Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: kKSAt6v1S9lFsCKhralqmeYi6UrT67Zq55SJnqOvx4Q=
Subject key identifier: 96:AB:6A:AE:BD:4A:40:D0:86:90:E0:CE:FC:73:F5:16:D0:F7:00:CA
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019F9135D45D0564A8B202B9A4578E92BF86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 151B
Signing time: Thu 23 Jul 2026 23:00:51 +0000
Manifest this update: Thu 23 Jul 2026 23:00:51 +0000
Manifest next update: Fri 24 Jul 2026 23:00:51 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: ryM+3VmDjMio16DJSD4BeAQ45EbwaeiakH8hJEZBGi8=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:91:35:d4:5d:05:64:a8:b2:02:b9:a4:57:8e:92:bf:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jul 23 23:00:51 2026 GMT
Not After : Jul 24 23:00:51 2026 GMT
Subject: CN=96ab6aaebd4a40d08690e0cefc73f516d0f700ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:21:b1:5f:97:ba:49:8d:67:2a:f8:0e:4f:28:
00:d8:96:9a:be:82:4a:0f:19:d8:f2:93:3a:87:8e:
8e:c9:6c:2a:7e:5f:ab:3d:0e:f0:aa:5d:95:89:14:
a9:e3:0b:a7:38:b3:53:de:2f:a4:e5:9e:3e:8e:22:
55:35:a1:d7:1b:69:8a:e5:45:d5:f1:a3:93:d8:7b:
ed:d5:25:ca:06:fa:c6:d6:91:2e:4b:94:e5:f7:dd:
52:c3:eb:34:62:3a:92:91:c2:5f:35:ee:e0:71:81:
19:89:b9:10:bb:b1:fd:fd:6a:c8:79:8f:81:13:d4:
44:7d:86:c9:b1:1c:ef:a4:8c:da:0e:3b:07:fc:cf:
ec:94:41:b3:8d:d4:e0:07:c9:14:7a:4e:d7:9b:cc:
75:74:86:1d:71:22:47:e2:fb:b6:49:ca:e9:02:a8:
b8:4e:98:d3:eb:9c:b3:fd:64:80:9d:b4:a8:c8:8e:
5a:14:a9:8a:31:6c:03:b7:ed:40:82:64:eb:c2:94:
ff:69:04:b1:0e:a1:68:32:3c:6d:fe:ca:e7:21:ab:
f4:df:4c:46:bf:a4:09:96:8e:25:cf:79:15:d3:be:
17:8a:54:5d:de:d4:6b:7f:35:0b:c5:45:2a:26:5e:
07:7a:f1:a0:2c:64:1d:29:e4:70:ce:c6:ae:f4:e3:
c3:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:AB:6A:AE:BD:4A:40:D0:86:90:E0:CE:FC:73:F5:16:D0:F7:00:CA
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:d6:13:f0:fb:17:d0:9a:76:f8:37:5b:19:e5:9c:f5:9c:67:
bd:4f:01:2f:ee:9e:7f:53:e2:e3:4f:93:26:ad:cf:54:62:9f:
4c:93:70:21:0a:08:09:1e:91:c1:b9:a7:ee:36:51:71:dc:9e:
b4:26:e1:7d:49:49:b6:51:ac:89:e1:90:d0:d2:94:e2:a4:01:
c5:df:3a:0d:84:ef:cd:72:9e:92:73:9e:19:10:71:ea:8b:45:
c1:eb:d2:93:c4:68:e5:34:d6:e7:12:c5:14:c4:2f:68:15:00:
33:41:d0:e8:80:0c:68:4b:05:ed:1a:10:f3:ba:26:55:f2:a1:
c2:84:84:23:88:a9:bd:7f:3e:da:6e:87:42:02:f2:d8:71:b5:
cc:ab:08:77:42:3a:38:87:f3:77:ee:38:6a:8d:2b:67:46:cd:
bc:8b:5e:7e:7f:d7:21:9d:8f:98:29:0f:7c:b9:8d:b8:d0:92:
7d:b2:f8:5d:69:6d:9a:ef:c5:f9:be:e9:c5:08:62:d4:c8:63:
af:00:6f:4d:76:82:c6:62:bb:1e:c5:59:43:cb:01:5b:ab:4b:
77:bb:65:0f:9f:d4:b5:4e:88:6d:e3:65:bf:9e:64:14:84:cb:
7b:a9:fb:45:1b:67:f9:2e:43:47:37:56:f3:55:ff:af:bb:81:
21:88:ed:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:04:49 2026 by rpki-client