Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
File: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft (raw, json)
Hash identifier: MVQ54nzjJUxa6OnzFd9Q/rOothsF/ofiDEGQBH0ZgzY=
Subject key identifier: 45:97:A7:16:F5:88:C1:43:65:5D:FC:39:D0:8E:21:97:CA:37:C5:38
Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Certificate serial: 019D38D3984CFE91A2F552B2C3811E78F3AE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
Manifest number: 0202
Signing time: Sun 29 Mar 2026 09:01:24 +0000
Manifest this update: Sun 29 Mar 2026 09:01:24 +0000
Manifest next update: Mon 30 Mar 2026 09:01:24 +0000
Files and hashes: 1: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl (hash: W8KCwpYK9G/li1HDLlPqXoLQFn/LP5s2sKjOurXTHb4=)
2: a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa (hash: b6V6y+CXqrM02r7OcRC1ExEpm/JNxjRqEeNbqYxgF44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:d3:98:4c:fe:91:a2:f5:52:b2:c3:81:1e:78:f3:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Validity
Not Before: Mar 29 09:01:24 2026 GMT
Not After : Mar 30 09:01:24 2026 GMT
Subject: CN=4597a716f588c143655dfc39d08e2197ca37c538
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:d0:1f:dc:a8:0e:a5:12:2d:9c:b6:74:6e:ae:
3d:ff:ea:3e:e6:9e:2f:45:f9:df:62:34:3d:34:08:
45:19:6b:3d:11:fa:82:58:dd:69:68:20:97:89:72:
26:8d:38:18:45:f6:35:d6:1a:e0:bf:99:98:62:20:
3e:d8:37:eb:aa:ba:76:c5:19:00:6e:92:d6:b4:ac:
c7:b7:e9:16:45:3a:49:97:18:be:2c:a7:23:7f:ec:
92:ec:17:26:c1:dc:a9:02:2d:54:1d:90:b7:30:91:
d3:3b:22:ee:58:f1:fe:f1:50:7f:81:a9:e7:76:45:
6f:fa:aa:96:5c:f2:36:98:96:71:8b:1b:6e:03:e5:
d2:51:a7:a8:2c:b2:65:bc:54:4b:41:39:60:4a:46:
6f:f3:3c:13:ad:73:83:0f:48:f1:2d:35:73:98:ed:
98:40:d3:0d:1d:9f:e2:77:76:13:cb:6f:e9:bb:a2:
b0:ec:13:95:f7:f1:23:8e:b2:92:db:73:47:6b:fb:
1a:bf:67:39:9a:bf:d4:49:53:bd:05:a0:b5:fe:4e:
80:3c:02:85:2b:c8:29:11:75:60:dd:20:17:26:ed:
6c:13:6c:92:69:de:35:e5:16:f7:0d:1c:3d:8a:b5:
46:52:83:2a:6a:21:ba:de:a7:24:29:a1:af:1c:1c:
ab:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:97:A7:16:F5:88:C1:43:65:5D:FC:39:D0:8E:21:97:CA:37:C5:38
X509v3 Authority Key Identifier:
keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:5a:e3:9b:e2:7e:d6:c8:db:7a:ec:cc:5e:c4:22:88:0c:cf:
04:63:98:1a:cc:7d:6b:4e:9c:28:77:e1:8d:22:b6:a8:02:48:
46:58:e7:5d:82:a9:59:bb:4c:4b:2f:b3:99:66:2f:f9:09:6a:
1e:7c:87:e5:4b:58:91:85:f4:e7:f3:07:a3:50:97:7d:df:5a:
8e:96:f4:37:a0:18:9f:48:23:c4:29:c1:3a:71:ed:74:b3:54:
5e:03:6a:ef:bf:57:8e:6f:81:ec:11:a2:a5:79:f5:da:b9:3f:
0e:60:31:f7:fa:67:a9:25:09:cd:1d:36:f0:48:f3:1d:08:a8:
08:b3:0f:39:1d:e6:c0:2c:10:da:33:ba:b0:f5:a6:e6:66:30:
84:d1:0e:33:19:b7:63:d8:7e:a1:2d:a2:26:eb:f6:38:a1:94:
99:64:9d:db:52:d0:21:9c:f7:14:bc:96:0e:7a:e0:9a:8d:2d:
06:f6:fb:ae:43:59:a2:18:2b:7f:0e:2d:8a:c1:fb:f3:c3:e4:
11:eb:b4:6c:ea:51:e7:91:9c:3e:e9:d3:af:9f:8b:d0:ee:3d:
d9:47:a0:c3:20:b9:42:a5:f3:d8:e4:94:76:5e:1f:0b:49:25:
6f:ef:7e:59:43:7a:b0:10:ae:cb:96:0f:b6:a7:2a:b0:ed:1d:
ab:77:25:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:59:52 2026 by rpki-client