Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: fxwdN2sWPfaewm+J89VSF+QJuUPVGrVZLu+/D9ZyiKQ=
Subject key identifier: 47:E7:13:23:90:29:86:4A:F9:68:09:80:80:D7:E5:7B:77:69:8C:90
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 01A001DD11DD390E666081F333D1C02B3559
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 1170
Signing time: Fri 14 Aug 2026 20:01:00 +0000
Manifest this update: Fri 14 Aug 2026 20:01:00 +0000
Manifest next update: Sat 15 Aug 2026 20:01:00 +0000
Files and hashes: 1: Me0QmqvtVRnPHeWPR3hmcHHmhyI.roa (hash: mnVxOOQzF/EGSdMH+gxhLc4jjvJzEmOnwn8YEHzRuIQ=)
2: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (hash: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: GqWUFHn6iFW04UWGAgATCzaoCkRC72OSzDx1AKseiZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:01:dd:11:dd:39:0e:66:60:81:f3:33:d1:c0:2b:35:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Aug 14 20:01:00 2026 GMT
Not After : Aug 15 20:01:00 2026 GMT
Subject: CN=47e713239029864af968098080d7e57b77698c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4d:f4:7e:10:92:7d:d8:ab:70:02:66:3a:ec:
5d:c0:46:bd:b4:f4:99:71:8f:35:cf:79:ed:52:dc:
cd:9d:59:e3:e8:13:1d:e5:24:2e:0b:22:3e:42:da:
5e:bb:46:f3:a3:91:59:dd:c0:f1:c0:e4:0a:7c:a1:
ec:d4:07:b3:36:40:cf:42:58:6c:ba:29:2a:81:a4:
20:70:73:83:08:b3:94:fe:6c:1e:0d:bb:be:25:9d:
fe:96:37:67:45:b6:53:f4:1e:b8:3f:0e:c8:75:c7:
9b:0b:36:64:20:e0:9e:0c:32:4c:73:a6:4f:84:c0:
ed:2c:a9:41:81:c4:62:af:47:8e:26:7c:90:b9:f4:
24:c4:59:d1:67:23:d1:af:9f:72:46:70:e6:bb:a6:
53:eb:2b:4b:9d:f0:ce:ce:33:fc:b5:16:9b:63:c1:
fe:c5:d2:c0:42:b1:a4:34:ea:b1:5e:e0:fc:44:84:
89:46:66:fd:6b:62:0b:b5:27:de:ce:98:dc:6a:28:
a1:8c:6a:a8:92:e9:8e:b0:ed:b3:68:04:d5:14:43:
a1:96:a2:be:57:00:04:c7:48:68:55:fb:5b:98:03:
ad:e9:51:e2:3d:97:f8:e5:71:9f:ba:7f:bd:73:fd:
19:7b:f0:38:ce:17:0c:c0:21:af:d0:0b:0e:b7:4f:
e8:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E7:13:23:90:29:86:4A:F9:68:09:80:80:D7:E5:7B:77:69:8C:90
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:88:1c:ed:44:48:dd:40:c9:66:8a:bc:a6:4d:81:cf:c4:6e:
53:eb:df:4b:22:6e:8f:d3:a2:85:c4:f0:f2:c4:80:c5:02:6a:
3c:69:f2:59:12:52:ac:8a:3c:ea:bf:63:b9:2f:f4:a8:90:24:
34:5d:ba:65:74:81:ac:44:f1:ab:18:e1:db:e0:5c:fb:aa:7a:
66:46:93:94:02:db:a6:d9:96:b4:6d:e1:17:db:08:95:83:7e:
ca:7e:16:7b:88:4f:93:b3:e5:31:3e:09:c9:87:5c:9e:b0:63:
a4:bb:4f:b0:ab:65:e7:cf:4b:57:02:10:ea:a1:4e:4b:7c:37:
53:55:b0:2e:42:ae:df:72:15:9e:5b:24:42:69:f7:11:02:b0:
b3:8a:34:a7:4b:19:96:29:4e:29:50:94:04:04:f7:24:cc:55:
2e:cc:a7:c1:25:38:4c:3b:17:86:ec:8f:ef:59:70:17:c1:91:
77:8e:f0:0c:a8:0f:20:b8:1b:c6:62:26:8a:de:8e:2e:d0:8f:
89:8e:08:fd:c3:7e:2b:d5:07:15:0b:23:5c:8e:16:38:09:67:
89:65:6c:a7:3c:ac:c5:c9:4a:16:a5:4f:0f:7e:1c:e5:51:29:
cf:92:a2:f6:40:24:6d:c7:e0:19:fa:d5:6d:28:61:f3:7b:8e:
e4:e8:1d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 04:31:56 2026 by rpki-client