
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
File: N9J_wkRD_N1LG2XPyAeMShQon54.mft (raw, json)
Hash identifier: 2zhBP918QEMpNS6ubEqzNpRAolJzGVCnCRJR6cx9c/g=
Subject key identifier: D4:C2:0E:5D:78:A2:5D:4D:10:9E:B9:91:2D:3A:AA:28:72:EA:5D:04
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 01A0C1B187F63FC70A796CDE27D8B166F07F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
Manifest number: 1A66
Signing time: Mon 21 Sep 2026 02:00:32 +0000
Manifest this update: Mon 21 Sep 2026 02:00:32 +0000
Manifest next update: Tue 22 Sep 2026 02:00:32 +0000
Files and hashes: 1: N9J_wkRD_N1LG2XPyAeMShQon54.crl (hash: X1FukhnPyQZlkbBKfR/zlIB1nt5F8tMfUN0a+dMZ5t8=)
2: e8LfT7gfSGa2muv0jF7A1t1LYdk.roa (hash: WRAYYzwkRc+Wb2Yiz2tOnruT9Tcor90WcXfJXFu2bXg=)
3: luwzE6T9g1FODC1IWX_092L80go.roa (hash: SmuSPcDUrdZTjJf8gY6ZuzWcL8JammWkXJbrb0xGEHM=)
4: pN_RCcBz_c4Yoa4ysWqJTFA6DpQ.roa (hash: +w/OmPrH18ps5DOqBKDKZJibz+NbK5xc+/wpQsN34+s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c1:b1:87:f6:3f:c7:0a:79:6c:de:27:d8:b1:66:f0:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Sep 21 02:00:32 2026 GMT
Not After : Sep 22 02:00:32 2026 GMT
Subject: CN=d4c20e5d78a25d4d109eb9912d3aaa2872ea5d04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8a:fe:45:b0:0e:bb:5a:5b:6a:d7:8c:5a:17:
5b:05:55:7a:71:cc:af:77:38:31:9c:46:98:8b:13:
08:86:7a:d6:10:d8:ca:cd:21:9e:59:75:48:e5:67:
b8:ca:1c:8f:b9:55:b4:3a:d2:65:21:69:8f:af:e2:
ea:99:78:b5:ba:15:09:de:cd:3a:68:71:17:48:41:
02:79:b7:83:4e:ff:35:6e:09:92:5d:fb:50:80:67:
9c:8d:33:11:40:e6:aa:8c:e5:e4:fa:14:ce:f7:64:
b3:8c:f8:ef:c0:19:ba:a3:c2:cb:d6:f6:76:8f:f7:
a3:9a:be:36:c5:cd:84:39:46:58:a6:0a:08:a3:80:
a7:e6:07:ac:a6:27:cf:22:5a:2d:27:5b:17:bf:c3:
66:fd:48:80:30:f0:28:79:21:f5:28:a0:fa:9e:ef:
39:bc:f4:aa:79:42:45:82:d3:f2:15:4a:ea:26:75:
f6:66:e6:d1:9f:32:5f:d1:2f:ab:75:27:cd:69:c3:
bf:79:bb:5f:42:68:04:83:b3:b2:51:6a:4b:67:c5:
83:b7:72:a0:34:cf:f4:2f:1e:39:37:1a:d7:c0:53:
ef:1b:06:b8:4f:c4:97:a3:e0:2e:5d:00:e4:7c:27:
ad:f9:01:ad:5e:c2:94:95:35:eb:09:af:32:0b:ce:
9c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:C2:0E:5D:78:A2:5D:4D:10:9E:B9:91:2D:3A:AA:28:72:EA:5D:04
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:af:f2:25:30:f0:94:64:10:84:79:b8:cc:a8:e9:8c:28:f3:
e4:b6:22:be:de:37:4a:b8:ee:90:13:b4:be:5d:a0:1d:a9:c8:
26:75:fc:da:d7:1b:ca:42:5f:24:2a:c8:7f:64:11:4c:57:d5:
45:34:90:81:15:71:e4:a0:4f:ea:17:e1:4d:5b:f7:62:63:43:
ad:da:65:eb:6d:6f:bf:56:92:14:aa:dc:a0:15:80:b9:b0:de:
40:34:7d:44:42:fb:0e:01:99:31:c3:20:37:86:df:6d:19:f9:
9b:79:22:1a:3f:f9:c8:22:1f:ce:a8:02:e4:4a:f9:2c:40:39:
37:eb:ff:d9:fc:d2:1c:1b:11:3f:bb:b3:67:15:c9:2d:64:b6:
99:07:54:e4:b1:12:fd:7a:f4:17:e9:c8:26:16:f5:c8:ce:a8:
f1:2c:51:59:bd:af:94:de:bc:e3:3d:e2:b1:0b:b5:94:67:99:
d3:16:47:92:9c:04:2a:a0:d5:c1:42:e3:01:6e:97:b7:4e:f9:
4b:67:8a:f5:2a:a2:36:3d:bd:72:b8:7a:96:0e:2a:d4:9a:75:
dd:de:21:d0:4d:74:20:72:0f:17:89:5b:7c:38:5d:e3:9c:de:
a9:6b:36:24:08:09:2e:0c:92:15:48:22:6d:db:88:52:17:18:
7f:15:ee:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:49:09 2026 by rpki-client