Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
File: n2-3lUF5qWZrTLav40bR4h7DDkU.mft (raw, json)
Hash identifier: BklpkKrsLhhxmf9du2KP2KDwzzAkWgIKCWhDAx7yBr0=
Subject key identifier: 8D:9C:3D:35:F2:B1:8C:E2:85:96:EC:93:29:69:97:A1:D4:91:FB:AF
Authority key identifier: 9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
Certificate issuer: /CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Certificate serial: 019EF9B9BF42053F238AB2896809654CE53E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
Manifest number: 1980
Signing time: Wed 24 Jun 2026 13:02:40 +0000
Manifest this update: Wed 24 Jun 2026 13:02:40 +0000
Manifest next update: Thu 25 Jun 2026 13:02:40 +0000
Files and hashes: 1: 6-4X2RTKNMpiEFYDjOyhWMKIEoo.asa (hash: g77oK6pTbejX2g1b5SIn9onRlyoGOjAwy0AE8HqTQYY=)
2: 6W7MdARlMXl2B1LJ-tkqoS6g0qI.asa (hash: U8Fk2jP4GFzteMdfb1HCuZ2Ov9sGcKKPsVwSh3++h9Q=)
3: 6m1Zr_a79xM5w_A5UxoM7pPydiY.asa (hash: mwruC/EYleNBqGOjKp7xRfqBPuAa14ybRpQxed0X5Uo=)
4: C3q1PlgupTSu7535g3AwDEhvM-k.roa (hash: +Xqznz7Io+t3ty/aPZH16Tk1gYdzK6FYiAZVSE2/wc8=)
5: Jf2vTEPNd8NjocVpEpdcSsuJBPg.roa (hash: +DSGG9ZKYbDP94BqAef72OGaVGBA/oFoOlrhCFOV16M=)
6: N0-wLo3d8-mJYCRhurdBRO1t_B4.roa (hash: /UHlJczzfCnXbaUE6VWZu1Btrd9QX/hGlbajTUY+gcE=)
7: NUJylcfXdFrCcbkx_Ikhy-r9ACI.roa (hash: xCgVcHczCrXe0p6YIfGOAkusfmbv3Ur+pdnA0nDzp+0=)
8: n2-3lUF5qWZrTLav40bR4h7DDkU.crl (hash: 6Oh2tE51tFaSRBnfwb1ZbdouACkSqcHedtHmZC1mvLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 13:02:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:b9:bf:42:05:3f:23:8a:b2:89:68:09:65:4c:e5:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6fb7954179a9666b4cb6afe346d1e21ec30e45
Validity
Not Before: Jun 24 13:02:40 2026 GMT
Not After : Jun 25 13:02:40 2026 GMT
Subject: CN=8d9c3d35f2b18ce28596ec93296997a1d491fbaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:23:2c:0c:68:02:f6:19:26:8d:c6:e0:45:91:
a3:77:c2:4f:57:0d:69:f8:12:83:65:f0:23:78:94:
18:3f:34:db:73:2f:46:0e:e0:42:fb:df:b4:56:3f:
d0:2e:a4:f1:62:46:bf:81:e4:9b:71:43:7e:ae:8a:
25:c4:9a:0e:70:bf:63:82:2d:e6:ee:82:2b:8c:b2:
64:59:b9:bb:07:29:27:1c:dd:aa:40:de:78:6e:3d:
bb:b9:2b:0c:2f:9b:7d:c4:7f:2e:35:bf:dd:c3:31:
22:d2:87:84:58:bf:d8:e1:2d:3b:f5:9b:f0:5a:4d:
63:07:3b:51:85:c7:b9:1c:2a:95:34:48:b1:e6:4e:
ac:0e:c7:7d:24:e6:38:e1:49:8f:70:69:67:9f:91:
a0:0a:79:f9:64:67:b7:8f:b9:33:e9:b8:85:0a:c7:
37:41:d2:af:2b:f4:a5:83:28:2d:70:a3:55:ba:0b:
17:d0:7e:c7:2e:ee:2a:eb:81:46:c3:7e:0a:83:f0:
50:f7:65:60:2a:5f:57:ed:3f:34:dc:35:a5:dc:f5:
d9:53:bf:e7:02:cd:cb:bb:e1:78:f0:e8:3d:dd:f6:
63:82:75:9d:31:93:85:70:7e:c9:33:dd:ec:d2:25:
71:b6:14:77:63:53:28:74:74:0a:89:a4:17:15:84:
0c:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:9C:3D:35:F2:B1:8C:E2:85:96:EC:93:29:69:97:A1:D4:91:FB:AF
X509v3 Authority Key Identifier:
keyid:9F:6F:B7:95:41:79:A9:66:6B:4C:B6:AF:E3:46:D1:E2:1E:C3:0E:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2-3lUF5qWZrTLav40bR4h7DDkU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/0a3fff-1a42-4044-ae8f-7354a73bda7e/1/n2-3lUF5qWZrTLav40bR4h7DDkU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:5e:8e:cc:5f:92:ba:8e:7b:63:e1:84:9f:83:e9:32:1e:c4:
a3:77:6b:c7:69:cc:6b:72:43:62:51:ae:ee:fc:ba:8c:c9:dc:
f6:7f:96:36:8e:a0:d8:8b:05:33:fb:dc:90:79:1d:9b:d2:b4:
44:a6:91:a9:8e:d2:de:7b:44:d1:a5:80:3e:c3:ee:13:e8:2a:
2f:f3:ef:2f:c3:de:6b:22:56:ef:33:89:54:df:13:2d:07:79:
dc:17:c4:4f:08:16:78:ec:c4:cb:ba:05:86:36:bf:f5:d0:ac:
66:66:19:c2:af:c7:f1:b3:cd:88:f1:78:1e:7d:11:3b:ef:a4:
65:f8:98:0b:80:18:ff:27:e8:cc:79:cb:4c:26:72:e1:e4:00:
4c:1f:a9:3f:d9:ca:96:99:c1:9f:00:f6:14:34:50:71:2b:7e:
8e:0b:00:f8:7c:17:78:a3:c2:58:2c:ef:41:c9:be:48:aa:49:
33:07:97:09:dc:7a:78:ff:d4:ed:83:ec:87:1e:61:73:49:58:
e6:54:a5:15:cf:a7:bc:26:d1:9e:82:52:32:0e:ea:0e:7d:15:
ba:63:eb:43:86:df:f8:0d:1f:99:bf:b4:fc:c7:24:60:48:e6:
29:65:09:30:08:37:27:eb:50:f4:05:cb:a3:83:f6:8b:29:b7:
4c:b1:65:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ75ub9CBT8jirKJaAllTOU+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmZiNzk1NDE3OWE5NjY2YjRjYjZhZmUzNDZkMWUyMWVj
MzBlNDUwHhcNMjYwNjI0MTMwMjQwWhcNMjYwNjI1MTMwMjQwWjAzMTEwLwYDVQQD
Eyg4ZDljM2QzNWYyYjE4Y2UyODU5NmVjOTMyOTY5OTdhMWQ0OTFmYmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzyMsDGgC9hkmjcbgRZGjd8JPVw1p
+BKDZfAjeJQYPzTbcy9GDuBC+9+0Vj/QLqTxYka/geSbcUN+roolxJoOcL9jgi3m
7oIrjLJkWbm7ByknHN2qQN54bj27uSsML5t9xH8uNb/dwzEi0oeEWL/Y4S079Zvw
Wk1jBztRhce5HCqVNEix5k6sDsd9JOY44UmPcGlnn5GgCnn5ZGe3j7kz6biFCsc3
QdKvK/SlgygtcKNVugsX0H7HLu4q64FGw34Kg/BQ92VgKl9X7T803DWl3PXZU7/n
As3Lu+F48Og93fZjgnWdMZOFcH7JM93s0iVxthR3Y1ModHQKiaQXFYQMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI2cPTXysYzihZbskylpl6HUkfuvMB8GA1UdIwQY
MBaAFJ9vt5VBealma0y2r+NG0eIeww5FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYt
NzM1NGE3M2JkYTdlLzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8wYTNmZmYtMWE0Mi00MDQ0LWFlOGYtNzM1NGE3M2JkYTdl
LzEvbjItM2xVRjVxV1pyVExhdjQwYlI0aDdERGtVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf16OzF+S
uo57Y+GEn4PpMh7Eo3drx2nMa3JDYlGu7vy6jMnc9n+WNo6g2IsFM/vckHkdm9K0
RKaRqY7S3ntE0aWAPsPuE+gqL/PvL8PeayJW7zOJVN8TLQd53BfETwgWeOzEy7oF
hja/9dCsZmYZwq/H8bPNiPF4Hn0RO++kZfiYC4AY/yfozHnLTCZy4eQATB+pP9nK
lpnBnwD2FDRQcSt+jgsA+HwXeKPCWCzvQcm+SKpJMweXCdx6eP/U7YPshx5hc0lY
5lSlFc+nvCbRnoJSMg7qDn0VumPrQ4bf+A0fmb+0/MckYEjmKWUJMAg3J+tQ9AXL
o4P2iym3TLFlWg==
-----END CERTIFICATE-----
Generated at Wed Jun 24 17:04:49 2026 by rpki-client