Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: MX+gOeLff9r/Lkp6yNN3/879HBIWacuU9ju9TLh394Y=
Subject key identifier: 69:5F:8B:D9:E5:A2:72:1A:9A:C5:66:76:DE:A9:2E:D2:59:4B:7C:38
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 01A0EC2F3980F8C37020893DB3819ACD1EEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1A83
Signing time: Tue 29 Sep 2026 08:01:52 +0000
Manifest this update: Tue 29 Sep 2026 08:01:52 +0000
Manifest next update: Wed 30 Sep 2026 08:01:52 +0000
Files and hashes: 1: 0BNtWi6SoPuxVR9fF8cG7zLKJdM.asa (hash: JQH0eRg1/MLbrOriU97ZXNo1uEgS+5g9El98zw5+Iwk=)
2: 6-4X2RTKNMpiEFYDjOyhWMKIEoo.asa (hash: g77oK6pTbejX2g1b5SIn9onRlyoGOjAwy0AE8HqTQYY=)
3: C3q1PlgupTSu7535g3AwDEhvM-k.roa (hash: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8=)
4: G04crXnxnwsY-wZQQQ-23nM91Po.roa (hash: pLGupbllfkIJitF0PCYQsDKFpIoSGHVmNvPx18E29Xo=)
5: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (hash: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M=)
6: N0-wLo3d8-mJYCRhurdBRO1t_B4.roa (hash: /UHlJczzfCnXbaUE6VWZu1Btrd9QX/hGlbajTUY+gcE=)
7: cjq4Tl5Zv8hqJ1gtAseRPtN79pU.asa (hash: GA4dh/bIEQ4oPs9+wDpRKBhwprwPPv1msthK5b2yByM=)
8: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: CW9lkTB1XnLvxJ5ir37W3Z24QgWksjjfYGHWt970BCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:2f:39:80:f8:c3:70:20:89:3d:b3:81:9a:cd:1e:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Sep 29 08:01:52 2026 GMT
Not After : Sep 30 08:01:52 2026 GMT
Subject: CN=695f8bd9e5a2721a9ac56676dea92ed2594b7c38
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:3c:f6:d1:57:f4:f9:0a:87:ae:3a:53:56:8d:
e1:e7:3a:d8:1a:4c:cc:95:48:92:e9:3b:10:60:0d:
58:bc:56:f4:7b:e0:55:f1:68:bd:f0:a7:6a:f5:31:
5e:66:75:14:60:d3:21:89:bb:72:72:fa:dd:f2:01:
1f:c3:79:6e:11:00:cf:59:8a:56:ec:20:11:30:70:
39:f0:07:39:17:f3:ed:7c:84:e1:c5:39:1e:b9:f1:
f5:c4:78:37:09:23:92:62:2c:78:7c:a7:f3:4c:2a:
43:f8:8c:51:b0:6f:70:11:38:bc:27:e9:62:94:30:
3d:a8:e0:92:7e:0d:28:df:ad:a9:cc:85:18:d9:cb:
d7:06:80:8b:9b:25:da:e4:53:ad:ed:cc:18:72:08:
d5:56:ff:8e:43:12:b0:de:bf:b5:1e:99:e4:38:c0:
4a:c4:e7:fe:d2:1e:14:1b:20:e1:ee:0e:89:e5:c7:
b7:2d:0e:22:64:13:7a:36:c7:95:a5:e1:37:a4:fb:
50:4a:92:a1:cf:ef:6b:31:68:2f:d6:e9:c8:88:eb:
97:3b:2b:f6:d8:67:fa:1b:73:e5:f5:06:fb:83:bf:
bd:0f:12:0b:38:3b:82:55:af:f0:4e:5a:51:ae:72:
bd:25:b2:cd:a8:6b:68:f5:b6:04:e1:1e:04:15:9f:
79:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5F:8B:D9:E5:A2:72:1A:9A:C5:66:76:DE:A9:2E:D2:59:4B:7C:38
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:b6:63:63:38:fc:61:f1:c8:89:64:4e:97:52:f9:57:2f:55:
fc:63:d2:e1:bd:32:30:29:3e:18:ae:f1:1f:9c:84:e3:16:c8:
2d:fb:8d:ca:ee:3b:7a:3c:7d:d2:9a:18:dc:30:31:48:e9:d9:
8f:c7:00:9f:cc:74:2b:0b:3c:e9:ff:d4:d2:49:8f:d3:54:9e:
7f:dd:a4:91:60:de:c3:91:89:5b:b3:84:ef:84:50:66:a1:c7:
a7:67:57:2f:81:73:d5:be:9a:81:5d:00:1a:eb:92:c4:ff:09:
ef:06:aa:9a:0a:65:d6:45:49:df:07:fc:66:c1:ef:2c:23:95:
ac:1f:32:3b:b4:3e:2d:b8:af:20:a8:67:db:2f:0a:85:f7:3f:
6c:3f:02:eb:9d:98:9b:73:e9:3b:d9:ab:38:56:5b:59:5d:84:
e8:ec:e2:63:d9:3e:07:f3:22:bd:4d:bb:ec:8e:16:5e:9d:ea:
27:72:61:28:fa:f6:bd:a5:69:49:8f:21:eb:84:f1:05:57:1f:
f7:1f:b2:36:5f:5a:b8:3b:36:54:96:16:6b:3b:51:3e:3a:08:
cf:8b:f3:ec:e2:a8:ab:6f:e9:4a:27:98:f7:5e:a4:67:b9:71:
d9:96:41:13:3e:12:64:90:07:20:04:64:a1:23:dc:84:10:a7:
dc:4e:b8:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 19:36:20 2026 by rpki-client