Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: VT9Hfie5EiXPjPVCGqTR5QEYsHXGghDZfMkkgKQHKj4=
Subject key identifier: 68:28:56:F2:F7:D0:1C:55:48:98:3B:82:C5:FC:3B:D6:BE:8E:CB:8C
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 01A0201E13607D460CB8AA1A5632A55F9E18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1565
Signing time: Thu 20 Aug 2026 17:00:36 +0000
Manifest this update: Thu 20 Aug 2026 17:00:36 +0000
Manifest next update: Fri 21 Aug 2026 17:00:36 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: lFjuiD9/7ZmGI+TMFISyizC0d41CwuE/tnLsLYz2giQ=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 13:32:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:1e:13:60:7d:46:0c:b8:aa:1a:56:32:a5:5f:9e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Aug 20 17:00:36 2026 GMT
Not After : Aug 21 17:00:36 2026 GMT
Subject: CN=682856f2f7d01c5548983b82c5fc3bd6be8ecb8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:e1:21:fb:31:1f:5a:b0:4b:3f:29:3a:0a:f3:
d7:d8:e0:70:80:dd:84:93:b4:51:e4:71:8e:e0:9e:
e6:2d:28:7b:e9:e4:c1:6e:26:12:49:55:1c:5d:f6:
a6:c9:87:89:3e:b5:7b:be:5b:0d:96:1f:e6:50:c3:
cc:86:5a:13:68:66:69:f8:6f:b1:d2:3c:30:5c:84:
06:1d:11:eb:ab:c3:94:80:c4:bf:32:ed:3a:2c:72:
09:ac:25:c6:57:6d:30:52:dc:43:81:7c:38:dc:18:
1c:b4:5d:d9:7e:be:01:df:01:dc:b7:69:29:54:29:
f1:ae:7e:02:88:78:a2:bc:c8:a9:ce:2e:54:63:b3:
4b:f2:fa:1f:8c:14:d6:3a:21:d7:05:4a:a2:62:66:
28:c2:0f:b4:2b:2c:0b:79:bc:67:39:f3:57:8b:21:
65:00:b2:78:c0:19:ee:c3:fc:1d:ef:07:62:1c:03:
b5:14:6b:06:5c:cd:f8:91:67:06:a3:89:71:3d:94:
4f:c6:68:4e:c5:5e:a9:03:73:22:27:1a:a8:37:d7:
6d:72:fd:47:9f:5a:59:83:4d:dd:cb:c7:ac:1d:42:
b9:e5:ac:6a:30:2f:11:04:ef:35:ad:c0:2f:61:27:
df:96:ed:91:c4:c0:8c:8a:55:f0:f8:85:db:d6:94:
16:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:28:56:F2:F7:D0:1C:55:48:98:3B:82:C5:FC:3B:D6:BE:8E:CB:8C
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:46:48:79:d6:2c:b1:69:91:d1:8b:1f:34:c7:07:92:77:cb:
da:04:6f:89:e7:4a:3a:44:6d:6f:01:0d:2f:b5:a3:83:2d:28:
55:82:ca:39:85:b4:05:04:b4:40:7d:74:b1:35:d9:f9:75:87:
5c:7a:3e:fc:c5:07:49:7e:6e:f6:11:8a:0d:9e:9f:a1:40:e8:
84:13:f9:c8:2f:17:83:ac:47:51:e9:22:07:68:67:a7:68:e4:
21:1b:12:a2:a4:ae:db:11:28:19:df:e4:fc:01:39:55:4c:ce:
34:bd:c4:46:e8:d9:cd:9b:e0:c3:88:7e:9d:7f:03:ec:aa:fd:
2a:e9:4f:85:ac:17:93:eb:f2:c1:31:7a:25:66:bd:2b:49:b6:
08:f0:74:fe:f5:c9:d5:9c:9d:b1:4b:a2:64:09:03:e9:e1:3f:
e6:1c:b6:ba:02:53:f4:94:1b:02:a5:31:a6:b5:83:74:00:83:
8a:85:3e:fb:89:f2:0f:3c:af:b4:54:40:06:17:ce:11:5a:a4:
81:69:74:63:c0:1d:e6:8b:ea:43:37:ef:02:b9:63:1f:5f:ce:
c1:51:77:f0:33:16:8c:26:8d:9d:76:51:33:17:7a:58:db:4a:
75:1e:eb:d4:2b:da:57:cc:a0:09:8f:a3:be:2d:b3:bf:47:e1:
5b:1b:91:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 22:55:37 2026 by rpki-client