Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
File: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft (raw, json)
Hash identifier: CByDKcD1s0QGrSd3T0nAoHNGYZdCj78Pw0GRsEs4J9I=
Subject key identifier: 8D:C7:F2:5A:D0:9C:CD:10:DE:6C:92:03:C2:18:55:03:BF:DB:7F:EA
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Certificate issuer: /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial: 019D98501663CF6B15AE9240A9903CF04664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
Manifest number: 0974
Signing time: Thu 16 Apr 2026 22:01:18 +0000
Manifest this update: Thu 16 Apr 2026 22:01:18 +0000
Manifest next update: Fri 17 Apr 2026 22:01:18 +0000
Files and hashes: 1: 4zAmEJqR1DqYOFNN31dLsnJzv_g.roa (hash: 0KHfMaTBbna47YAZcNimsTmzVEm9F8k0s5RoP/K5SQA=)
2: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl (hash: yJBKxWXDUG+S0VR7+gbl0Grz1rokNhO3hS7+SLZPNCs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:50:16:63:cf:6b:15:ae:92:40:a9:90:3c:f0:46:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Validity
Not Before: Apr 16 22:01:18 2026 GMT
Not After : Apr 17 22:01:18 2026 GMT
Subject: CN=8dc7f25ad09ccd10de6c9203c2185503bfdb7fea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:ae:4f:ff:e3:d2:6b:a0:47:bf:bd:c0:a3:ae:
0e:54:43:99:3b:34:88:c4:b4:5a:6b:db:11:59:f1:
4b:a8:3e:d6:2f:87:9f:1e:5e:b6:76:98:48:0a:d1:
6a:3a:f3:23:7e:98:38:77:d8:be:7e:33:ef:73:82:
ac:43:27:2c:6d:6f:b6:7b:b4:49:60:48:b9:fe:cd:
68:59:0f:86:98:bc:d6:39:30:e9:78:88:81:cc:36:
bb:8f:db:a3:04:37:e0:79:d2:61:1c:96:d5:77:a1:
6b:60:79:9a:e3:3d:40:32:09:04:01:cb:c1:a2:af:
d6:ef:52:03:a9:07:13:09:91:70:99:82:ae:71:8e:
5f:23:7f:a1:51:c2:37:29:18:78:ff:d0:8d:d7:20:
6d:5d:77:b1:65:86:12:f0:20:89:58:bf:93:06:14:
fe:d2:b8:16:60:87:43:88:ae:7d:85:77:20:44:9f:
98:bf:3f:e1:6b:d5:29:91:fc:d1:f7:b2:ab:16:63:
67:23:8f:1e:c7:d6:92:3c:29:56:be:63:83:dc:52:
9c:80:27:24:ca:86:c4:a6:d4:b6:6a:41:17:99:7d:
e4:b5:76:64:f3:97:9c:e0:c8:cf:e2:69:5b:da:69:
09:16:f6:75:c7:c1:d9:9d:7a:03:0b:f2:f1:8d:cb:
54:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:C7:F2:5A:D0:9C:CD:10:DE:6C:92:03:C2:18:55:03:BF:DB:7F:EA
X509v3 Authority Key Identifier:
keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:91:45:78:67:e6:94:e9:23:72:94:19:06:70:b8:b0:b5:12:
c5:80:27:71:a4:25:f6:b7:41:56:b3:26:7e:c7:b7:fe:a1:92:
b0:ad:32:99:15:64:90:a9:e5:08:49:91:3e:51:22:5a:f6:bb:
67:7d:61:2d:66:bc:50:df:49:6f:3c:43:bc:2a:ca:7d:e6:c8:
24:dc:26:2e:c3:5f:2d:de:57:c7:cc:e3:e8:6a:38:ba:a6:78:
ca:f1:dc:fa:79:4f:6e:b3:16:ee:9f:8f:43:db:b9:e8:1a:df:
f4:84:1f:dc:50:31:85:df:7c:9e:87:d4:dd:1c:9c:06:a8:db:
28:cc:9e:59:eb:9f:b3:46:71:a4:52:83:b4:57:19:d4:11:bc:
cf:fb:25:4b:7a:02:db:08:32:0b:33:f8:35:c8:ef:28:da:d8:
0c:59:5b:7b:07:73:fd:8c:db:12:e1:bc:38:2e:e9:d0:43:30:
66:91:63:a7:45:9e:11:1d:2f:93:10:12:3d:df:d2:d3:6e:3c:
23:4f:4b:98:fb:68:bf:dd:4a:a3:c3:9e:a1:f7:f1:0c:95:ab:
3c:10:eb:f8:65:21:c6:a5:f2:cb:b3:b9:fb:3a:4d:4d:cb:ee:
d9:ec:ff:75:54:80:47:87:1f:b0:8c:df:e0:7b:3c:18:75:9a:
d8:5b:52:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:10:43 2026 by rpki-client