Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: Gk+EmCKRKu+Tt8gYTfuaCS5MFHIRktcLH7AdJNVsvyY=
Subject key identifier: D7:FB:E6:F0:38:C8:F7:77:82:21:36:3D:FE:B1:F1:BA:BF:8F:6B:CA
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 01A0E475BC87C3EF9588CCE42E31D54DB0D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1A7F
Signing time: Sun 27 Sep 2026 20:01:56 +0000
Manifest this update: Sun 27 Sep 2026 20:01:56 +0000
Manifest next update: Mon 28 Sep 2026 20:01:56 +0000
Files and hashes: 1: 0BNtWi6SoPuxVR9fF8cG7zLKJdM.asa (hash: JQH0eRg1/MLbrOriU97ZXNo1uEgS+5g9El98zw5+Iwk=)
2: 6-4X2RTKNMpiEFYDjOyhWMKIEoo.asa (hash: g77oK6pTbejX2g1b5SIn9onRlyoGOjAwy0AE8HqTQYY=)
3: C3q1PlgupTSu7535g3AwDEhvM-k.roa (hash: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8=)
4: G04crXnxnwsY-wZQQQ-23nM91Po.roa (hash: pLGupbllfkIJitF0PCYQsDKFpIoSGHVmNvPx18E29Xo=)
5: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (hash: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M=)
6: N0-wLo3d8-mJYCRhurdBRO1t_B4.roa (hash: /UHlJczzfCnXbaUE6VWZu1Btrd9QX/hGlbajTUY+gcE=)
7: cjq4Tl5Zv8hqJ1gtAseRPtN79pU.asa (hash: GA4dh/bIEQ4oPs9+wDpRKBhwprwPPv1msthK5b2yByM=)
8: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: m90Kdw4AnuhbhBI7pibFrPkYAnwRhU/Knw6+jCwO9yY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e4:75:bc:87:c3:ef:95:88:cc:e4:2e:31:d5:4d:b0:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Sep 27 20:01:56 2026 GMT
Not After : Sep 28 20:01:56 2026 GMT
Subject: CN=d7fbe6f038c8f7778221363dfeb1f1babf8f6bca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:92:ed:ac:3a:b5:73:62:5b:71:f4:04:96:26:
dd:b9:7f:b4:17:b2:bd:e0:98:bd:0a:35:7a:be:3f:
21:fe:78:61:d6:a8:16:51:29:6e:b0:ac:50:3c:c5:
71:90:49:7a:c5:5a:c0:0d:2f:61:dc:f9:e8:5f:f2:
85:5e:56:88:73:c7:76:49:2b:fa:06:38:32:ba:0e:
e8:59:e1:34:45:02:cf:ad:c1:49:43:ee:a6:75:a2:
a0:05:71:84:bc:56:30:19:2c:ae:8a:f1:08:84:0d:
4e:77:8f:b0:33:cc:42:ba:09:ae:27:cd:bb:df:ec:
26:77:9c:4b:61:9c:00:10:ad:9e:d8:c5:69:1e:b4:
3a:e5:5d:81:9b:aa:7a:89:38:53:d1:cf:1c:41:04:
c0:70:f3:5a:05:dc:b8:22:33:ce:ab:ad:c9:e8:44:
f5:e5:8b:13:86:cb:2e:83:d1:c7:0e:fb:09:b6:a2:
4c:68:32:7f:c4:5e:44:85:db:6c:5e:0d:36:c0:6f:
40:82:04:2f:23:d6:a5:cf:5d:36:6d:68:aa:5d:f5:
40:9f:3c:c8:06:2d:31:2f:aa:f9:f4:6e:05:5e:38:
9b:4c:82:3c:60:2a:a0:58:33:19:41:7c:85:c6:15:
0e:cd:ec:c3:ed:25:cc:b9:ca:ad:af:92:1b:e5:fc:
9d:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:FB:E6:F0:38:C8:F7:77:82:21:36:3D:FE:B1:F1:BA:BF:8F:6B:CA
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:76:3e:f2:2e:d2:a2:ba:c1:33:25:2b:55:be:e8:c5:68:ea:
db:15:b4:53:e8:39:49:7f:ca:98:e7:8f:9e:68:42:8f:67:35:
0b:cf:f0:99:c6:70:c6:d5:ed:0d:c1:ca:4b:e6:8b:fc:19:5a:
a0:bb:dd:f4:e4:7a:04:0f:47:b1:d8:4c:5c:a9:ba:47:e7:fa:
bd:22:e5:1e:9a:fa:50:fc:d2:74:e2:03:41:29:0e:4f:5c:70:
4a:3d:1c:cb:81:72:e5:e5:ee:1d:ee:53:e4:45:1f:b4:5c:fd:
97:57:09:a8:17:14:8a:a5:2a:e5:19:2d:4f:a0:e6:be:4b:38:
5f:e0:e8:8d:1e:75:0c:ea:d0:e7:f6:05:90:3e:24:81:ef:df:
de:fc:32:9c:45:ba:f5:43:d6:ac:8d:93:a3:83:fe:f3:52:62:
24:03:fd:08:38:8f:bd:44:ea:4b:92:3f:34:ad:cd:29:5d:13:
06:d7:51:13:1e:fd:62:b8:a4:e4:c1:0f:1f:dd:c1:b8:38:50:
46:6e:d9:65:54:87:58:6e:a8:8f:bb:78:78:04:59:ba:a5:aa:
08:14:e5:09:9a:68:1e:0d:e3:ab:07:c5:f5:47:e5:ff:07:f1:
d3:92:3f:06:48:bb:17:cf:9a:8c:db:d0:e1:35:12:55:ad:f0:
7b:eb:c6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 01:08:23 2026 by rpki-client