Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: puBsaAU7Sn2bgxiXRbsL9PmAAWpKEB3sLAtuQnVFILc=
Subject key identifier: A1:20:B9:03:C1:CC:16:3A:D9:F5:62:76:16:BB:47:0A:76:8B:93:CE
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 01A0DC176997346B5B8911B5F02B1B6AAEA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 11E1
Signing time: Sat 26 Sep 2026 05:01:56 +0000
Manifest this update: Sat 26 Sep 2026 05:01:56 +0000
Manifest next update: Sun 27 Sep 2026 05:01:56 +0000
Files and hashes: 1: Me0QmqvtVRnPHeWPR3hmcHHmhyI.roa (hash: mnVxOOQzF/EGSdMH+gxhLc4jjvJzEmOnwn8YEHzRuIQ=)
2: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (hash: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: PRG/ZpayDz2Ab9+Nl6Hf0Fw+RnIhNqSqyU6VUVtUBEs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 05:01:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:17:69:97:34:6b:5b:89:11:b5:f0:2b:1b:6a:ae:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Sep 26 05:01:56 2026 GMT
Not After : Sep 27 05:01:56 2026 GMT
Subject: CN=a120b903c1cc163ad9f5627616bb470a768b93ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b5:d2:76:8f:2e:98:a1:d2:e2:ff:db:a6:c0:
bf:4c:29:a9:97:8d:a1:57:13:85:1d:fe:c0:61:63:
e5:2b:68:7d:b9:a7:a0:02:21:e8:ff:7e:6e:68:7a:
a8:1b:47:d7:80:b2:51:39:16:a5:55:70:90:ae:75:
bd:b1:7e:0a:2a:42:7c:81:27:ac:74:b1:a7:e6:3b:
a4:3e:84:94:77:8b:e7:87:9b:cd:5d:16:49:6d:46:
4b:8f:23:fb:8d:be:da:5e:33:1b:43:bc:1d:64:42:
42:e9:4d:f6:c7:34:e2:f1:68:4f:06:05:b3:ad:90:
d7:2d:3d:83:2d:44:ca:31:44:c5:6f:2f:30:06:b1:
ec:d4:ac:e5:a3:3b:45:9e:57:93:b0:ec:dc:f3:9e:
b6:1e:3e:0a:83:18:6e:b1:4d:3b:bd:74:8b:4c:fc:
c7:25:f2:e8:55:df:1d:5a:05:8c:e9:0d:35:93:02:
50:0b:15:81:85:9a:a1:26:dc:ab:f7:f8:34:39:dc:
7f:1a:14:20:38:f4:43:f5:57:9b:35:4c:86:48:83:
29:46:ee:20:e8:f4:66:dd:1b:86:56:7e:4e:e8:4d:
23:b3:18:81:26:56:57:6e:7a:ed:3a:b9:a7:01:29:
e3:13:b0:fc:54:74:2a:08:63:d9:88:bc:4f:92:54:
88:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:20:B9:03:C1:CC:16:3A:D9:F5:62:76:16:BB:47:0A:76:8B:93:CE
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:11:5f:7a:88:df:00:88:cd:39:68:28:4f:de:c8:a4:bf:ba:
0b:51:65:a7:62:96:83:7d:95:52:b9:f7:98:23:81:ed:ea:70:
15:e7:a0:78:fe:23:40:75:a1:52:5a:9f:f9:05:a9:86:6b:f7:
ba:15:5e:de:b7:ad:fb:e4:71:b4:ae:74:d9:1e:55:45:4d:2c:
d7:4c:78:7a:b8:bf:42:3a:41:34:de:93:33:19:52:dd:d3:66:
56:91:4f:d0:8a:b7:75:fe:e5:45:b1:e8:a0:bb:8a:28:5d:da:
53:5b:4e:4c:22:8a:21:b9:6d:c4:86:dd:8c:05:83:17:60:13:
2b:9f:0d:3e:f1:f6:54:20:5a:60:0b:e1:c2:99:06:f7:35:ac:
17:86:bb:d7:d4:2b:cf:4d:31:75:27:20:32:2c:47:f7:47:a3:
d0:25:63:8f:41:4b:4c:33:60:fe:ad:27:ac:a5:3c:39:7f:2d:
9b:9c:5e:77:3b:f3:ad:fe:3b:7f:da:f3:e6:73:28:ac:c7:a2:
8d:1f:23:d5:63:40:8f:a9:73:31:e4:e8:ee:38:72:69:ac:16:
87:b2:ce:8f:55:4a:4f:23:32:ec:0d:38:7f:e2:ad:20:43:c2:
c8:6e:69:7e:d7:c6:1e:72:31:9a:8c:b7:3a:18:1b:08:e9:8f:
8a:f3:00:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:46:49 2026 by rpki-client