Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: B4Me+Y73V0xjQpe+Xx8diTQrmPVsNoQWKP4Ni1pd1n4=
Subject key identifier: 2B:EC:08:8C:C2:9A:E4:EF:8E:AE:4F:FC:3D:AF:32:09:02:B0:65:93
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019CAD90A124B037B2D8334EB8799F3D9BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 139C
Signing time: Mon 02 Mar 2026 08:01:02 +0000
Manifest this update: Mon 02 Mar 2026 08:01:02 +0000
Manifest next update: Tue 03 Mar 2026 08:01:02 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: FoIIyMa9UIyY2MfZHjabrC1RFSpKqp4Hqxe4WuYOFlY=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:90:a1:24:b0:37:b2:d8:33:4e:b8:79:9f:3d:9b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Mar 2 08:01:02 2026 GMT
Not After : Mar 3 08:01:02 2026 GMT
Subject: CN=2bec088cc29ae4ef8eae4ffc3daf320902b06593
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:32:72:1f:88:71:52:cb:15:f6:87:3e:c0:38:
71:f9:69:c0:37:19:c4:ba:d2:53:6d:f8:de:40:30:
b6:89:35:84:0a:3e:31:93:fb:36:14:ee:8b:74:63:
fb:d9:ec:85:bf:56:44:ec:7f:14:63:41:80:8f:87:
b5:49:14:19:d2:8b:0b:7d:38:a5:3b:7f:7b:54:de:
a9:30:34:0c:f2:93:63:e5:ec:bb:8c:8d:8d:ba:90:
3d:23:5f:a5:00:57:c3:1b:8d:02:4e:a6:85:bf:cc:
52:7e:ab:95:7c:a8:ad:87:c2:d9:32:bc:28:b5:eb:
fe:4a:45:cd:55:70:30:6e:c8:3f:cf:9d:95:99:36:
0e:15:db:30:30:33:f2:c8:fc:b3:bb:b6:8e:c5:b9:
17:e1:f7:e2:b5:9b:9e:f1:37:1e:81:00:62:c3:14:
e8:54:17:fb:95:2e:e0:58:f3:0d:70:34:ca:66:b5:
ea:1a:16:12:6c:ca:51:18:d9:0f:e4:e2:32:06:4d:
d2:35:12:71:a9:c5:08:2a:fe:3a:d8:19:a9:2a:03:
22:49:c2:70:4e:75:1a:3e:f9:32:55:7e:0b:8c:5b:
ec:e1:ee:ea:9b:94:da:bb:56:1a:cb:bf:9e:88:5d:
c8:31:b4:2e:e0:0e:a0:a6:d1:2d:f3:4b:63:0e:ca:
19:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:EC:08:8C:C2:9A:E4:EF:8E:AE:4F:FC:3D:AF:32:09:02:B0:65:93
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a7:47:d0:a8:2d:98:5c:f7:2c:7f:2f:1e:54:9d:b7:c7:64:48:
81:19:2a:11:40:ce:35:07:96:73:b7:37:a1:22:0e:ce:a4:17:
17:ac:e2:4d:c8:9c:ed:26:92:aa:51:06:6c:b1:df:1b:25:5e:
7d:eb:02:64:1b:fd:46:40:f5:45:fe:90:3c:e7:60:a5:ab:cb:
19:23:19:c9:bd:07:84:75:ee:77:36:d8:d2:52:76:c5:43:84:
7a:26:1f:de:21:d8:02:15:a1:31:c5:2f:39:67:db:70:7a:ff:
2c:f2:43:ea:c6:98:b1:d7:20:0d:39:dc:73:16:db:94:3b:e4:
58:e4:c2:90:b2:71:a3:80:ce:db:c4:f2:e9:2e:7f:f7:38:f1:
c6:ee:0b:d6:c0:9f:45:4e:bc:86:98:cd:ab:4f:f1:07:33:98:
0b:bb:01:40:56:81:20:4a:3f:92:a3:1b:09:dd:74:1f:c5:8c:
ba:9c:50:e0:f5:35:54:59:36:22:f5:29:bb:9a:c9:0f:d7:8e:
ac:6e:1d:a6:a1:4f:e0:ea:45:d9:de:f9:5f:23:37:bf:14:9b:
d4:3d:6c:95:4a:c6:a4:3a:42:18:63:c6:da:39:f3:da:69:7c:
78:9c:f6:20:22:4c:62:6a:11:97:c9:78:e5:5a:47:ed:52:e8:
57:56:57:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZytkKEksDey2DNOuHmfPZuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NjNjNzEwNmE1ZjI2NDAxNjJlNzk4MDU4M2VhYjViZDgw
MDhjNDUwHhcNMjYwMzAyMDgwMTAyWhcNMjYwMzAzMDgwMTAyWjAzMTEwLwYDVQQD
EygyYmVjMDg4Y2MyOWFlNGVmOGVhZTRmZmMzZGFmMzIwOTAyYjA2NTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxzJyH4hxUssV9oc+wDhx+WnANxnE
utJTbfjeQDC2iTWECj4xk/s2FO6LdGP72eyFv1ZE7H8UY0GAj4e1SRQZ0osLfTil
O397VN6pMDQM8pNj5ey7jI2NupA9I1+lAFfDG40CTqaFv8xSfquVfKith8LZMrwo
tev+SkXNVXAwbsg/z52VmTYOFdswMDPyyPyzu7aOxbkX4ffitZue8TcegQBiwxTo
VBf7lS7gWPMNcDTKZrXqGhYSbMpRGNkP5OIyBk3SNRJxqcUIKv462BmpKgMiScJw
TnUaPvkyVX4LjFvs4e7qm5Tau1Yay7+eiF3IMbQu4A6gptEt80tjDsoZSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCvsCIzCmuTvjq5P/D2vMgkCsGWTMB8GA1UdIwQY
MBaAFDdjxxBqXyZAFi55gFg+q1vYAIxFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTct
ODhhMGU0NTBhMTdiLzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS8zMzU0MWEtZjlhYy00NzVhLWIyOTctODhhMGU0NTBhMTdi
LzEvTjJQSEVHcGZKa0FXTG5tQVdENnJXOWdBakVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAp0fQqC2Y
XPcsfy8eVJ23x2RIgRkqEUDONQeWc7c3oSIOzqQXF6ziTcic7SaSqlEGbLHfGyVe
fesCZBv9RkD1Rf6QPOdgpavLGSMZyb0HhHXudzbY0lJ2xUOEeiYf3iHYAhWhMcUv
OWfbcHr/LPJD6saYsdcgDTnccxbblDvkWOTCkLJxo4DO28Ty6S5/9zjxxu4L1sCf
RU68hpjNq0/xBzOYC7sBQFaBIEo/kqMbCd10H8WMupxQ4PU1VFk2IvUpu5rJD9eO
rG4dpqFP4OpF2d75XyM3vxSb1D1slUrGpDpCGGPG2jnz2ml8eJz2ICJMYmoRl8l4
5VpH7VLoV1ZX1g==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:59:04 2026 by rpki-client