Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
File: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft (raw, json)
Hash identifier: gmWcwIxkK1dfquFQQfeXED1FSekx7gA9ZbfGQ/eHP4I=
Subject key identifier: 77:62:FF:CD:A6:B7:31:6D:13:BC:28:72:BA:5D:9C:70:80:5B:FB:0D
Authority key identifier: 9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
Certificate issuer: /CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Certificate serial: 019D3752CF81C6DD1E0E8A82CFFE72B66900
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
Manifest number: 0FFE
Signing time: Sun 29 Mar 2026 02:01:07 +0000
Manifest this update: Sun 29 Mar 2026 02:01:07 +0000
Manifest next update: Mon 30 Mar 2026 02:01:07 +0000
Files and hashes: 1: Me0QmqvtVRnPHeWPR3hmcHHmhyI.roa (hash: mnVxOOQzF/EGSdMH+gxhLc4jjvJzEmOnwn8YEHzRuIQ=)
2: _WXcBi7_Uss_zB6-JI3C0tlc1v8.roa (hash: gklQnpRqRjoyiXOSmndBSsFWXpomSf1nATe9QRhcl5I=)
3: n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl (hash: 9n7gfeaMV8lIP6yYw5Az2WNZ8WREX/3dVfGdAHbU2O8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 02:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:52:cf:81:c6:dd:1e:0e:8a:82:cf:fe:72:b6:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f63cff2446ececbebe0124636980b47e0b20fa6
Validity
Not Before: Mar 29 02:01:07 2026 GMT
Not After : Mar 30 02:01:07 2026 GMT
Subject: CN=7762ffcda6b7316d13bc2872ba5d9c70805bfb0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a7:e0:48:e2:4b:02:2c:45:80:fa:92:80:d3:
90:69:15:47:a3:b2:bd:28:66:bd:ba:4e:51:7b:41:
73:20:51:b4:c4:4a:f7:b4:52:f0:b8:42:43:1f:cf:
2d:5c:1a:c6:2f:b3:bc:bd:78:9f:5d:41:ab:d3:54:
84:93:66:98:79:b0:69:dd:b6:18:6a:94:ce:7e:12:
46:80:29:4a:75:ab:f3:30:a0:cc:4d:3d:90:57:25:
65:ca:03:98:99:bd:83:9d:55:67:60:3a:e2:47:71:
26:6c:f5:ee:87:f6:ec:11:ff:12:5a:eb:69:39:bf:
98:42:c0:2f:ed:45:16:7a:96:51:6e:5a:0a:5e:c6:
63:96:23:bb:ce:95:1d:3d:2e:a9:24:bc:e8:88:57:
2c:87:42:6b:44:82:f2:9d:27:aa:2d:1d:e7:75:7d:
21:2f:ec:bf:48:d8:4e:86:dc:f4:78:f3:53:79:8d:
7d:cb:f0:96:68:fc:a2:c2:3e:12:9b:1b:19:10:4e:
e8:db:1c:c0:62:08:3f:6c:da:58:c5:80:5e:55:a8:
f4:b8:cd:85:d0:ba:55:9b:a0:17:2d:1f:7d:05:f4:
b7:d2:60:d5:26:14:a7:c3:73:b4:45:36:e4:7c:f7:
81:d6:40:68:97:76:c0:63:48:6e:f8:51:c8:d2:6a:
ea:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:62:FF:CD:A6:B7:31:6D:13:BC:28:72:BA:5D:9C:70:80:5B:FB:0D
X509v3 Authority Key Identifier:
keyid:9F:63:CF:F2:44:6E:CE:CB:EB:E0:12:46:36:98:0B:47:E0:B2:0F:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/2f3229-a130-4dc8-a47b-2dc26dc4bc11/1/n2PP8kRuzsvr4BJGNpgLR-CyD6Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:28:69:b8:a5:b7:b0:79:cc:5a:b1:c4:aa:93:c5:78:0c:09:
2e:bf:07:29:18:cd:01:e8:b9:9a:41:41:31:52:03:f6:9c:0f:
33:75:61:6a:c9:c8:f9:51:e1:da:95:7c:51:58:d6:a6:28:1c:
3a:29:01:52:3a:65:60:26:2b:50:cb:56:da:0d:a6:99:31:a2:
60:f6:9b:51:57:05:3b:5a:21:33:f7:b4:91:13:76:c7:1c:b0:
a7:d8:9a:de:25:2c:63:bd:02:f5:c5:03:46:75:18:f1:21:da:
00:b2:05:e6:eb:4c:6d:94:f8:cf:4a:79:fe:7d:ff:ed:fd:d7:
04:be:dd:73:46:0e:80:c7:e5:a3:42:c5:5b:5c:a1:5f:b8:55:
d9:a5:91:13:90:74:8e:04:ba:4d:af:18:67:d0:27:c7:3f:1f:
45:eb:f4:bd:5a:4a:ff:29:49:06:85:78:73:94:24:28:0c:16:
57:cf:97:c6:c1:d8:2b:22:bb:a2:b2:d7:bd:6b:51:93:c0:bb:
ff:35:41:82:9b:50:2a:7f:ef:ce:a1:56:bd:be:fa:1a:d8:7c:
4a:b2:d2:23:c7:25:1e:cb:ce:a6:f4:1e:69:ce:cd:8e:46:2a:
7c:81:3f:f6:cf:9c:17:ca:f0:9d:f1:14:59:fd:8b:46:81:8d:
fe:02:df:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:15 2026 by rpki-client