Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: /m+vh6AF4ORv1Z/CXSUO9ljoJ+ZtlChHBp93J0SINhQ=
Subject key identifier: 1C:98:48:A9:8A:A2:1C:C8:0B:10:77:37:B0:B3:CB:3B:46:F6:BC:D8
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019F8EA2168ADF4A8B5888F43E020AA493F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 19CE
Signing time: Thu 23 Jul 2026 11:00:14 +0000
Manifest this update: Thu 23 Jul 2026 11:00:14 +0000
Manifest next update: Fri 24 Jul 2026 11:00:14 +0000
Files and hashes: 1: 0BNtWi6SoPuxVR9fF8cG7zLKJdM.asa (hash: JQH0eRg1/MLbrOriU97ZXNo1uEgS+5g9El98zw5+Iwk=)
2: 6-4X2RTKNMpiEFYDjOyhWMKIEoo.asa (hash: g77oK6pTbejX2g1b5SIn9onRlyoGOjAwy0AE8HqTQYY=)
3: C3q1PlgupTSu7535g3AwDEhvM-k.roa (hash: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8=)
4: G04crXnxnwsY-wZQQQ-23nM91Po.roa (hash: pLGupbllfkIJitF0PCYQsDKFpIoSGHVmNvPx18E29Xo=)
5: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (hash: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M=)
6: N0-wLo3d8-mJYCRhurdBRO1t_B4.roa (hash: /UHlJczzfCnXbaUE6VWZu1Btrd9QX/hGlbajTUY+gcE=)
7: cjq4Tl5Zv8hqJ1gtAseRPtN79pU.asa (hash: GA4dh/bIEQ4oPs9+wDpRKBhwprwPPv1msthK5b2yByM=)
8: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: jwFQDOKHyID2WIle3m1/9k4fB/9xTuQx8tFxRc3mFTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 11:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:a2:16:8a:df:4a:8b:58:88:f4:3e:02:0a:a4:93:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jul 23 11:00:14 2026 GMT
Not After : Jul 24 11:00:14 2026 GMT
Subject: CN=1c9848a98aa21cc80b107737b0b3cb3b46f6bcd8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:e5:f7:cf:4e:8c:31:01:19:df:03:d0:9d:44:
a2:2d:82:96:7f:6e:46:9d:47:61:1a:6c:06:19:eb:
af:65:9f:5c:ac:ad:ca:59:94:eb:98:df:7a:a6:4c:
4a:91:c0:6b:76:62:49:3a:83:5d:a8:e4:7f:92:79:
e2:09:23:20:75:12:ff:59:a5:5b:8d:41:91:17:31:
d8:27:d4:78:04:c4:68:b1:be:5d:d5:06:00:cd:9a:
6e:8e:97:0e:42:d6:75:53:6b:ff:ec:e1:10:51:29:
42:92:68:02:87:77:1e:d1:03:59:39:9a:23:0f:f8:
55:6d:48:f0:4e:9b:12:d3:ae:cb:c0:4a:86:e2:20:
57:87:7e:50:24:ff:84:d9:c1:6e:e8:b4:b4:33:56:
d8:1f:47:d9:89:d2:22:cb:8b:89:b2:a0:61:60:09:
1c:1a:5c:be:ad:df:28:bc:ea:99:9d:fa:83:60:42:
e8:de:fb:8b:d7:ca:cd:9a:d3:a6:59:89:6f:52:7e:
0d:f5:68:43:06:78:ea:5a:f3:83:01:ba:85:a9:43:
94:76:2e:80:2d:cb:b7:26:24:4f:de:ac:42:fe:31:
b5:05:9b:51:2b:cc:62:96:5d:3c:86:1c:48:1a:11:
dd:7c:f9:75:cf:f8:fe:1e:26:fa:18:cb:40:2b:e2:
05:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:98:48:A9:8A:A2:1C:C8:0B:10:77:37:B0:B3:CB:3B:46:F6:BC:D8
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5f:cf:b5:4d:6b:7d:52:ee:e7:c3:a1:99:a0:8d:19:ff:a7:
a6:0d:e8:d9:a6:77:28:58:3c:1e:55:b2:0c:9a:a3:a2:79:0b:
95:8d:db:e1:b1:7d:96:e0:b0:b6:67:3c:bd:33:0c:51:a0:38:
e4:2d:1e:44:81:11:6e:10:0d:3a:a1:a8:d8:31:33:30:f6:06:
8b:c8:dc:bd:57:e0:52:35:7d:03:12:72:3d:9e:e7:3a:0f:47:
d5:2d:37:c3:dd:34:6f:89:5e:ad:7e:c4:a8:a3:8d:11:b1:0f:
ba:80:6b:91:36:b7:5b:c4:98:a2:45:e8:ca:3c:80:16:e4:82:
d6:10:fd:1f:9b:85:74:43:1a:b8:b6:a4:c5:83:67:9d:d1:ad:
ee:e6:d9:6f:d6:e8:06:3c:c4:20:f3:02:77:1d:61:ed:b7:ce:
41:8f:8f:9a:37:ff:12:09:e2:85:53:59:f6:ec:30:c9:d7:13:
3d:07:ba:38:6f:16:82:85:6c:24:14:e1:ed:c4:10:98:1a:03:
e0:19:66:7f:7f:26:91:bc:af:0f:53:e0:27:88:5d:a2:da:5e:
d9:21:67:d2:8b:d2:c1:40:94:41:72:b8:12:10:12:f7:ec:38:
1c:3d:36:76:a1:5b:cc:81:fa:4e:ac:20:56:96:a7:82:47:ac:
95:a9:95:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+OohaK30qLWIj0PgIKpJP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj
MzBlNDUwHhcNMjYwNzIzMTEwMDE0WhcNMjYwNzI0MTEwMDE0WjAzMTEwLwYDVQQD
EygxYzk4NDhhOThhYTIxY2M4MGIxMDc3MzdiMGIzY2IzYjQ2ZjZiY2Q4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4uX3z06MMQEZ3wPQnUSiLYKWf25G
nUdhGmwGGeuvZZ9crK3KWZTrmN96pkxKkcBrdmJJOoNdqOR/knniCSMgdRL/WaVb
jUGRFzHYJ9R4BMRosb5d1QYAzZpujpcOQtZ1U2v/7OEQUSlCkmgCh3ce0QNZOZoj
D/hVbUjwTpsS067LwEqG4iBXh35QJP+E2cFu6LS0M1bYH0fZidIiy4uJsqBhYAkc
Gly+rd8ovOqZnfqDYELo3vuL18rNmtOmWYlvUn4N9WhDBnjqWvODAbqFqUOUdi6A
Lcu3JiRP3qxC/jG1BZtRK8xill08hhxIGhHdfPl1z/j+Hib6GMtAK+IFzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFByYSKmKohzICxB3N7CzyztG9rzYMB8GA1UdIwQY
MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt
NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl
LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjl/PtU1r
fVLu58OhmaCNGf+npg3o2aZ3KFg8HlWyDJqjonkLlY3b4bF9luCwtmc8vTMMUaA4
5C0eRIERbhANOqGo2DEzMPYGi8jcvVfgUjV9AxJyPZ7nOg9H1S03w900b4lerX7E
qKONEbEPuoBrkTa3W8SYokXoyjyAFuSC1hD9H5uFdEMauLakxYNnndGt7ubZb9bo
BjzEIPMCdx1h7bfOQY+Pmjf/EgnihVNZ9uwwydcTPQe6OG8WgoVsJBTh7cQQmBoD
4Blmf38mkbyvD1PgJ4hdotpe2SFn0ovSwUCUQXK4EhAS9+w4HD02dqFbzIH6Tqwg
VpangkeslamVcA==
-----END CERTIFICATE-----
Generated at Thu Jul 23 19:04:01 2026 by rpki-client