Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: sWnx+Kqhus5VSyfIzi/bPd0E0HVCMBBXirxEkUd8DmI=
Subject key identifier: 51:E8:14:FA:B3:27:3E:FB:D3:FB:BF:FA:F9:3A:BD:EC:AE:58:C5:42
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019CAE6BCF2FFAE471E02BC494C761B35051
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0EFF
Signing time: Mon 02 Mar 2026 12:00:26 +0000
Manifest this update: Mon 02 Mar 2026 12:00:26 +0000
Manifest next update: Tue 03 Mar 2026 12:00:26 +0000
Files and hashes: 1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: IQ+IAWjAZ1Mn5n9W+Fy/qoXzUtI3FqG16feDE4Nimn8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ae:6b:cf:2f:fa:e4:71:e0:2b:c4:94:c7:61:b3:50:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Mar 2 12:00:26 2026 GMT
Not After : Mar 3 12:00:26 2026 GMT
Subject: CN=51e814fab3273efbd3fbbffaf93abdecae58c542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:63:4c:86:8d:f3:01:1e:4e:f0:5b:22:8d:82:
32:d7:de:8a:93:31:c4:af:c6:4e:14:17:a4:90:b7:
d3:9e:72:87:99:0c:29:2c:6e:29:a1:96:d6:0a:63:
e3:31:94:3b:ca:ea:e0:1e:ea:30:26:9d:95:5a:71:
b6:bd:2a:3e:cb:79:aa:88:6d:65:5c:8a:19:1e:e7:
fb:1d:0f:39:d9:f0:f5:eb:5a:d8:d9:5f:d9:ef:ae:
cb:d1:48:10:d7:63:ae:50:97:e7:89:94:e9:c5:42:
1e:7e:71:64:09:05:8e:55:a6:ca:34:80:e0:38:e9:
e2:e4:bf:15:76:b7:a7:16:36:90:63:f2:d4:75:a0:
78:8e:15:ba:b8:f8:b9:9f:2b:18:0a:be:d0:98:0b:
c9:23:48:36:e1:d5:e5:5f:9c:b9:b9:b7:7b:83:18:
95:3d:ba:a6:5c:8f:75:5d:8e:ad:72:17:da:59:69:
ca:b1:d0:d3:92:71:85:c5:e4:eb:f5:b7:83:fe:69:
65:2d:d7:02:e6:f3:ce:e5:cc:68:32:c9:3c:2e:18:
9d:53:a7:7f:aa:f2:cf:c4:3e:67:9b:46:3c:89:e8:
cd:0b:14:d6:a4:5d:f5:13:a9:6a:c1:88:e5:c3:93:
2a:02:5a:d0:20:2a:e4:ba:3d:1d:f1:9d:8d:d0:c7:
a7:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:E8:14:FA:B3:27:3E:FB:D3:FB:BF:FA:F9:3A:BD:EC:AE:58:C5:42
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:41:02:81:5a:90:3f:67:b3:5c:dc:f5:e7:ec:ef:0d:09:25:
22:81:b3:ac:55:dd:21:93:7f:f9:e1:bc:ff:da:a7:88:e7:d2:
f9:3f:cd:64:d8:55:e7:3c:db:2d:9e:e4:db:34:15:34:03:f8:
52:e3:54:d4:d2:27:05:9d:cc:9f:a5:2d:ba:3c:58:12:16:11:
42:3c:0a:52:ad:13:04:d5:0d:fb:24:33:c6:7c:09:86:b1:51:
1f:81:8f:23:ff:30:7b:99:ed:d8:64:55:93:95:9c:7d:25:4f:
7f:87:f3:21:7b:d9:ee:f7:02:d6:3c:13:91:1a:6a:0b:44:d5:
1a:aa:55:91:7a:40:c7:9e:24:76:18:2d:e0:c8:10:f5:f8:19:
04:76:87:20:90:aa:e9:2d:fe:b0:d3:5b:2c:50:70:7a:d7:24:
4f:9a:11:50:80:53:e5:de:59:49:7b:f7:09:ec:ad:ac:60:6b:
4b:a1:6b:21:5c:e8:ff:31:5e:b6:8e:3b:cd:eb:4e:26:35:73:
c2:b4:02:a2:43:5a:16:19:4c:b1:80:d8:73:08:bd:bd:7b:01:
a0:24:f8:ba:74:8c:48:2d:42:01:b9:34:85:dd:ac:cc:b9:a6:
5f:3c:f6:87:2a:d0:69:8e:ab:e5:87:b3:78:bd:42:77:1e:78:
73:4d:8b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:56:48 2026 by rpki-client