Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
File: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft (raw, json)
Hash identifier: GEwxcV2/N77W6pYNgffI/TL6CwlOgpKbDmmuewO/Lno=
Subject key identifier: 5A:E3:78:CC:F8:D6:C1:ED:82:0C:FE:ED:FA:C0:12:AA:56:18:75:90
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Certificate issuer: /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial: 019CACB54AE178A86A128E729CF913D45E29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
Manifest number: 08FA
Signing time: Mon 02 Mar 2026 04:01:28 +0000
Manifest this update: Mon 02 Mar 2026 04:01:28 +0000
Manifest next update: Tue 03 Mar 2026 04:01:28 +0000
Files and hashes: 1: 4zAmEJqR1DqYOFNN31dLsnJzv_g.roa (hash: 0KHfMaTBbna47YAZcNimsTmzVEm9F8k0s5RoP/K5SQA=)
2: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl (hash: uKKxdhQL6LOzztazU9CebMnvvPC5i6rGpPeMsSaNkuQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ac:b5:4a:e1:78:a8:6a:12:8e:72:9c:f9:13:d4:5e:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Validity
Not Before: Mar 2 04:01:28 2026 GMT
Not After : Mar 3 04:01:28 2026 GMT
Subject: CN=5ae378ccf8d6c1ed820cfeedfac012aa56187590
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:6c:10:df:47:eb:1c:bb:14:ec:7c:cf:be:c9:
d8:d9:a4:dd:b3:b1:3f:71:e7:33:dd:e1:7a:07:0f:
ba:d6:7b:e8:58:5f:a8:24:96:4b:ca:d1:d5:43:c0:
93:5b:9e:0c:e8:67:49:54:de:9b:1d:64:07:f7:4f:
1e:36:38:a8:eb:e6:41:d3:f1:2d:67:89:3a:3f:95:
2c:56:96:f4:39:f5:3b:96:52:1b:1b:d1:72:a0:a2:
e6:e0:f2:a1:b5:62:e1:a9:e1:0d:38:37:60:73:ed:
28:91:52:63:3a:ac:d6:7d:61:9d:d2:41:b1:f9:5f:
c8:c0:9e:13:51:1a:6f:cd:05:9c:89:4d:c7:a2:7e:
9b:ad:f6:30:ee:87:59:8b:45:e6:bf:39:7d:1d:43:
e8:ca:70:e1:c4:8e:1e:c1:a4:a9:de:cc:04:13:11:
06:77:5d:14:2e:d8:f5:a8:85:b0:22:fd:30:01:fb:
fe:df:61:8f:ab:e2:b2:06:1a:0d:58:d6:b6:2e:2e:
3e:6e:41:08:ce:04:01:d6:f6:c1:b8:78:4f:3f:80:
57:89:7b:f8:cc:e3:ec:0f:ee:35:9c:00:67:e4:67:
2c:1d:d5:97:ff:37:07:14:1d:24:72:9a:3c:cc:9c:
52:f4:ff:ab:3b:e8:28:2e:8b:46:5f:ca:c9:5e:8f:
9b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:E3:78:CC:F8:D6:C1:ED:82:0C:FE:ED:FA:C0:12:AA:56:18:75:90
X509v3 Authority Key Identifier:
keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:b4:50:8a:1f:1b:b9:30:3e:14:75:a7:24:b4:54:3d:98:68:
5b:b4:fb:7a:28:9b:69:2f:2f:91:c9:31:a4:8c:a7:ae:a7:a0:
40:f4:17:a4:df:65:f2:52:6c:3e:2f:99:24:e0:6a:71:84:00:
fd:08:b7:00:b0:a3:9c:f8:54:77:80:70:31:c2:4a:a8:07:eb:
69:80:72:6f:9f:a8:7e:08:38:56:a7:46:5d:0c:76:45:d9:21:
2b:b5:db:15:b6:0b:f8:e8:02:1c:4d:27:92:12:9d:99:65:7f:
91:f4:f8:11:a2:8f:ba:d5:ed:85:f7:d2:88:48:c9:ae:c8:56:
78:e1:1c:69:32:b2:9c:fa:ab:72:0c:63:8c:01:13:e0:f0:1b:
75:67:d6:3c:ff:83:d8:0d:df:aa:58:db:7b:6e:58:98:7a:d5:
e5:57:60:62:9d:d3:07:4a:62:f1:a9:f9:a2:92:00:95:9e:19:
a1:f2:78:e2:2e:b0:c7:20:43:c2:a1:ad:86:6c:7e:1d:cc:ee:
2b:50:98:ff:11:f3:eb:ef:9b:4e:92:08:dd:85:1b:05:36:83:
fb:f5:cd:1b:dd:15:c9:f3:41:01:46:f2:34:e4:a9:47:e9:a6:
28:3f:d5:c8:6b:51:99:af:d5:73:fd:9a:67:a5:0b:ee:ee:28:
86:ce:8f:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:39:26 2026 by rpki-client