Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: 9VUhn4swmdCXqrCnRQbQAUeNQLnSv8720Y5DPh/6KTg=
Subject key identifier: 3A:C6:01:5C:88:B6:63:F1:42:39:B6:D6:44:0A:2C:CC:36:CE:E8:6A
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019DA29CE2362EE23ABE2F8DEE6BC27E71F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 0675
Signing time: Sat 18 Apr 2026 22:01:23 +0000
Manifest this update: Sat 18 Apr 2026 22:01:23 +0000
Manifest next update: Sun 19 Apr 2026 22:01:23 +0000
Files and hashes: 1: aoQsvFOShg8unGdvRNHzyskZu6Q.roa (hash: p8PU4KP73BDGEEa9wvSrJwTPPhTgMiV7+d9ryeZmr2c=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: m//qXlyVmT35+aAW2KiblpCtTtpDefddilB57H/V9Qo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 22:01:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:9c:e2:36:2e:e2:3a:be:2f:8d:ee:6b:c2:7e:71:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Apr 18 22:01:23 2026 GMT
Not After : Apr 19 22:01:23 2026 GMT
Subject: CN=3ac6015c88b663f14239b6d6440a2ccc36cee86a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:1a:7b:0f:cf:8f:8c:ff:94:c6:df:8d:dc:5f:
8f:0f:6c:22:8d:76:67:29:96:7e:72:36:0c:ec:9d:
3d:af:19:df:2c:32:c5:64:4d:a4:a1:97:57:be:b4:
0a:3e:7f:c9:70:88:8b:db:54:fd:bb:41:d3:53:f0:
2d:3d:19:13:a9:de:6e:84:66:5b:7d:40:d5:2a:66:
5b:e7:c2:19:f8:ff:65:7b:88:13:bd:36:09:54:3f:
7f:2d:d6:07:1f:1e:56:0e:c3:f8:6a:fa:b1:5b:cd:
4e:07:73:f8:8f:f1:f2:ef:56:03:7b:45:0f:78:42:
11:d5:bd:ed:1a:46:86:9c:5e:02:c3:37:e2:16:51:
f4:2b:b6:11:1b:6d:18:2d:1c:4e:d8:99:6e:f7:02:
c6:fd:23:08:af:b5:90:d8:e8:04:58:34:0f:89:df:
b1:72:29:26:84:60:b1:04:13:f4:8c:e7:7e:d6:e3:
1e:3d:1c:b6:cc:49:bb:b0:fa:30:3e:74:c6:5f:d8:
01:22:6f:23:5a:8f:39:00:cf:8e:31:43:26:e2:f7:
53:19:7c:a3:50:a0:32:a0:cf:b1:48:7c:55:e4:7a:
b0:d4:94:25:96:15:f8:57:e4:63:0e:b7:82:99:57:
3d:12:d2:04:f0:03:ae:0a:e3:ec:fd:ab:04:87:ce:
3a:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:C6:01:5C:88:B6:63:F1:42:39:B6:D6:44:0A:2C:CC:36:CE:E8:6A
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:04:c6:51:2b:cc:db:a4:2e:6c:51:44:6a:92:97:84:d6:68:
1a:8a:a8:f9:30:59:6a:41:d8:81:94:98:35:db:30:1f:13:52:
0d:e6:73:11:09:5a:b0:8c:af:29:98:45:96:2b:16:7d:3e:42:
3e:68:d8:df:44:e8:00:73:e4:8d:5e:6c:18:86:3a:2a:62:b6:
07:15:a0:90:d3:20:59:15:ed:0c:ad:67:ef:8c:44:56:cb:1e:
30:8f:70:ea:58:69:e4:48:25:02:0b:81:e4:f8:ac:d8:be:6a:
9e:21:95:36:18:ed:31:76:d9:85:39:21:b6:97:89:6c:51:09:
81:fa:2b:2b:80:70:33:18:5d:d0:3c:73:b8:c7:0f:db:49:10:
4d:7c:7e:f2:e1:8f:01:0b:7f:e5:94:52:6a:e2:f8:cb:6b:07:
99:de:e0:7a:ad:b0:7c:f0:23:8b:98:17:09:86:96:a5:e4:e8:
ae:5a:53:8d:2d:28:5f:b6:58:30:ec:cf:dc:e9:f6:88:aa:41:
3f:ab:35:c1:a9:9a:a9:3c:1b:11:e9:3f:14:73:6a:50:0a:5a:
17:3a:69:8e:ff:61:a6:63:4c:75:dc:3a:d3:02:22:12:ff:fa:
27:a3:61:ab:3e:cb:53:78:85:bd:bb:be:b1:ca:c3:04:14:19:
fa:60:26:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:19:12 2026 by rpki-client