Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: 4q93udBNlAqXhlge0qL1SLGsoXjCSQ7qiia9wE37Ce8=
Subject key identifier: BE:15:0D:8C:95:97:AC:19:57:2B:A5:D2:7B:15:89:5A:17:EB:48:9A
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019D9B1992C70AC32A0ED036366B00158665
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1417
Signing time: Fri 17 Apr 2026 11:00:37 +0000
Manifest this update: Fri 17 Apr 2026 11:00:37 +0000
Manifest next update: Sat 18 Apr 2026 11:00:37 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: K06XVVhIJcVbBRq301rS3BBsI1i4AzsXDn9cPIbCOYw=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:19:92:c7:0a:c3:2a:0e:d0:36:36:6b:00:15:86:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Apr 17 11:00:37 2026 GMT
Not After : Apr 18 11:00:37 2026 GMT
Subject: CN=be150d8c9597ac19572ba5d27b15895a17eb489a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:34:d6:e9:8a:ce:17:03:f0:aa:41:29:73:62:
24:cf:88:d2:10:54:49:27:f1:25:23:6a:8c:2b:8f:
01:fb:93:4b:28:ad:26:69:43:da:ed:9d:64:ab:74:
b5:b9:44:26:f9:4b:80:64:eb:59:59:15:b4:9c:5d:
0e:c0:c8:a6:d8:a2:2b:27:a9:fc:7b:9a:7e:4d:70:
4e:e3:0c:16:73:bb:53:24:49:40:dd:c9:75:c9:7b:
f8:34:6a:e9:66:14:2d:1c:e8:0a:29:92:5f:b3:76:
68:e9:26:a4:4e:40:4f:46:18:80:17:43:c7:c5:5c:
67:ef:2f:10:68:9d:12:8a:16:3e:b4:ef:87:59:ea:
44:d2:80:68:d1:c0:95:4f:a2:f5:84:39:11:57:74:
20:b5:05:3e:89:74:f0:e3:61:d5:e5:ac:26:64:99:
18:5b:7d:a8:ac:56:2c:ae:08:d0:2e:37:2f:67:20:
94:36:36:55:a4:37:2a:dc:ed:4d:c2:20:59:5d:e3:
f4:41:f0:63:b2:36:f0:2c:02:0f:90:f2:4a:e3:d2:
7a:85:e6:65:4f:19:a4:40:f9:67:d8:cc:52:b8:cc:
cb:5f:f1:03:d0:32:fc:00:ca:34:8a:80:b5:f4:1e:
58:da:dc:5f:03:95:6f:2b:b6:be:c8:2e:3d:74:fd:
b6:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:15:0D:8C:95:97:AC:19:57:2B:A5:D2:7B:15:89:5A:17:EB:48:9A
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:ec:de:3a:08:17:a3:22:a6:74:08:2f:ae:be:e1:62:46:d9:
7e:c1:b2:e5:80:4c:16:81:ba:c7:d3:90:1c:89:fb:66:f5:89:
a8:be:19:86:48:e1:9e:82:8c:32:32:28:5a:8c:a2:5b:74:45:
d8:b4:7e:ec:44:64:e3:31:d6:f7:46:c3:94:3c:38:40:33:71:
4c:f1:6e:5b:ee:1b:4b:a5:47:8b:cc:3d:7d:d6:a8:68:22:6f:
be:ca:34:ab:32:25:53:7e:8c:d5:c0:89:d8:1f:a8:2d:de:b0:
15:8a:ad:5c:23:28:62:50:67:c5:28:b7:46:b4:d3:c4:da:ef:
96:c1:5b:d9:f8:ad:b2:ea:3e:26:df:a8:85:79:35:20:8f:81:
a1:71:a3:ae:43:b7:60:8b:66:85:de:71:8f:b1:e0:62:08:1a:
65:cc:c1:5c:94:97:92:64:e4:34:93:d0:82:51:f2:70:cc:5d:
77:14:d2:59:ee:00:e5:36:ea:92:e6:06:a2:34:15:ea:7a:04:
36:bd:df:a4:e4:99:9d:90:ae:9f:21:69:02:e2:a4:15:29:f8:
d3:72:b3:59:8d:32:98:4b:de:30:48:ea:14:2c:07:62:21:1c:
5e:1b:99:b8:fa:de:2f:84:30:39:b7:99:9b:9f:0b:57:97:34:
17:ec:21:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:34:05 2026 by rpki-client