Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: q/GPNqApWixM3+GVYgTLweb+g6+uMKIuTQ3xgWa+JAs=
Subject key identifier: 3A:38:B9:84:DA:BA:FF:81:14:F5:99:72:BE:79:8D:94:5B:49:33:03
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019D2816AEE429901F78AB0D1A693DF63F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0F3E
Signing time: Thu 26 Mar 2026 03:01:08 +0000
Manifest this update: Thu 26 Mar 2026 03:01:08 +0000
Manifest next update: Fri 27 Mar 2026 03:01:08 +0000
Files and hashes: 1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: 3LCzunEfSR88XGUszdvC/ehyRF3dBEOrFVNctN+AXsM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:16:ae:e4:29:90:1f:78:ab:0d:1a:69:3d:f6:3f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Mar 26 03:01:08 2026 GMT
Not After : Mar 27 03:01:08 2026 GMT
Subject: CN=3a38b984dabaff8114f59972be798d945b493303
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:8f:07:7b:1d:3e:1b:a2:7c:f1:72:06:1b:a6:
d8:b5:c1:40:f3:14:bf:b2:ee:5f:2d:7b:e3:96:9d:
ea:e8:44:20:f2:1b:70:6f:64:75:d5:43:a8:07:1d:
fa:07:dc:a4:45:83:8c:92:85:5a:35:f9:02:68:8f:
5c:f1:0a:29:2d:74:ab:cf:2a:47:b4:b1:72:44:b5:
c1:db:69:e4:c7:5a:44:6e:1a:91:2e:1f:a4:ac:03:
4d:77:ec:e3:cb:76:f5:df:9b:b8:5a:3f:fb:1e:fc:
04:4c:4e:68:db:b3:dd:4a:b7:ce:9f:4a:d3:d3:8a:
f0:1c:06:84:d8:f8:d7:c1:46:d8:b3:60:83:f5:15:
a2:31:20:2a:52:33:9f:d2:1c:d4:1b:74:ab:1a:b5:
1b:e4:51:d0:ea:4d:b9:62:56:7a:5b:25:7c:39:bf:
ba:91:d5:19:cd:31:33:89:05:96:53:9b:a5:58:1f:
50:bf:97:13:16:71:6c:7b:dd:10:84:96:fa:79:d9:
49:c2:e3:f2:a7:b8:fb:50:bc:4e:ed:9e:0c:8d:5d:
d7:82:9e:21:c1:34:00:9f:84:2a:6b:fe:4f:3c:39:
7f:d3:88:a1:65:73:98:09:d1:bb:f5:e0:fe:b2:5b:
36:ad:09:d1:23:fa:59:04:c8:d1:bc:99:17:c1:fd:
4d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:38:B9:84:DA:BA:FF:81:14:F5:99:72:BE:79:8D:94:5B:49:33:03
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:c2:d4:17:cf:c5:5c:59:ec:a5:68:13:19:f0:7a:91:ea:71:
d2:e7:fe:29:66:c9:04:63:6c:e2:77:72:3e:1e:cf:d7:9f:8d:
fa:83:28:5b:5f:95:86:ee:ca:4c:59:24:5d:94:37:c8:5d:9c:
64:4b:bd:57:52:16:07:2d:e2:80:a1:f4:c4:df:3e:f9:d9:89:
91:44:9d:41:ab:1e:c4:3a:02:cc:0d:89:90:94:b0:3a:86:14:
1f:46:8e:9c:6e:4a:9b:82:dd:54:63:da:f7:cb:2c:96:70:13:
bf:e3:bf:d5:43:a0:a0:5c:c5:74:24:83:3b:bb:43:61:75:6a:
7f:51:73:14:34:c8:5f:7e:5d:40:42:5e:98:0a:64:6b:b1:e2:
f9:17:bb:4d:36:f9:f4:1d:3c:2b:77:e6:02:ad:bf:15:ad:7b:
c5:fb:ae:a8:ef:75:67:45:6b:b4:10:0c:36:7f:b3:e0:a0:5e:
95:7b:5d:30:67:16:fe:54:e2:7d:70:43:92:bc:49:08:8c:5e:
53:69:1f:23:dd:e1:bc:b5:ca:a7:6e:06:67:6f:18:fd:2a:07:
9e:f5:04:78:32:60:77:7b:c8:06:1a:92:f7:19:d7:08:ee:af:
c2:b4:a8:32:19:a5:d2:58:65:b4:61:c1:6b:bc:e5:ae:51:25:
f0:14:7f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 09:52:48 2026 by rpki-client