Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: Nd5KzFnQr4tnSwat7/EjjH0QfOqizrQGwTVd5shR6CI=
Subject key identifier: FB:20:44:49:44:BB:7C:71:4C:50:2E:40:7A:4A:38:1C:81:8D:EA:C2
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 01A0D26E175C1C6A45EB8F95C63D63A9870B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 11DC
Signing time: Thu 24 Sep 2026 08:00:25 +0000
Manifest this update: Thu 24 Sep 2026 08:00:25 +0000
Manifest next update: Fri 25 Sep 2026 08:00:25 +0000
Files and hashes: 1: Me0QmqvtVRnPHeWPR3hmcHHmhyI.roa (hash: mnVxOOQzF/EGSdMH+gxhLc4jjvJzEmOnwn8YEHzRuIQ=)
2: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (hash: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: RGNkm0J8clsbpccqN9u845r2Au/jkucROhiAREP24G0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:54:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6e:17:5c:1c:6a:45:eb:8f:95:c6:3d:63:a9:87:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Sep 24 08:00:25 2026 GMT
Not After : Sep 25 08:00:25 2026 GMT
Subject: CN=fb20444944bb7c714c502e407a4a381c818deac2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:1e:28:79:31:2f:21:ab:99:b4:18:68:41:4c:
ac:61:c4:94:fc:9f:d0:a3:dc:2c:2d:5b:4f:14:40:
18:38:91:d5:f5:81:4f:8d:1f:d3:8e:23:2c:b7:7b:
84:7a:bb:16:8f:aa:c7:32:6a:8b:8f:f7:b1:d9:42:
f4:cd:37:c7:dc:eb:5a:3a:7c:6e:82:f4:7e:ba:96:
8b:c8:5f:5d:ac:1d:00:00:53:eb:0a:63:6a:ea:97:
c7:69:15:76:3f:d5:20:2b:53:f5:e7:7b:6c:5d:97:
31:7c:ca:a1:c4:fc:4d:7e:c9:54:3e:29:44:7b:ae:
80:f3:af:f0:13:00:49:a8:d8:0a:a7:32:5c:fc:bb:
e3:e1:d0:95:eb:e2:b2:8d:ea:6f:06:d9:2f:d5:82:
a9:22:28:4a:bc:68:6b:40:26:80:f0:f3:ce:8c:c7:
d2:03:ee:1a:5c:99:45:58:7d:08:a6:38:c1:c6:0c:
34:7b:b7:33:2f:d7:cc:e4:03:5d:25:58:ea:f9:55:
55:67:bf:88:33:c7:cb:fa:a3:3e:53:44:8e:5e:ef:
e0:a0:b0:6c:24:8a:1f:76:9a:9d:b2:b6:56:8b:ad:
aa:64:99:9c:b5:dc:31:7f:67:81:0f:30:6f:f9:ca:
50:2a:86:e8:2b:12:4e:f3:9a:78:39:2a:4e:6d:a7:
af:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:20:44:49:44:BB:7C:71:4C:50:2E:40:7A:4A:38:1C:81:8D:EA:C2
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:f8:38:97:97:06:5c:2d:0b:c9:3d:14:13:c4:e8:1e:92:45:
3b:3e:bd:a0:5e:1b:ac:6d:97:56:8d:40:b4:00:51:c6:b6:9a:
1f:d8:3e:76:b1:09:c2:63:90:36:61:d1:2e:bd:1c:dc:dd:ec:
1e:3d:6e:5d:50:51:fa:10:57:dd:c9:d0:08:d7:59:2f:72:28:
8a:9a:0f:ff:80:06:34:4d:bb:a9:67:20:81:7e:b0:83:ce:8c:
8e:c6:1d:4b:1e:57:b1:3c:e3:52:b1:f5:d2:c0:ba:8c:cb:80:
a6:2d:17:fe:cd:3e:37:16:8d:a0:b3:cc:4a:31:35:80:aa:78:
d7:ad:85:d8:f4:87:3b:ed:2a:a8:14:36:70:6a:fa:1b:9d:b0:
60:8f:b6:05:93:8b:ba:3a:26:31:fd:85:18:22:9d:08:4c:4a:
d6:b9:b1:29:7d:68:9c:89:c1:e7:e8:9c:da:aa:db:ce:f7:ea:
69:b5:62:22:b7:cb:fd:a4:f1:96:a2:ae:28:4f:07:6d:b6:0b:
38:8e:73:7c:7f:67:78:40:de:bc:39:b4:71:dc:10:12:e6:86:
3a:cb:8e:db:2c:96:c3:92:05:df:56:77:8c:45:cf:11:2a:4f:
6c:db:b9:5c:21:a9:a9:e0:91:16:cb:f8:66:60:aa:c4:b0:b6:
26:38:82:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 09:37:41 2026 by rpki-client