Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: UV0MOTs1CFB14R5+OkDuL3T6YTwiGz9C0KC0IsI2ROI=
Subject key identifier: 4B:9E:DB:16:0B:5E:45:87:25:C7:11:17:F3:6F:11:45:FF:09:E4:A7
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019D9A3E6C12495280A6ABCA72657E4F1B17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 18CA
Signing time: Fri 17 Apr 2026 07:01:15 +0000
Manifest this update: Fri 17 Apr 2026 07:01:15 +0000
Manifest next update: Sat 18 Apr 2026 07:01:15 +0000
Files and hashes: 1: 6-4X2RTKNMpiEFYDjOyhWMKIEoo.asa (hash: g77oK6pTbejX2g1b5SIn9onRlyoGOjAwy0AE8HqTQYY=)
2: 6W7MdARlMXl2B1LJ-tkqoS6g0qI.asa (hash: U8Fk2jP4GFzteMdfb1HCuZ2Ov9sGcKKPsVwSh3++h9Q=)
3: 6m1Zr_a79xM5w_A5UxoM7pPydiY.asa (hash: mwruC/EYleNBqGOjKp7xRfqBPuAa14ybRpQxed0X5Uo=)
4: C3q1PlgupTSu7535g3AwDEhvM-k.roa (hash: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8=)
5: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (hash: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M=)
6: N0-wLo3d8-mJYCRhurdBRO1t_B4.roa (hash: /UHlJczzfCnXbaUE6VWZu1Btrd9QX/hGlbajTUY+gcE=)
7: NUJylcfXdFrCcbkx_Ikhy-r9ACI.roa (hash: xCgVcHczCrXe0p6YIfGOAkusfmbv3Ur+pdnA0nDzp+0=)
8: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: SNjyielQ4mpxMEolcE0njbGYDakeXKc1z97FLPJocNk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:6c:12:49:52:80:a6:ab:ca:72:65:7e:4f:1b:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Apr 17 07:01:15 2026 GMT
Not After : Apr 18 07:01:15 2026 GMT
Subject: CN=4b9edb160b5e458725c71117f36f1145ff09e4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:10:af:1c:d1:a2:eb:84:26:8e:e3:0b:e0:e6:
1e:fa:b1:0a:28:d4:4b:58:21:33:c8:34:ae:51:08:
43:89:e1:9d:15:b7:0c:84:52:f2:25:48:e9:b2:bd:
5b:e0:6f:51:15:22:88:08:8c:b7:fb:f2:34:7d:8d:
d1:65:e9:3a:a1:0b:40:10:bf:d2:65:96:64:a1:dd:
21:c7:91:a2:8c:c6:54:c3:9a:01:9e:91:28:b0:f5:
50:e8:b4:ba:88:c8:ab:6c:35:0d:af:53:9d:80:18:
e3:07:55:11:59:0c:55:f1:b1:5b:73:4e:12:50:03:
5a:29:32:10:0e:d3:14:cc:12:11:2f:d6:8e:af:cd:
e8:97:a9:d5:28:a5:5b:5d:06:2e:72:02:51:cd:28:
59:1d:f1:ae:c7:97:43:93:e6:9f:92:d5:dc:01:a7:
00:f6:60:94:29:2d:f5:3d:4e:fa:4c:f0:ba:3a:37:
ce:4c:7c:e6:04:8f:02:69:0f:c0:43:6d:2a:0b:4d:
43:d9:ca:6d:58:18:54:a7:08:c3:b2:1f:ec:86:b7:
1b:36:f2:8c:2c:a2:26:6e:6e:7d:c4:47:99:4e:17:
3e:71:97:28:f9:24:31:f4:75:dd:ba:ea:f4:32:a8:
2f:bb:c5:9a:c4:19:20:c8:db:95:2b:84:9c:04:df:
1d:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:9E:DB:16:0B:5E:45:87:25:C7:11:17:F3:6F:11:45:FF:09:E4:A7
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:68:fd:81:4d:08:11:7e:25:c3:44:b7:06:e0:76:8e:3a:
38:5e:12:c8:df:ec:25:3a:ac:f6:8e:ae:fe:cd:6a:79:38:b8:
d7:20:5a:51:9b:1d:41:24:44:fd:fe:f4:88:67:7b:c9:a9:2b:
06:4f:42:54:da:4c:4b:ef:54:fb:b0:19:21:05:ed:3c:78:c9:
99:5c:73:b7:ba:d6:d5:0e:f2:df:99:b2:a2:e7:e0:f3:5d:25:
8f:9a:be:f3:b7:5f:45:6f:e1:38:2b:1a:ff:7a:ab:6f:a7:69:
50:19:f0:32:22:33:b9:94:37:95:04:dc:58:84:59:15:b9:18:
a8:4f:e5:f7:d0:5b:0b:75:a9:04:e1:8b:70:54:a4:b9:0f:6e:
7f:c5:65:96:35:af:03:7f:cb:66:de:53:3c:30:c9:56:20:01:
86:d0:4c:ac:10:d0:7b:32:7c:73:79:b3:f3:63:ad:35:23:67:
1b:2c:a8:5d:64:9b:af:5e:fd:db:0e:39:5b:81:41:05:28:c5:
d0:a1:84:f5:9f:2f:8d:2e:79:57:57:ab:90:87:04:9c:a7:1a:
07:a0:60:16:84:4c:5d:61:67:f1:c8:31:82:80:ec:8f:ae:16:
2f:79:92:72:d1:9c:f4:fa:24:76:8c:9c:7b:de:4a:59:f0:02:
6a:ef:5a:56
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2aPmwSSVKApqvKcmV+TxsXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj
MzBlNDUwHhcNMjYwNDE3MDcwMTE1WhcNMjYwNDE4MDcwMTE1WjAzMTEwLwYDVQQD
Eyg0YjllZGIxNjBiNWU0NTg3MjVjNzExMTdmMzZmMTE0NWZmMDllNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqhCvHNGi64QmjuML4OYe+rEKKNRL
WCEzyDSuUQhDieGdFbcMhFLyJUjpsr1b4G9RFSKICIy3+/I0fY3RZek6oQtAEL/S
ZZZkod0hx5GijMZUw5oBnpEosPVQ6LS6iMirbDUNr1OdgBjjB1URWQxV8bFbc04S
UANaKTIQDtMUzBIRL9aOr83ol6nVKKVbXQYucgJRzShZHfGux5dDk+afktXcAacA
9mCUKS31PU76TPC6OjfOTHzmBI8CaQ/AQ20qC01D2cptWBhUpwjDsh/shrcbNvKM
LKImbm59xEeZThc+cZco+SQx9HXduur0Mqgvu8WaxBkgyNuVK4ScBN8dfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEue2xYLXkWHJccRF/NvEUX/CeSnMB8GA1UdIwQY
MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt
NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl
LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQedo/YFN
CBF+JcNEtwbgdo46OF4SyN/sJTqs9o6u/s1qeTi41yBaUZsdQSRE/f70iGd7yakr
Bk9CVNpMS+9U+7AZIQXtPHjJmVxzt7rW1Q7y35myoufg810lj5q+87dfRW/hOCsa
/3qrb6dpUBnwMiIzuZQ3lQTcWIRZFbkYqE/l99BbC3WpBOGLcFSkuQ9uf8VlljWv
A3/LZt5TPDDJViABhtBMrBDQezJ8c3mz82OtNSNnGyyoXWSbr1792w45W4FBBSjF
0KGE9Z8vjS55V1erkIcEnKcaB6BgFoRMXWFn8cgxgoDsj64WL3mSctGc9Pokdoyc
e95KWfACau9aVg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:17:02 2026 by rpki-client