
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: dz1kuC1zl5lrUtVAbxtzdGhRTlEmqlkS59I3J0cmLis=
Subject key identifier: E9:08:6F:56:92:26:9F:74:D9:F7:C6:F3:53:60:55:D1:96:74:61:36
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019EC0A43327711C5925E1F2465570BBD1CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 14AF
Signing time: Sat 13 Jun 2026 11:00:46 +0000
Manifest this update: Sat 13 Jun 2026 11:00:46 +0000
Manifest next update: Sun 14 Jun 2026 11:00:46 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 1vV0/TLw78Nb9L1sByQkSV4VQOF7zH3o1XpTbyCzan4=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a4:33:27:71:1c:59:25:e1:f2:46:55:70:bb:d1:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jun 13 11:00:46 2026 GMT
Not After : Jun 14 11:00:46 2026 GMT
Subject: CN=e9086f5692269f74d9f7c6f3536055d196746136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:30:1a:5b:90:62:33:5b:69:e1:22:a1:bc:31:
58:7a:cf:13:34:ca:0f:e9:d8:d2:e5:50:41:36:40:
2a:c7:57:ce:52:72:38:53:bb:4c:d3:87:8b:c0:a5:
88:c0:c9:20:17:5a:8d:a9:d0:f8:94:ab:91:9b:76:
04:0f:f3:18:3c:1c:81:92:d1:c4:e7:ae:22:ee:58:
04:68:86:9e:df:ec:00:dc:c7:aa:ca:d5:37:80:83:
3a:b4:dd:7a:cf:c7:be:fe:77:90:b9:7c:bf:93:4d:
1d:d4:33:e5:0b:ef:c2:19:86:19:c6:00:b4:82:e0:
52:c7:37:07:9c:5f:09:1e:a7:f8:64:36:fc:a6:89:
66:5b:1d:4f:12:70:af:9a:c2:6b:3f:87:7d:ec:36:
d9:be:8c:2d:8f:5f:ab:7f:7c:fe:69:ef:a4:e8:04:
56:e4:1e:99:5d:2a:76:50:5f:92:75:23:65:76:86:
f0:88:1a:9b:86:45:59:fb:93:81:8c:81:3e:20:8a:
ca:ab:c9:c5:93:0b:67:ea:b3:b9:6c:54:90:80:a3:
c0:ad:ea:40:8e:97:5c:55:00:ec:ed:9f:b9:4c:2c:
b4:1e:d3:e6:b2:d7:00:84:53:01:cd:a8:b4:c4:6d:
9f:c9:6e:b4:16:c0:02:24:5e:db:0e:3d:0c:93:c0:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:08:6F:56:92:26:9F:74:D9:F7:C6:F3:53:60:55:D1:96:74:61:36
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:01:e2:cb:11:ba:e7:02:27:2e:e5:ce:c5:85:09:27:b5:19:
3a:b4:26:d9:3b:cb:8e:c1:b6:42:09:f9:95:d9:6f:9c:0d:30:
f2:0c:5c:07:0a:09:4e:33:b3:10:b9:b3:39:cd:2b:df:5c:b9:
19:fd:09:06:40:d5:4b:0f:d2:98:11:23:80:6b:2d:99:17:2e:
67:10:83:76:c7:63:64:a7:bb:2e:69:35:0d:d7:89:14:dd:20:
e7:21:66:81:7a:e7:ea:1b:3d:c2:d1:4b:87:8e:f2:df:a8:94:
06:58:ca:6e:18:d3:fe:eb:36:28:08:54:e9:af:e8:85:18:fb:
af:59:11:e3:71:2f:48:80:4f:31:f5:82:02:a0:6d:65:e0:7f:
d9:14:63:59:62:14:ae:01:2a:bc:1b:68:13:fa:45:aa:69:bd:
e3:c6:1f:08:25:0d:15:da:a6:31:0b:b8:ec:6a:5c:85:93:3d:
12:72:25:66:58:ea:34:f9:44:37:7b:07:48:c7:f5:47:0f:23:
4d:ef:f7:dc:cc:af:15:ab:ca:de:63:ca:7e:e8:c1:86:0c:46:
01:91:ab:56:f9:e1:f6:da:50:d9:f0:5b:25:b9:29:2e:28:36:
9a:a9:03:90:46:56:ea:b3:4d:8d:44:49:d7:e2:4b:3f:9c:13:
29:b6:87:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:04:56 2026 by rpki-client