Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: bNAt2c/TmGB35wz4GmiLcsCmUDtQqi/4Cso3o2c9tq4=
Subject key identifier: 5A:C1:D6:9E:FD:D0:4D:8A:5C:81:D5:8D:55:93:3C:D7:82:48:D3:A3
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 01A0C821D6FFD6615CD750D7649FFF3FA943
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 15BC
Signing time: Tue 22 Sep 2026 08:00:55 +0000
Manifest this update: Tue 22 Sep 2026 08:00:55 +0000
Manifest next update: Wed 23 Sep 2026 08:00:55 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: ncQSvp/mpi6/8gCKNyZzLyGxyqeVPcnSTS2h0VPU7RI=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 08:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:21:d6:ff:d6:61:5c:d7:50:d7:64:9f:ff:3f:a9:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Sep 22 08:00:55 2026 GMT
Not After : Sep 23 08:00:55 2026 GMT
Subject: CN=5ac1d69efdd04d8a5c81d58d55933cd78248d3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:4d:ee:dc:28:1a:8c:8d:c6:3b:0a:70:48:a3:
e8:a6:07:f9:62:03:a0:7a:b2:cd:0b:ee:a6:1f:9f:
4f:b9:10:1b:c6:7e:50:67:5a:9b:8b:e7:6f:c9:38:
2d:1c:01:79:ff:e7:b3:d0:18:8b:b2:4f:aa:8a:bc:
04:3a:fd:44:61:0f:90:4c:41:39:ca:4b:0e:bd:5d:
c6:a0:fe:8b:7b:65:cb:13:05:98:8e:4b:2a:86:25:
50:30:fc:8a:cb:d2:46:c7:ba:f5:38:ba:9f:b9:5a:
f8:6e:1f:a3:ce:06:8b:bf:bf:c9:e1:b0:aa:9d:a3:
06:cd:7e:c0:10:5c:ad:2c:ec:da:82:79:21:01:75:
e5:77:d9:23:4d:12:d8:73:fb:52:ef:ad:96:69:6a:
b1:c1:c3:8a:d2:ad:c6:a8:ba:7b:a4:57:14:4a:a8:
08:02:ee:af:84:d7:69:c2:da:d6:88:de:2a:0a:d2:
54:52:a5:8d:ee:6c:66:2f:bf:47:9b:98:90:37:63:
98:99:92:6e:7e:a7:26:df:66:7f:5a:d1:96:3a:72:
96:8b:d3:9e:06:49:cd:18:cc:3b:40:01:44:a4:04:
e9:86:e6:c0:ff:24:55:3c:04:a5:8e:e1:de:3f:bb:
a8:34:33:ad:50:17:21:d1:62:73:a5:e0:c8:69:89:
e8:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:C1:D6:9E:FD:D0:4D:8A:5C:81:D5:8D:55:93:3C:D7:82:48:D3:A3
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:35:4c:b3:46:c9:8d:f5:a3:03:fd:b1:9d:04:02:63:e4:a3:
2c:bf:12:ea:f0:29:f5:82:2f:39:d0:92:cf:a7:f5:b1:df:a4:
45:c4:5e:74:0f:9c:01:db:f9:f1:19:1d:0f:d7:60:32:65:94:
94:dd:e8:a8:ad:7c:d6:10:fb:52:3c:4c:34:26:76:e1:a8:95:
c4:d7:61:c5:53:88:85:5f:72:8d:6c:0c:17:08:bc:56:a4:5e:
b7:59:8e:c1:fc:13:fa:5d:8e:bb:c5:fb:65:fa:ca:a2:e7:e7:
28:fe:e5:f2:74:d2:19:1f:0c:e8:8f:76:ab:8b:7c:60:fc:0a:
df:3b:cd:26:d9:5e:bc:01:0a:59:96:40:35:78:a1:73:30:a0:
5a:a5:dd:88:c7:b3:40:51:37:dd:1a:0f:26:16:c1:cb:44:a9:
b7:fd:fd:09:a5:06:f0:1e:c7:f3:99:b5:da:82:ca:ae:78:74:
b6:5e:cc:d6:fd:bf:e2:de:ee:6b:d8:2a:33:53:58:aa:de:16:
d0:20:fc:94:7e:3f:91:ba:be:ee:0f:fc:8c:69:0d:74:ed:76:
d7:a0:b7:d3:c0:c8:45:4c:e2:2c:18:7b:42:41:41:b5:c9:b7:
28:42:9f:7a:54:84:a8:0b:92:b4:51:01:31:9b:1a:ee:43:2c:
a3:0a:cc:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:44:29 2026 by rpki-client