Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: x8l3Uwva++I4+mGQQ3E9U0N4rbO8lU3Mzy1piP4/E+M=
Subject key identifier: 71:DE:8E:5C:9F:1E:90:65:51:6F:A9:34:9D:7D:96:5C:7B:52:DE:AA
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 019D97E239D46B08944DF43472CBEDCE5C1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 1030
Signing time: Thu 16 Apr 2026 20:01:18 +0000
Manifest this update: Thu 16 Apr 2026 20:01:18 +0000
Manifest next update: Fri 17 Apr 2026 20:01:18 +0000
Files and hashes: 1: Me0QmqvtVRnPHeWPR3hmcHHmhyI.roa (hash: mnVxOOQzF/EGSdMH+gxhLc4jjvJzEmOnwn8YEHzRuIQ=)
2: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (hash: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: hSmxzLXzQdu0989oPe7jHKBent1UW5ENlybO54CrzgM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 20:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:97:e2:39:d4:6b:08:94:4d:f4:34:72:cb:ed:ce:5c:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Apr 16 20:01:18 2026 GMT
Not After : Apr 17 20:01:18 2026 GMT
Subject: CN=71de8e5c9f1e9065516fa9349d7d965c7b52deaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:4e:b7:d4:bf:3b:fe:e3:eb:94:2a:d3:58:d3:
88:4f:5f:90:ec:c9:c5:15:41:81:5b:ef:b6:6b:29:
ae:2d:8d:07:93:3b:ce:cc:59:d8:cb:58:b5:ad:28:
b1:f1:b9:bf:db:1d:72:de:47:ce:36:ae:01:b7:b0:
ff:22:49:83:86:8e:53:3b:7f:9a:68:e0:80:ac:5f:
b0:3a:77:0f:6f:d0:c2:a9:84:cd:c4:91:d8:6d:79:
aa:d0:17:d1:b2:6e:bd:d1:27:b3:cd:df:56:4b:f9:
d8:ba:8b:fc:49:9c:36:47:08:c5:39:a5:f9:14:cc:
0f:fe:1c:30:56:e6:1a:27:7b:ad:93:b6:48:1e:e4:
d3:d6:81:01:a5:b7:ae:f7:ae:9e:08:2c:48:f1:76:
3a:9a:d7:75:a2:eb:91:ba:60:6d:87:31:15:1f:43:
b7:c2:c0:00:98:da:2f:4e:85:dd:21:2b:00:ec:b9:
71:9f:b9:8e:4c:54:88:49:bb:1a:e8:70:b3:b6:42:
59:7f:85:68:ab:a3:b0:e5:0c:37:b6:58:7d:e2:cc:
d1:cc:cc:6a:73:c4:72:e8:bf:7a:8b:fe:a7:54:67:
7b:76:32:7b:79:53:f1:da:bc:81:f8:b1:af:2c:32:
cb:3c:91:91:7e:35:47:65:df:97:2a:60:1e:ec:3b:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:DE:8E:5C:9F:1E:90:65:51:6F:A9:34:9D:7D:96:5C:7B:52:DE:AA
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:f6:71:17:1f:69:66:24:e8:34:22:d8:aa:d0:24:7b:b2:36:
ef:bb:59:bd:d2:02:45:17:2d:83:00:7c:ce:99:59:0a:b7:00:
a5:fb:41:dd:d9:52:71:67:e7:b2:ae:78:f8:ea:90:87:20:22:
af:d1:29:ca:06:85:c0:f7:fa:49:7f:ae:cb:3b:89:b5:58:32:
38:60:51:cf:83:e1:d7:27:3e:d9:6b:01:15:0b:49:25:24:0b:
45:f5:80:f7:9b:94:23:b4:b0:bc:ab:1c:2a:4f:bb:60:e0:98:
f8:80:3d:6a:95:ef:19:be:04:c2:22:cc:f6:bc:8e:e9:89:7a:
ed:e7:1c:3e:df:76:de:52:9a:25:1f:cc:97:73:64:01:26:e5:
3d:48:16:cb:ed:15:9c:3b:ea:23:dc:57:f2:59:30:5c:d1:4d:
3e:1e:3d:2e:a5:77:0d:1a:fb:b1:fb:10:0d:de:70:3c:26:a7:
57:bf:da:93:4f:4b:90:5e:bd:bc:f3:1f:89:c9:4c:74:a5:69:
4b:ef:2a:13:7c:cb:7f:26:ed:72:03:b1:28:33:a7:2a:a4:80:
aa:1a:db:be:dd:e7:be:ad:81:57:62:ea:f6:ca:2b:d1:43:30:
67:e4:d5:3f:82:e4:50:31:49:1b:54:64:fa:23:f0:48:2f:a8:
94:25:ba:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:46:20 2026 by rpki-client