Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: aZgGCK/lCRJVL+gQ4GrbNbTEK5HOmxVmnLazsF//jVw=
Subject key identifier: 51:B3:4D:02:69:AB:97:3E:D0:78:85:C4:58:2E:BC:B6:57:4D:43:26
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019D28F3258377CD6ABE0833004C3E5E0847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 0636
Signing time: Thu 26 Mar 2026 07:01:56 +0000
Manifest this update: Thu 26 Mar 2026 07:01:56 +0000
Manifest next update: Fri 27 Mar 2026 07:01:56 +0000
Files and hashes: 1: aoQsvFOShg8unGdvRNHzyskZu6Q.roa (hash: p8PU4KP73BDGEEa9wvSrJwTPPhTgMiV7+d9ryeZmr2c=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: HscWyo57gsHsgh4Z4hG/6g8fbZxzK+gmuOAPQL0UE7Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:f3:25:83:77:cd:6a:be:08:33:00:4c:3e:5e:08:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Mar 26 07:01:56 2026 GMT
Not After : Mar 27 07:01:56 2026 GMT
Subject: CN=51b34d0269ab973ed07885c4582ebcb6574d4326
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:ad:8e:2e:15:ee:c2:0b:7d:5c:0b:54:40:
11:8b:df:2a:1a:76:d4:94:bc:e4:eb:86:bf:82:35:
eb:e5:bd:fd:4d:67:f6:2e:74:85:a6:28:b1:ed:c4:
44:a5:d8:7d:e0:50:0c:75:9d:88:c4:e2:54:53:da:
61:66:cb:bb:8e:e8:97:f8:3e:eb:cc:3e:14:7a:18:
69:2a:7e:ba:48:26:10:e8:0c:77:48:6e:44:35:6c:
d8:c0:47:9d:9f:6c:8a:f6:47:fc:30:9d:a1:78:23:
89:a4:fb:fb:0f:2e:0a:5c:85:cc:bb:36:41:98:59:
f9:30:88:db:3e:28:71:4f:39:82:e8:92:c2:80:a0:
f2:3b:0f:b8:df:82:cf:33:a6:08:77:36:ec:fe:c2:
a3:35:85:09:64:64:e8:ec:bf:fb:58:75:20:72:3f:
95:ee:b7:23:ac:18:04:d6:25:c9:18:25:b2:84:d0:
c3:51:a8:14:27:df:b2:7b:d6:40:d4:90:a3:6b:16:
d2:11:03:e0:78:b1:e0:6b:84:6d:4a:05:b3:3c:79:
ee:87:c6:9e:dc:6f:85:1a:09:d2:8b:71:9f:9c:08:
d7:d4:8a:e4:17:bd:e0:c9:c7:8c:f8:51:36:71:8b:
68:ec:b2:07:be:b7:68:6a:5f:db:4a:36:f2:54:ed:
1c:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:B3:4D:02:69:AB:97:3E:D0:78:85:C4:58:2E:BC:B6:57:4D:43:26
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:2b:7a:0c:49:98:ec:5b:73:c3:97:ec:97:8f:19:9c:2e:2b:
9d:c4:9d:11:5a:a2:38:fc:0d:1c:5c:ec:6b:db:55:46:7f:10:
8f:c0:22:c1:66:34:bc:3a:77:e5:36:42:11:be:81:e2:e0:f7:
86:cc:6a:85:c1:ae:78:7e:5d:0b:de:fe:47:8a:d3:85:40:d5:
6b:e7:2f:30:62:0d:c6:f7:de:de:bd:7c:1d:24:ac:4e:33:73:
bc:d9:e5:7c:68:fd:0d:ce:8a:76:28:ba:4d:69:50:ab:f7:49:
ff:31:6e:28:af:ee:88:03:ca:4c:65:af:d1:0f:eb:06:54:f3:
50:5c:11:e7:d3:b3:e1:0a:4b:34:50:5c:e8:76:4f:94:39:dc:
67:c2:02:c1:e8:a8:35:5c:12:61:15:b5:5b:86:47:b6:f9:70:
b2:a1:6d:40:93:b3:ad:ee:88:83:9f:77:48:32:c3:73:b8:fb:
ee:a3:45:9a:d3:6b:84:8c:8d:1b:5d:8f:e1:46:72:89:0f:0d:
e3:12:80:ae:7f:7c:91:b9:83:d8:52:ab:53:cb:4a:2c:a1:ed:
09:12:73:bf:d4:ca:3e:f1:97:c2:cb:c9:db:9a:95:33:f0:e3:
80:40:da:33:99:b0:0f:ea:82:3e:58:ff:2e:e8:55:59:93:e0:
21:a6:9f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:51:57 2026 by rpki-client