Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
File: n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft (raw, json)
Hash identifier: bQnrlXCyRO8fZPXF+Yctzc1TfhsVtoDZbktoJdzV6Dg=
Subject key identifier: 6B:76:CF:CB:34:40:20:DE:D3:91:5C:F8:99:87:5B:07:DE:95:3E:50
Authority key identifier: 9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
Certificate issuer: /CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Certificate serial: 019D2327290BBC268C8933A92CA5E20731C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
Manifest number: 0633
Signing time: Wed 25 Mar 2026 04:01:02 +0000
Manifest this update: Wed 25 Mar 2026 04:01:02 +0000
Manifest next update: Thu 26 Mar 2026 04:01:02 +0000
Files and hashes: 1: aoQsvFOShg8unGdvRNHzyskZu6Q.roa (hash: p8PU4KP73BDGEEa9wvSrJwTPPhTgMiV7+d9ryeZmr2c=)
2: n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl (hash: 58jqV8uyrSh+0RKCZy46VwkMLK6DwuIcXb7b0+jzVxI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:23:27:29:0b:bc:26:8c:89:33:a9:2c:a5:e2:07:31:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f6c98d597b781b7a10c7e0edb1c48f6b81a5f8b
Validity
Not Before: Mar 25 04:01:02 2026 GMT
Not After : Mar 26 04:01:02 2026 GMT
Subject: CN=6b76cfcb344020ded3915cf899875b07de953e50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:fc:5d:a4:eb:4e:16:73:35:38:91:44:f4:44:
88:6a:37:32:c7:11:42:d7:4d:a2:c3:40:07:66:d9:
50:39:e1:7c:fd:8b:73:30:d6:c3:25:ee:de:27:75:
2b:94:76:0e:b7:be:b5:a0:ac:44:0b:67:b8:19:07:
55:77:6e:43:5e:ea:0b:d3:4a:a0:8e:2b:9e:bc:c6:
ec:a3:df:3d:37:ca:57:33:b7:0b:9f:87:1f:fa:f2:
d8:9d:c4:c1:04:c6:d7:a2:d0:f8:25:0c:ab:67:53:
da:2c:3b:b9:72:cb:18:71:8a:b0:a1:09:86:c1:9a:
58:eb:47:2e:6a:51:fb:42:80:09:e5:7a:d1:8c:8d:
ca:bc:36:d4:11:83:87:9b:5a:68:5b:ea:fa:ca:ac:
1b:66:f8:09:77:9b:a4:e0:5c:d4:92:53:f3:0d:6a:
a9:c9:7c:5e:a4:05:92:5a:97:5d:2a:d0:84:3b:7d:
75:e9:8c:de:95:29:02:5c:fa:cf:0a:e9:09:54:6d:
d7:ea:3e:c9:c9:d1:ed:28:ba:38:3e:a8:28:57:4e:
b7:2c:94:d4:2a:66:b5:ba:ac:81:b5:f6:f1:d9:6b:
d4:e4:45:4d:00:ec:3c:b9:8d:b7:bd:84:de:f8:79:
1c:f6:6b:79:cd:5e:0c:38:fa:53:4c:d3:8d:a4:0d:
8a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:76:CF:CB:34:40:20:DE:D3:91:5C:F8:99:87:5B:07:DE:95:3E:50
X509v3 Authority Key Identifier:
keyid:9F:6C:98:D5:97:B7:81:B7:A1:0C:7E:0E:DB:1C:48:F6:B8:1A:5F:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2yY1Ze3gbehDH4O2xxI9rgaX4s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f5ed1c-3797-400d-b72f-804cda5243b3/1/n2yY1Ze3gbehDH4O2xxI9rgaX4s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:00:31:08:f7:3a:be:92:ef:a9:25:37:69:85:af:6c:e2:a7:
9c:62:1f:59:d3:1a:ff:e5:3c:1e:c3:1c:6a:0e:6e:95:ef:75:
73:be:fc:07:70:63:45:ed:e7:d3:52:fe:2a:e9:8b:bd:9c:51:
e1:3e:78:13:62:3d:56:36:cc:ea:10:04:38:1a:90:5b:19:94:
88:fe:bb:de:9e:1d:e4:f1:c3:cf:ee:d7:61:db:73:4b:63:50:
d7:b5:01:3c:09:5a:4a:67:8a:99:94:7e:07:db:4a:04:b5:82:
cd:25:e7:07:d2:0f:df:62:6b:6d:8e:79:d1:6b:36:51:3c:2e:
63:3e:6f:14:1e:83:2f:04:e9:0a:bb:f6:40:15:2d:28:12:3d:
8b:26:76:cc:4d:21:9e:57:2f:e7:26:5f:5e:d2:6e:d5:38:a1:
b0:03:fa:de:47:f8:df:c5:ec:67:e6:ac:4c:af:42:81:6f:89:
60:ee:cb:c4:4a:8c:f9:4f:5c:8e:85:80:7c:5d:ae:31:9e:73:
24:0f:f2:a0:9c:d9:33:02:15:86:5b:3d:24:10:48:5f:f2:50:
6e:f8:aa:b6:66:60:a3:f4:e6:44:0b:92:ac:2b:76:3a:de:63:
88:21:e6:cd:6c:8e:91:2a:a7:3e:3f:10:92:30:ec:87:98:10:
15:1b:62:ea
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0jJykLvCaMiTOpLKXiBzHHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNmM5OGQ1OTdiNzgxYjdhMTBjN2UwZWRiMWM0OGY2Yjgx
YTVmOGIwHhcNMjYwMzI1MDQwMTAyWhcNMjYwMzI2MDQwMTAyWjAzMTEwLwYDVQQD
Eyg2Yjc2Y2ZjYjM0NDAyMGRlZDM5MTVjZjg5OTg3NWIwN2RlOTUzZTUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPxdpOtOFnM1OJFE9ESIajcyxxFC
102iw0AHZtlQOeF8/YtzMNbDJe7eJ3UrlHYOt761oKxEC2e4GQdVd25DXuoL00qg
jiuevMbso989N8pXM7cLn4cf+vLYncTBBMbXotD4JQyrZ1PaLDu5cssYcYqwoQmG
wZpY60cualH7QoAJ5XrRjI3KvDbUEYOHm1poW+r6yqwbZvgJd5uk4FzUklPzDWqp
yXxepAWSWpddKtCEO3116YzelSkCXPrPCukJVG3X6j7JydHtKLo4PqgoV063LJTU
Kma1uqyBtfbx2WvU5EVNAOw8uY23vYTe+Hkc9mt5zV4MOPpTTNONpA2KcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGt2z8s0QCDe05Fc+JmHWwfelT5QMB8GA1UdIwQY
MBaAFJ9smNWXt4G3oQx+DtscSPa4Gl+LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYt
ODA0Y2RhNTI0M2IzLzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mNWVkMWMtMzc5Ny00MDBkLWI3MmYtODA0Y2RhNTI0M2Iz
LzEvbjJ5WTFaZTNnYmVoREg0TzJ4eEk5cmdhWDRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASQAxCPc6
vpLvqSU3aYWvbOKnnGIfWdMa/+U8HsMcag5ule91c778B3BjRe3n01L+KumLvZxR
4T54E2I9VjbM6hAEOBqQWxmUiP673p4d5PHDz+7XYdtzS2NQ17UBPAlaSmeKmZR+
B9tKBLWCzSXnB9IP32JrbY550Ws2UTwuYz5vFB6DLwTpCrv2QBUtKBI9iyZ2zE0h
nlcv5yZfXtJu1TihsAP63kf438XsZ+asTK9CgW+JYO7LxEqM+U9cjoWAfF2uMZ5z
JA/yoJzZMwIVhls9JBBIX/JQbviqtmZgo/TmRAuSrCt2Ot5jiCHmzWyOkSqnPj8Q
kjDsh5gQFRti6g==
-----END CERTIFICATE-----
Generated at Wed Mar 25 09:51:54 2026 by rpki-client