Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: QS+ABx0dai3RoJjyn4BIJ2vqLRa6aeSygGGpW4G3Dws=
Subject key identifier: D2:25:C6:03:3F:7F:A2:78:C1:E4:D6:1E:80:EC:CE:0E:1D:7B:15:CB
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019FF8D9F1031E5B084048B091C20BB9082E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1A05
Signing time: Thu 13 Aug 2026 02:01:00 +0000
Manifest this update: Thu 13 Aug 2026 02:01:00 +0000
Manifest next update: Fri 14 Aug 2026 02:01:00 +0000
Files and hashes: 1: 0BNtWi6SoPuxVR9fF8cG7zLKJdM.asa (hash: JQH0eRg1/MLbrOriU97ZXNo1uEgS+5g9El98zw5+Iwk=)
2: 6-4X2RTKNMpiEFYDjOyhWMKIEoo.asa (hash: g77oK6pTbejX2g1b5SIn9onRlyoGOjAwy0AE8HqTQYY=)
3: C3q1PlgupTSu7535g3AwDEhvM-k.roa (hash: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8=)
4: G04crXnxnwsY-wZQQQ-23nM91Po.roa (hash: pLGupbllfkIJitF0PCYQsDKFpIoSGHVmNvPx18E29Xo=)
5: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (hash: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M=)
6: N0-wLo3d8-mJYCRhurdBRO1t_B4.roa (hash: /UHlJczzfCnXbaUE6VWZu1Btrd9QX/hGlbajTUY+gcE=)
7: cjq4Tl5Zv8hqJ1gtAseRPtN79pU.asa (hash: GA4dh/bIEQ4oPs9+wDpRKBhwprwPPv1msthK5b2yByM=)
8: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: 7ZCXb1nu3s2l2y1GkmsHbWzOXSUmr1cAWZ8FfRvVhEI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:f8:d9:f1:03:1e:5b:08:40:48:b0:91:c2:0b:b9:08:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Aug 13 02:01:00 2026 GMT
Not After : Aug 14 02:01:00 2026 GMT
Subject: CN=d225c6033f7fa278c1e4d61e80ecce0e1d7b15cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:d5:d9:8c:d3:8e:06:24:80:a5:71:09:1a:3f:
22:aa:58:69:e1:de:6d:18:22:87:d6:cc:6e:00:fb:
fb:5d:88:d2:8f:8c:a8:85:b0:26:0e:79:a5:a7:07:
fc:7a:ba:51:89:cf:a8:b2:4c:82:45:72:5f:76:32:
de:72:c1:36:cc:ef:24:7c:d4:06:2c:c8:88:5e:e4:
48:58:fe:ec:68:e2:81:22:4a:bd:1d:1d:db:a8:c8:
5a:2c:a4:a6:44:b1:f0:06:5d:01:5d:5c:53:08:94:
eb:fb:91:cc:95:d3:84:ad:64:67:20:a7:3a:48:21:
46:65:f6:a5:87:30:ef:48:0e:29:41:51:b2:f1:ef:
f9:56:8d:a7:06:2d:bb:35:b1:dc:3f:28:94:10:1e:
c9:e6:89:64:4a:ba:27:90:0a:f8:46:95:ef:cd:d7:
e4:16:1f:ac:6c:f8:3d:f3:f6:7b:8a:1f:fe:cb:99:
6e:4f:1b:b0:59:48:10:d7:9f:8d:0b:6b:ce:0e:56:
9c:fc:97:e0:4d:1b:a4:ed:c6:40:37:1e:99:56:24:
dc:a4:31:78:25:09:76:4b:d1:33:c3:3c:a1:9e:32:
ec:a6:d0:f4:54:16:85:55:15:32:b7:ff:8d:13:5b:
23:2a:ab:cd:eb:9e:ea:51:69:37:57:fc:ae:08:7c:
de:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:25:C6:03:3F:7F:A2:78:C1:E4:D6:1E:80:EC:CE:0E:1D:7B:15:CB
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3c:4e:38:82:bd:ee:67:2c:d8:d9:d9:b1:12:59:d2:c1:4f:e1:
ab:fb:04:b6:00:eb:8e:c3:da:cc:6a:2e:62:ec:c6:47:01:cf:
d2:1b:89:c9:3b:66:52:03:a4:4e:0f:81:db:8c:39:45:c6:60:
e6:f9:b6:75:5c:09:db:ce:73:85:81:89:35:8b:72:0c:27:00:
3a:b9:ff:fb:96:5e:c7:70:06:81:f7:ae:27:ab:38:f2:12:40:
95:a2:49:d2:62:b4:5c:05:6c:1e:0a:1d:20:e0:69:30:d4:e4:
22:37:ec:ef:dd:f2:e9:d0:93:b4:02:1d:05:31:a1:91:63:4e:
6c:82:fe:0b:aa:e5:7d:c7:ec:3d:e6:6d:81:07:1e:8c:b6:ab:
28:93:6d:6a:12:be:60:dc:68:34:80:fc:fb:29:1e:03:41:b5:
22:e1:03:3f:8e:46:b1:d8:a1:c8:d6:67:e3:ac:b1:52:62:eb:
a0:f2:bf:24:a0:03:e2:56:a3:d7:5f:51:cd:65:59:d2:74:80:
e9:a9:a8:dd:c7:27:42:3e:a4:90:62:3c:47:39:f1:8b:a2:43:
ec:df:0e:b6:72:a3:64:63:1d:64:1b:4f:65:f6:d5:8d:ae:35:
b5:ef:ce:90:36:5a:85:03:70:12:46:b8:8a:73:d4:ff:d9:60:
61:e6:0b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 07:51:42 2026 by rpki-client