Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: lliuT174CsPexn5e/szXQuYPu9jhJd9N3PpmgtAZHpU=
Subject key identifier: 20:61:60:D8:11:CF:6A:EE:82:E2:58:1A:AA:72:16:3A:81:29:ED:86
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019E4EB3AF6D32858D3DB07D77C85F847791
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 1474
Signing time: Fri 22 May 2026 08:00:59 +0000
Manifest this update: Fri 22 May 2026 08:00:59 +0000
Manifest next update: Sat 23 May 2026 08:00:59 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: FgrOXgWxfCgxISmG65GCmaBxJekpEGdDCXrsXkCnSP0=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 23 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4e:b3:af:6d:32:85:8d:3d:b0:7d:77:c8:5f:84:77:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: May 22 08:00:59 2026 GMT
Not After : May 23 08:00:59 2026 GMT
Subject: CN=206160d811cf6aee82e2581aaa72163a8129ed86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f5:b0:7d:c0:61:b7:30:e7:b0:5c:d2:47:e1:
a4:8d:74:9a:30:82:fb:e3:7e:81:0c:03:fe:86:fa:
4d:09:36:0e:a7:7e:19:0b:4d:eb:88:06:be:df:96:
52:76:1d:ab:5b:98:bc:49:1e:5b:90:35:96:6f:26:
52:12:f9:50:fe:43:7d:91:db:16:3a:7f:97:fa:bc:
a0:d3:36:70:9c:42:0d:62:a4:ed:cf:e9:51:00:11:
c8:9b:0b:1e:e2:1e:42:5d:70:d6:2e:7c:62:d3:de:
78:8f:e2:3e:a9:20:a1:24:48:a4:29:26:63:de:8d:
ce:29:85:a2:4b:6c:52:02:6e:04:6a:05:8c:1a:41:
12:e1:07:08:df:3a:5e:6b:e2:84:d9:65:88:96:f2:
74:42:23:55:00:a2:5a:7d:8a:ca:18:fb:92:c7:b6:
e3:8c:73:17:7a:e0:ba:54:46:4a:a8:1b:95:63:d2:
1e:f8:30:f8:11:0e:2f:09:8b:8c:74:8a:fc:a7:b3:
40:bc:16:e9:30:64:8f:e0:a9:f0:6d:29:69:74:ab:
9b:4c:37:39:6a:d2:e4:93:a4:f5:46:37:ec:ef:1c:
6a:d2:c7:ef:60:e5:fd:29:90:83:55:13:6b:69:a5:
df:c3:fd:d2:79:25:80:9f:e6:10:a3:a5:91:1f:e7:
c1:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:61:60:D8:11:CF:6A:EE:82:E2:58:1A:AA:72:16:3A:81:29:ED:86
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:1f:16:60:ea:91:ba:ab:7e:7d:b8:c3:39:ff:0e:1a:85:0a:
a3:01:ea:50:d7:55:a4:fc:ce:cf:7c:d8:6e:c0:02:73:5f:44:
3c:ca:55:6b:74:0a:ff:33:7c:d0:6f:8b:fb:26:69:23:e7:59:
47:ae:1d:57:93:b4:38:01:a9:b6:e3:f8:f7:e3:cc:86:d8:e3:
e1:31:61:1f:bb:5d:f8:aa:1a:d8:08:fc:08:af:5d:b0:28:be:
c8:83:54:50:a4:57:d0:6f:72:d3:62:48:ef:65:c7:9f:55:2c:
3e:c5:e7:04:b8:ab:bb:80:8a:f7:63:62:c6:6f:0c:91:52:31:
d6:27:69:22:48:ef:c6:b2:b8:30:6c:00:29:95:40:9b:3b:a1:
27:6a:ec:63:9b:25:b9:bc:7b:a8:3a:15:30:41:03:d0:c5:ea:
8e:2c:6a:00:09:c0:c3:65:c3:07:0e:87:12:2c:69:da:c7:7a:
a9:17:65:3b:9b:1c:1f:fb:be:a9:2b:f7:9f:c1:8e:bb:e6:c1:
30:6b:a4:43:d5:4b:62:62:f8:79:76:82:80:6e:2f:47:a9:40:
73:35:e7:c7:14:ef:52:8d:a3:b9:87:61:d8:fe:19:d3:9f:f7:
b2:04:04:88:ae:b6:b2:6b:8b:74:ca:2d:b3:a9:e0:f2:42:a1:
76:92:8d:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 22 15:17:58 2026 by rpki-client