Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
File: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft (raw, json)
Hash identifier: e/w5a7wIrWVmvq05OgI/rCZYOoOj+jYq9rOsuKilGxc=
Subject key identifier: 9F:F0:5E:B9:D4:56:3D:66:80:B4:2A:F8:E3:EA:E1:36:1F:32:17:4E
Authority key identifier: D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
Certificate issuer: /CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Certificate serial: 01A03F3BA3E23C33B0F14F1C880DC813864D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
Manifest number: 0393
Signing time: Wed 26 Aug 2026 18:01:08 +0000
Manifest this update: Wed 26 Aug 2026 18:01:08 +0000
Manifest next update: Thu 27 Aug 2026 18:01:08 +0000
Files and hashes: 1: 2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl (hash: PMf9ijGvXgAFZ3ac36QbDFVD5wwlmrj/JshW/Vb21PE=)
2: a4d5ZfK_EBOv89hzfPqpYOx4SmA.roa (hash: b6V6y+CXqrM02r7OcRC1ExEpm/JNxjRqEeNbqYxgF44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 18:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:3b:a3:e2:3c:33:b0:f1:4f:1c:88:0d:c8:13:86:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8d089eb701f69fdc7b5a099f1df90e6148c6bcb
Validity
Not Before: Aug 26 18:01:08 2026 GMT
Not After : Aug 27 18:01:08 2026 GMT
Subject: CN=9ff05eb9d4563d6680b42af8e3eae1361f32174e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c3:10:33:5e:28:99:fa:72:a8:d0:dc:ed:11:
c1:0f:f7:01:ee:ae:b9:87:e4:8b:82:e9:1b:a4:e5:
3d:7a:d5:41:80:05:22:b4:88:27:e3:65:c2:8f:6c:
5d:f5:6a:1e:c9:26:a9:4b:ca:98:5e:44:1b:e9:e8:
9d:03:ee:fd:77:0e:dc:d9:aa:63:12:f8:86:90:42:
2c:51:fe:c5:f9:6a:6d:80:55:1a:2a:a1:74:b2:92:
fa:e1:20:1a:de:fb:da:7b:30:86:60:8e:21:f3:26:
0b:6d:8c:3f:92:2b:d6:06:96:e3:e5:9b:8f:96:32:
cf:38:09:e4:21:af:23:83:a3:2a:0c:b5:a9:ae:ad:
96:0a:2e:d0:aa:cf:f6:7e:cd:a8:27:69:0f:4a:ec:
2f:73:6a:92:ec:3f:fa:6c:fa:e8:2e:d5:e7:88:48:
19:50:b6:f7:ad:80:8a:0a:4c:65:c8:55:ef:d1:2d:
b4:85:4b:ae:a0:d5:60:3e:6d:85:6b:a8:f3:aa:2a:
b7:ae:54:2f:e3:98:72:6a:13:c3:d9:cf:cf:fc:72:
60:b7:71:05:3c:1e:64:2b:8d:41:f0:ce:d8:c4:c5:
69:7c:09:89:94:d4:df:e8:f8:3e:b6:3c:d6:6c:d1:
59:81:ad:ab:d8:53:a1:a9:cc:84:1f:8a:cb:98:da:
2b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:F0:5E:B9:D4:56:3D:66:80:B4:2A:F8:E3:EA:E1:36:1F:32:17:4E
X509v3 Authority Key Identifier:
keyid:D8:D0:89:EB:70:1F:69:FD:C7:B5:A0:99:F1:DF:90:E6:14:8C:6B:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/e6f51f-e3cc-40ae-bef0-a6951a3ade40/1/2NCJ63Afaf3HtaCZ8d-Q5hSMa8s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:46:f6:21:5a:69:22:02:45:5f:0e:7a:be:05:4d:4f:fd:07:
cd:45:22:27:9a:9f:8f:5e:50:b8:b1:be:5d:92:66:21:2c:d2:
0e:d0:bb:cc:e9:70:ba:17:8e:c0:20:1b:69:dc:51:f6:54:cd:
48:00:3e:ac:15:7a:c4:7f:0b:fb:91:34:ae:6a:5b:bb:62:26:
c1:d3:fe:78:ec:39:06:7c:cd:a0:01:63:e4:f1:a5:67:47:60:
1e:34:70:24:4e:af:96:5a:9b:05:44:02:7c:74:9d:ae:0d:c9:
b4:bc:3e:51:46:21:ab:38:6c:69:5f:bf:aa:29:c9:d1:43:4f:
37:70:20:47:54:a6:36:f6:e9:fd:a9:3d:3e:43:7c:29:bd:a7:
50:50:55:00:f6:86:98:ab:d5:c8:f0:32:ae:1f:96:ca:e5:9a:
0b:86:7e:6f:4e:db:98:de:b0:dd:2e:bb:76:b6:c1:c5:0e:63:
ad:50:08:dd:11:9f:12:10:bc:44:e8:08:0b:b4:bd:e4:a0:7b:
00:ca:12:1f:74:e3:a6:d6:2b:e5:85:86:f8:f1:ed:27:49:32:
7e:d7:8a:be:17:3f:dc:6a:ee:d4:16:95:64:a1:43:8b:9a:c2:
c9:29:81:01:b1:32:17:0f:92:28:cd:47:b7:56:33:35:fc:51:
9a:88:5d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 04:52:21 2026 by rpki-client