
Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: NPiNssPnY8NAwFAYDwdgusTLdVaSAOO6tVGtcMxfFco=
Subject key identifier: 85:67:6F:4D:73:5D:C5:EC:14:44:EF:CF:F4:23:85:8E:CF:87:50:98
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 01A0C8FD14477A82AB7E1A73573AEBD84D44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 111F
Signing time: Tue 22 Sep 2026 12:00:24 +0000
Manifest this update: Tue 22 Sep 2026 12:00:24 +0000
Manifest next update: Wed 23 Sep 2026 12:00:24 +0000
Files and hashes: 1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: KBxZRfnd5p1wT67hLPaLZhr3AWBIVEbl55cQDlITu8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:fd:14:47:7a:82:ab:7e:1a:73:57:3a:eb:d8:4d:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Sep 22 12:00:24 2026 GMT
Not After : Sep 23 12:00:24 2026 GMT
Subject: CN=85676f4d735dc5ec1444efcff423858ecf875098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ca:1e:98:8d:f1:44:c7:bf:47:c7:b1:67:ec:
18:37:3b:4b:8e:7d:13:82:b7:77:09:b7:e1:8f:c2:
25:df:65:65:45:58:62:1c:c0:53:2a:ce:06:62:38:
df:47:87:c4:59:49:f6:32:a1:c1:70:26:85:6d:1b:
2b:0b:39:e7:00:61:06:6e:c1:c4:ec:f9:c4:ef:63:
17:a7:e0:63:9a:b0:fc:37:fa:86:62:84:a5:b7:dd:
3f:5a:3b:4f:a1:86:4c:c1:14:f7:53:5d:98:62:71:
8a:0f:1a:e3:d7:24:87:00:f4:67:ed:57:79:61:8c:
5f:39:73:57:8d:64:32:84:b8:33:fc:f2:ce:b6:03:
97:56:7c:5e:ec:f2:7f:10:ea:89:c1:fe:08:39:6a:
e4:0a:96:0a:78:cf:e4:37:91:6b:09:16:4c:00:ef:
dd:a0:54:7b:4d:12:5c:e0:ca:2a:74:88:9c:a0:c7:
96:ec:45:5a:4c:05:dc:61:c5:3f:29:7e:78:c9:92:
f9:0e:33:af:bf:84:52:15:ad:e7:10:46:a8:7f:bc:
9e:0a:f1:bb:e6:15:aa:df:6b:a7:be:5a:54:c2:24:
8f:74:f4:10:b8:f1:c2:13:5d:4f:08:04:51:e6:ab:
5b:ff:79:bb:9a:8b:5f:b5:b7:ef:d1:81:ca:ee:20:
54:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:67:6F:4D:73:5D:C5:EC:14:44:EF:CF:F4:23:85:8E:CF:87:50:98
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:41:8b:e8:f6:42:39:7c:79:d1:64:82:d3:ea:40:03:37:37:
a5:3b:aa:f2:84:8b:d9:28:f4:c4:3d:98:1a:4d:40:58:ea:b5:
75:cc:b7:b1:e4:af:9e:46:2d:f2:c2:83:39:4c:3b:64:5f:3c:
ae:08:d4:c3:7a:a7:a0:07:10:00:42:e2:c1:38:91:ec:42:e0:
eb:ab:6f:0a:ad:ce:da:8a:98:11:f5:27:60:d4:01:c2:21:20:
bb:c9:49:73:8c:97:7a:1a:d4:fe:67:e4:34:89:fd:34:d3:b9:
13:6e:6e:d0:4f:1f:97:eb:7f:a4:95:29:18:7a:6a:53:a4:e2:
0b:dd:c5:70:27:72:3f:5a:73:b7:79:35:10:8e:d2:64:fe:38:
d4:07:a4:f4:8a:a1:76:4e:d6:96:ac:7c:12:c1:6c:e9:45:d7:
ee:67:92:4a:68:2a:5c:7a:16:c3:51:11:12:8f:e4:f9:9e:42:
da:0f:25:c2:a1:1f:d7:17:a3:e0:50:96:a2:44:e9:60:1b:50:
52:9e:14:00:b2:28:a9:51:6a:71:c0:d1:f5:98:e3:e0:96:74:
b9:88:87:76:6d:60:25:76:e8:4f:e2:ba:4b:84:8b:e6:01:59:
0e:18:8d:9d:ed:04:5b:75:07:ee:ac:56:aa:b0:1f:17:20:40:
37:a9:e2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:36:51 2026 by rpki-client