Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: FjToMNJledrIZcUfGXwPQ5b9CHKbV3L8UPK4KZZu1eI=
Subject key identifier: AC:15:16:7A:74:EB:F4:C7:F1:EB:50:EA:20:E8:F5:27:B0:2B:84:81
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 019D25F19CB3E7B058160F6674E41B415995
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0FF5
Signing time: Wed 25 Mar 2026 17:01:24 +0000
Manifest this update: Wed 25 Mar 2026 17:01:24 +0000
Manifest next update: Thu 26 Mar 2026 17:01:24 +0000
Files and hashes: 1: Me0QmqvtVRnPHeWPR3hmcHHmhyI.roa (hash: mnVxOOQzF/EGSdMH+gxhLc4jjvJzEmOnwn8YEHzRuIQ=)
2: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (hash: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: Dht6j0ijG5leLDXJvr0NutZ49sZh8z7i5HCfcpPAMbA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:9c:b3:e7:b0:58:16:0f:66:74:e4:1b:41:59:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Mar 25 17:01:24 2026 GMT
Not After : Mar 26 17:01:24 2026 GMT
Subject: CN=ac15167a74ebf4c7f1eb50ea20e8f527b02b8481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:b7:84:65:b0:5d:e9:8c:9d:88:30:dd:7a:ba:
ed:14:c7:a7:22:5a:b4:63:c5:61:36:e4:ad:f5:d5:
51:00:f8:ef:67:ab:6d:de:f1:89:eb:85:13:c8:39:
b3:71:c1:89:94:40:89:60:02:29:34:cf:79:66:37:
58:9b:ab:e5:4d:74:33:33:ce:6b:f6:57:3e:a8:0f:
90:eb:0b:ac:7f:4b:09:95:29:0c:1c:dc:b6:b4:a3:
4a:fd:52:34:4f:e2:12:10:83:d8:23:86:1a:7d:f7:
03:ff:59:0e:db:88:03:8a:a4:0e:8e:89:38:60:ba:
c4:83:2e:47:45:3f:7c:97:49:c3:25:5f:2e:63:a1:
0e:54:86:19:7a:73:29:29:85:72:d2:50:a6:8c:6e:
47:55:6a:4b:67:0b:e0:8f:87:dd:d3:ff:6e:48:9c:
5f:dd:ee:11:e9:fe:53:dd:b6:5f:d0:d1:34:2c:c0:
10:c0:69:81:56:16:43:88:2c:39:99:66:8f:1f:a9:
70:65:25:f2:9d:1f:2a:3a:9e:77:f6:cb:40:46:ca:
2b:79:85:21:16:5f:c8:91:84:31:ad:15:23:cf:8c:
45:3b:58:66:12:e6:7a:94:ad:96:c3:f5:ed:d4:1c:
c6:98:bc:5a:8d:b8:39:12:10:4e:4e:1f:c8:bb:49:
03:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:15:16:7A:74:EB:F4:C7:F1:EB:50:EA:20:E8:F5:27:B0:2B:84:81
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:83:a0:01:fe:1c:ca:e7:d3:72:9c:f3:f7:d5:e0:10:6d:98:
a5:d7:09:b0:d2:99:7d:b7:b3:e8:7c:25:5c:17:ae:a1:8d:0b:
71:4e:f3:7b:33:2f:78:1a:8f:6a:b9:2e:6d:98:b7:8f:37:a6:
80:11:5e:88:50:da:95:25:37:c2:f6:86:2a:ed:b3:9a:06:02:
b5:13:3a:20:d5:8b:48:1a:02:eb:93:73:b2:06:f6:94:dd:6d:
fe:60:a2:00:33:69:57:c2:fd:7c:3a:50:61:6b:0c:b4:96:9b:
30:5d:69:ac:06:7f:e6:c8:6b:47:f4:6e:27:7a:c1:d3:ac:14:
a9:9c:f9:9d:38:0e:02:67:19:50:a3:16:46:e0:87:9e:b6:2f:
3b:42:99:b6:f4:ce:0d:71:cc:75:80:5c:b2:59:a9:f2:92:8a:
0a:4b:33:df:28:1f:81:c8:7b:53:39:9b:83:2c:a4:e6:76:df:
7f:66:95:8f:d8:ee:35:1c:e5:c6:60:d6:84:4b:ae:b1:f1:44:
81:6c:14:fb:e8:52:bd:f7:96:19:42:e1:2a:96:b2:8e:68:c3:
9e:8b:11:b0:93:b6:41:cf:ed:4f:98:c2:4b:4d:bd:f9:77:b2:
01:77:cc:62:a3:c5:e9:7b:e0:28:a8:4a:77:4b:92:2b:e2:6a:
4d:7c:bd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:24:24 2026 by rpki-client