Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: yD6tyhehOSGHt85vG83u9rE8b4d7BnPe8UQYui/BJXk=
Subject key identifier: 37:E1:2B:FB:9F:07:15:2F:1E:D4:28:0B:7A:EA:6C:4C:EE:41:3E:88
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019DDDD69FCF88E98F9AE438638A6A07D5BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 18ED
Signing time: Thu 30 Apr 2026 10:02:03 +0000
Manifest this update: Thu 30 Apr 2026 10:02:03 +0000
Manifest next update: Fri 01 May 2026 10:02:03 +0000
Files and hashes: 1: 6-4X2RTKNMpiEFYDjOyhWMKIEoo.asa (hash: g77oK6pTbejX2g1b5SIn9onRlyoGOjAwy0AE8HqTQYY=)
2: 6W7MdARlMXl2B1LJ-tkqoS6g0qI.asa (hash: U8Fk2jP4GFzteMdfb1HCuZ2Ov9sGcKKPsVwSh3++h9Q=)
3: 6m1Zr_a79xM5w_A5UxoM7pPydiY.asa (hash: mwruC/EYleNBqGOjKp7xRfqBPuAa14ybRpQxed0X5Uo=)
4: C3q1PlgupTSu7535g3AwDEhvM-k.roa (hash: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8=)
5: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (hash: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M=)
6: N0-wLo3d8-mJYCRhurdBRO1t_B4.roa (hash: /UHlJczzfCnXbaUE6VWZu1Btrd9QX/hGlbajTUY+gcE=)
7: NUJylcfXdFrCcbkx_Ikhy-r9ACI.roa (hash: xCgVcHczCrXe0p6YIfGOAkusfmbv3Ur+pdnA0nDzp+0=)
8: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: OrcfySYIHtq6643MPOILK5hA32IAz3oYIsbtPXi08fE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 01 May 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:dd:d6:9f:cf:88:e9:8f:9a:e4:38:63:8a:6a:07:d5:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Apr 30 10:02:03 2026 GMT
Not After : May 1 10:02:03 2026 GMT
Subject: CN=37e12bfb9f07152f1ed4280b7aea6c4cee413e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:28:f1:74:dc:7a:9d:39:a9:aa:6f:28:ce:2b:
d6:fd:a4:13:c5:36:3a:78:7f:3e:68:b6:27:eb:fe:
9f:49:71:39:1e:25:d3:f3:31:c1:cf:b7:54:9f:03:
f6:64:7a:55:01:ee:42:f3:db:68:d5:13:63:0f:c1:
cc:27:62:40:6e:8c:5f:18:9a:b5:6d:9d:0d:17:bc:
25:0c:0b:2e:78:8a:85:84:fa:3f:ee:3c:b6:45:4a:
56:a3:9a:d9:68:8c:63:b0:9a:5e:a0:30:a7:cd:9a:
4c:6a:9e:fb:f1:6a:ad:b9:11:18:97:dc:dc:65:4d:
76:20:a8:5f:a3:c2:89:4a:99:0a:d9:4c:87:53:90:
b9:a4:89:89:9d:94:60:71:ce:ee:4e:fa:1c:ba:5f:
80:64:4c:63:c4:bc:1c:6f:34:fa:8b:cc:c6:4e:27:
7e:5c:86:c2:c4:d7:eb:91:f0:99:a4:30:95:2f:b5:
17:18:a6:ff:f6:e6:59:52:47:ea:03:2e:e8:95:a9:
f2:de:14:14:3a:9b:97:31:e2:0a:ba:22:86:df:7e:
73:1c:9b:bd:0c:fe:ed:b5:26:14:2c:ef:9d:07:72:
39:ac:cc:dd:d0:8d:47:98:48:62:cf:cf:32:5f:62:
0e:9f:c5:56:21:f3:a9:4f:57:5c:83:19:e2:8a:5e:
d5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:E1:2B:FB:9F:07:15:2F:1E:D4:28:0B:7A:EA:6C:4C:EE:41:3E:88
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a0:13:1a:77:57:47:3d:55:ff:ce:b8:ba:e3:61:49:ac:40:
87:bd:43:af:34:c6:0f:6f:de:58:e7:40:d2:8e:48:51:88:37:
49:e3:a0:50:69:d6:2b:cc:65:35:44:73:d2:9b:e9:7f:56:42:
1c:af:c4:61:08:0d:61:18:ac:ad:b3:b9:48:87:90:c0:7d:21:
d4:9d:9e:5d:3c:1b:33:11:2c:06:02:a9:de:44:98:32:f3:ba:
9c:bd:19:c5:38:9c:14:3d:f3:54:6b:f4:c8:0c:72:4f:ce:63:
15:0a:36:d4:56:18:80:f0:bf:13:ed:a4:39:d5:cc:57:c5:b8:
28:03:e6:97:ba:27:0a:cf:91:ff:59:6a:67:3a:24:30:3b:83:
17:03:94:fb:b2:00:50:54:96:ad:97:2d:20:f7:29:ed:fd:c6:
a9:00:27:68:a1:0e:2e:69:75:ea:cf:ac:66:7f:be:e6:35:96:
8d:d7:9c:d7:51:dd:31:ea:65:13:c8:0a:14:03:c8:f5:bf:b6:
35:6e:1d:2e:5a:23:3e:0e:6a:85:bd:87:ff:02:17:63:13:f4:
c2:a4:8b:92:0d:97:e7:18:6b:d5:6c:c6:6b:71:70:3d:45:c8:
5d:cb:54:ea:56:1a:29:f0:69:cf:0c:3e:fe:00:9b:82:a9:01:
5c:49:4f:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 12:49:36 2026 by rpki-client