Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: 10IDW8rpmSXjYkhfTjthHOEEzHCqYROnQ9FcLkcfBc0=
Subject key identifier: BF:E9:4B:57:18:2C:14:23:5B:AD:B0:C7:29:6F:4A:44:C1:73:AE:5C
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 01A0C9D94985090F9F3D920E999292042893
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 0817
Signing time: Tue 22 Sep 2026 16:00:55 +0000
Manifest this update: Tue 22 Sep 2026 16:00:55 +0000
Manifest next update: Wed 23 Sep 2026 16:00:55 +0000
Files and hashes: 1: aoQsvFOShg8unGdvRNHzyskZu6Q.roa (hash: p8PU4KP73BDGEEa9wvSrJwTPPhTgMiV7+d9ryeZmr2c=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: ouFET7c7RaIDiMa9VhhEVzs2ktUSjHnbC3J1AcFDG98=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c9:d9:49:85:09:0f:9f:3d:92:0e:99:92:92:04:28:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Sep 22 16:00:55 2026 GMT
Not After : Sep 23 16:00:55 2026 GMT
Subject: CN=bfe94b57182c14235badb0c7296f4a44c173ae5c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:30:70:40:17:ce:81:90:8b:1b:de:91:60:80:
6c:25:6b:13:e8:89:8b:24:d5:16:12:e5:fe:27:7b:
f3:83:b6:41:fa:26:3c:b9:5f:da:8e:aa:79:03:8e:
92:bf:b7:b1:7e:6e:84:78:eb:91:87:65:6e:c2:5b:
0e:60:c3:39:fb:22:41:79:0d:2e:26:06:15:60:51:
f2:4d:7c:00:a1:e6:d2:56:b0:df:dc:08:41:83:f1:
c4:22:a4:11:8d:8b:c1:df:c7:9d:16:aa:78:5e:28:
7b:d5:72:43:3a:8e:73:6d:fc:42:d8:25:0e:1c:b1:
12:70:c4:77:7d:97:22:54:a1:7d:bf:f0:f5:58:79:
86:a0:f1:0c:76:2e:31:28:b0:4e:0a:93:c9:2f:df:
0d:3c:88:d7:59:82:3c:4f:90:8d:8e:b0:3e:1a:c8:
3d:68:cd:03:2b:e5:cf:c5:89:18:44:21:5e:ea:ec:
31:44:54:31:b4:71:a4:ca:a1:86:29:1c:f9:2a:2d:
8a:9a:44:ba:2a:25:56:5d:c5:7e:fd:a7:1d:51:53:
5b:a8:84:8b:d7:9e:9f:f7:eb:1a:fc:2b:f6:58:be:
a7:2d:82:27:ed:78:b0:82:e6:93:09:35:5f:7c:4f:
d2:e8:80:76:72:c6:3a:05:8c:dd:1c:41:31:1b:53:
46:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:E9:4B:57:18:2C:14:23:5B:AD:B0:C7:29:6F:4A:44:C1:73:AE:5C
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:69:8f:67:cb:a9:57:71:3b:88:9a:17:77:d8:74:b1:fc:f7:
98:ec:97:3e:5a:70:e9:e1:fe:a5:ea:b0:e1:95:74:52:d8:5a:
99:ab:ea:27:95:5a:8b:39:2e:cc:f9:a1:23:b2:86:08:fc:e7:
b1:30:74:ac:40:92:6c:75:cb:7b:ca:88:9d:43:88:ed:88:6e:
8e:77:09:73:3d:75:d5:47:2f:79:8c:d6:64:ca:70:3a:64:b2:
d3:cb:25:e5:8e:22:86:52:6f:36:39:97:36:28:9f:f5:d3:9c:
56:de:34:e6:1e:61:3a:64:2f:ce:05:d6:0f:f8:d3:1d:16:e0:
9e:fe:bf:ca:79:ef:e6:e9:b6:23:61:6a:02:24:d2:4c:9d:ec:
8d:8a:af:4a:23:4c:81:d5:f6:b9:c7:73:f3:b9:a4:91:ae:fe:
6d:28:f4:89:b8:af:83:50:85:1d:ed:99:0f:c8:71:5f:44:ec:
ad:12:3f:28:9a:c6:73:25:99:11:db:51:15:3a:20:f4:03:7b:
26:7d:ee:b7:97:8a:e9:a1:81:97:04:43:5e:f2:eb:c4:fd:cc:
09:81:6c:02:82:a2:40:40:14:81:61:d5:89:61:36:02:4d:3f:
1a:db:38:21:d8:43:9e:24:56:85:ae:60:c2:a3:15:55:24:5d:
93:48:66:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:46:45 2026 by rpki-client