Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: L4hIEUqOeCWX/G9QSHnnm+ethYue6xGbaPABiCqSfKw=
Subject key identifier: 88:38:07:E3:C3:A7:44:42:31:EE:BD:45:81:A6:87:11:D0:87:0C:97
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019D273B0DD0F2D645FA5B133128C85FDCB6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 13DB
Signing time: Wed 25 Mar 2026 23:01:14 +0000
Manifest this update: Wed 25 Mar 2026 23:01:14 +0000
Manifest next update: Thu 26 Mar 2026 23:01:14 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 6qn58Agf6TMgyi/TXrZ0+DhlOfbF+wtMqqeppCks/FM=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:3b:0d:d0:f2:d6:45:fa:5b:13:31:28:c8:5f:dc:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Mar 25 23:01:14 2026 GMT
Not After : Mar 26 23:01:14 2026 GMT
Subject: CN=883807e3c3a7444231eebd4581a68711d0870c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:9e:67:08:ba:5f:9d:b4:4f:d6:ae:e8:42:09:
a5:ce:9d:61:21:20:35:d5:83:d8:b2:39:bd:fe:8b:
a2:78:dc:f2:1a:2d:42:71:b8:15:a3:aa:e2:98:c5:
9e:4a:44:1e:8e:72:93:e0:1a:fb:09:d4:4d:21:34:
0d:b5:74:02:a1:cc:ca:b8:c4:a8:64:45:47:4d:0a:
4a:55:a6:78:7d:95:e3:9d:07:ea:59:6b:42:9c:d2:
c2:2c:c4:9b:36:f7:fa:e7:c2:86:e2:5d:0f:5d:5f:
af:07:68:6f:66:92:9b:90:73:0f:26:63:88:24:34:
7e:a2:82:a5:79:e0:b4:bb:fb:22:fd:eb:a2:30:4e:
cf:e3:79:9c:44:4e:ba:3c:9e:be:63:38:33:92:13:
ba:9f:9d:1c:ff:cb:86:65:34:73:0e:74:d0:13:29:
42:80:c5:d3:8e:01:3f:2e:68:74:18:4b:84:3c:f6:
bb:68:38:7d:de:16:b3:f8:24:6a:bd:c2:87:49:37:
db:ea:d8:4e:49:0a:ed:04:96:0d:f8:89:76:0d:f8:
6e:4b:a9:b0:eb:c1:de:94:94:16:f3:1b:38:7c:9c:
cf:12:76:9a:9f:a0:c7:5c:ef:ff:2d:1f:1e:af:47:
d9:a2:f0:ac:35:ca:1e:f5:02:40:8f:da:62:ed:85:
43:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:38:07:E3:C3:A7:44:42:31:EE:BD:45:81:A6:87:11:D0:87:0C:97
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:46:e3:ba:2e:d2:bf:3f:df:8a:fb:ba:e4:40:f7:d3:96:d7:
1a:7a:e5:06:66:bc:52:fd:cc:db:5e:7e:e7:12:43:1d:1a:dc:
8b:d4:02:57:c3:61:33:42:36:53:72:4d:3d:55:b1:56:cd:14:
4a:40:51:86:59:24:50:ef:a0:c7:59:73:65:fc:8b:27:3d:b3:
c7:4e:2e:b9:80:bb:6b:a0:e0:be:42:a9:46:d9:ca:04:14:1c:
13:82:e2:a7:a0:06:8c:03:f0:1a:64:0e:bd:f3:b1:52:b3:4b:
ab:97:b5:aa:22:0b:38:15:ab:d0:b2:41:c6:cb:10:5d:a7:ad:
9a:85:61:69:fc:b7:cc:96:66:c5:d6:f0:7d:44:a2:5d:45:46:
4b:af:f2:af:c9:ae:07:9b:12:4a:0f:99:61:85:f9:68:97:2a:
05:d8:ec:99:77:60:6c:f7:60:ea:1a:f6:45:4e:5f:32:71:34:
cf:b1:0b:2d:2c:60:06:37:64:40:55:36:b4:38:a2:f2:f1:d4:
14:8b:32:0e:1b:64:be:c7:f7:49:0e:73:b1:ab:59:c4:54:ca:
19:09:65:2e:52:dc:55:a1:8e:f0:81:e0:47:bc:d7:5b:6e:ce:
c6:8b:a1:6b:19:87:d1:69:83:ef:c3:91:35:75:22:dd:5f:83:
6e:cb:d4:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:47:46 2026 by rpki-client