6pZ6oIHgBdpBEaV1s3jyoBFHpr4hILSvuClYmoKv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:74:ea:fc:cf:31:b9:b9:9e:f7:03:da:84:22:e6:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37b8221099486a3b133e0139e34b934264cdd700
Validity
Not Before: Apr 17 08:00:46 2026 GMT
Not After : Apr 18 08:00:46 2026 GMT
Subject: CN=a26ea70dd809e5c701ca085f8f2fd820ecc316b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:22:41:cd:93:c4:5f:52:1b:59:4e:fc:23:49:
bb:16:45:9e:06:0c:c6:2b:ce:d8:dd:cd:4b:48:03:
dc:22:f1:f1:6e:da:46:b8:e8:19:59:10:c5:05:37:
b7:77:e0:61:12:ff:b6:22:9a:43:5f:c5:17:e8:e6:
6d:2c:2d:58:b1:fb:5d:14:c6:c3:ac:10:05:41:3d:
a3:4c:f0:15:f2:3f:ec:aa:3c:b1:25:3b:5f:3f:6b:
ad:fc:cf:b1:dc:ce:4b:74:9e:89:89:5f:a0:ef:5a:
73:fa:4e:19:34:21:bc:50:e8:19:6f:21:11:eb:37:
5e:b8:8c:f2:cc:0d:ab:78:a2:ad:bf:34:1f:c7:a1:
1c:6a:77:40:ef:80:9d:91:ba:4a:f7:b8:82:20:26:
e2:c4:98:53:82:c1:c9:ea:b6:0d:c4:0e:7d:09:68:
c8:af:b2:6d:7f:a5:59:75:c6:d2:a5:03:ca:ef:bb:
70:e0:a9:16:b5:d5:e4:b4:da:13:22:b3:b1:7c:90:
d1:e9:e2:52:0d:f4:d4:5f:04:a6:f1:74:24:79:4e:
48:91:8e:d8:1e:87:b7:0c:0c:e6:8d:72:c9:99:9f:
8a:5d:81:26:e2:71:69:aa:64:b5:7f:22:52:79:e8:
c0:2c:89:37:10:a9:f6:b1:98:33:fd:46:0e:e9:ea:
6d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:6E:A7:0D:D8:09:E5:C7:01:CA:08:5F:8F:2F:D8:20:EC:C3:16:B6
X509v3 Authority Key Identifier:
keyid:37:B8:22:10:99:48:6A:3B:13:3E:01:39:E3:4B:93:42:64:CD:D7:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N7giEJlIajsTPgE540uTQmTN1wA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/de956f-e55b-437e-85d9-686f836cbcad/1/N7giEJlIajsTPgE540uTQmTN1wA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:67:f5:a6:32:af:50:c2:76:01:bf:85:26:58:98:0c:2f:0f:
1b:4d:3a:0d:14:20:af:37:bf:55:9f:73:65:b9:90:52:d6:0b:
9d:d4:02:ef:6e:61:c6:3e:c7:a7:59:d0:ce:20:05:0f:9d:61:
22:26:cf:1a:14:0b:d8:bd:80:f1:bc:55:16:df:84:88:c3:64:
34:87:2b:6f:f1:71:1c:68:ef:cf:45:48:0f:d4:d4:d1:ff:9e:
81:19:14:d6:0d:ac:7b:10:51:3c:35:1a:bb:0b:3f:a8:2b:03:
b6:3a:8b:fa:83:ec:f5:4c:26:78:45:c1:11:98:3e:37:08:35:
14:21:39:05:ea:1c:a0:fa:d1:5b:43:fc:65:ac:cb:75:f0:c6:
f3:e0:2a:c0:3a:b1:e6:78:36:a5:ae:7e:66:9d:9a:01:8d:df:
c5:bb:b8:ee:fb:33:fb:dd:22:3a:1e:25:51:20:e9:93:f3:dd:
24:25:92:cc:19:22:25:9d:15:6c:f5:2b:5d:65:7e:8c:eb:d0:
42:cf:49:79:ed:9e:34:a1:cd:29:ee:f4:15:3f:55:7d:64:a7:
61:fe:3d:af:78:3b:a1:b6:64:b3:a2:d8:bb:c9:ed:bf:af:15:
b8:3a:2b:53:fa:24:80:80:b6:a3:7f:d8:a1:39:8e:81:94:78:
c8:41:f7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:14 2026 by rpki-client