
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
File: N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft (raw, json)
Hash identifier: 2R5RIUKHU8/uXOynZPHD83MTQa9D9l9Wj4KeZFCqLaE=
Subject key identifier: 7C:18:D2:82:1C:FF:E0:83:4B:26:4B:F5:6C:6A:8C:AA:40:D1:35:99
Authority key identifier: 37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
Certificate issuer: /CN=3763c7106a5f2640162e7980583eab5bd8008c45
Certificate serial: 019F38605468026E45E4AEF8B5A0C9A987DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
Manifest number: 14ED
Signing time: Mon 06 Jul 2026 17:01:04 +0000
Manifest this update: Mon 06 Jul 2026 17:01:04 +0000
Manifest next update: Tue 07 Jul 2026 17:01:04 +0000
Files and hashes: 1: K8kQWZApKyfdrSsvJbtGF46eEXk.roa (hash: oi6V0dHlcK/YOzzPobmFLKwDp2XrDFduC+6KEZC8gLw=)
2: N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl (hash: 2CYr9zBinrKYXlpUIE2qjd/Xtciwk/Qq8dhR32F9PIs=)
3: UISIlaAhwt9-Bgyru2r4h5lgoBc.roa (hash: MvTsPyT/kVTtSSrPWg11ftoAtv/HLU2Xu6j7uk9a+Qc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:60:54:68:02:6e:45:e4:ae:f8:b5:a0:c9:a9:87:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763c7106a5f2640162e7980583eab5bd8008c45
Validity
Not Before: Jul 6 17:01:04 2026 GMT
Not After : Jul 7 17:01:04 2026 GMT
Subject: CN=7c18d2821cffe0834b264bf56c6a8caa40d13599
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a4:1d:08:d5:e1:ff:27:07:c7:79:d8:41:7c:
45:68:8c:f5:74:30:f5:e8:66:d5:75:93:6a:03:3c:
bb:92:06:34:aa:59:cf:0f:34:04:56:4c:c4:42:d9:
72:89:cd:b1:c3:1d:13:28:2d:57:06:44:a2:fa:a3:
05:74:ee:69:3d:b9:cf:fc:e3:c9:51:7a:fe:54:f5:
b9:1a:bf:55:de:95:4c:2e:82:a3:3c:ab:7f:d0:a1:
ea:d1:82:91:ce:eb:98:98:fa:92:e4:e6:77:e7:50:
97:e4:78:e2:d6:19:65:9c:fb:56:9d:6f:ea:57:2c:
aa:15:3f:06:ff:7d:af:95:98:e8:de:d9:6a:07:92:
48:fc:22:7d:d9:06:d5:5d:7e:0d:14:9a:7e:7c:84:
39:8f:50:1d:f5:fe:ec:7a:2c:d2:eb:1b:b4:61:06:
db:dd:62:44:b2:d4:e6:8c:d1:0d:eb:90:18:e3:89:
b3:7a:f1:bf:ba:de:11:78:c1:77:ee:e1:ae:a8:4b:
68:8b:da:74:1f:d0:15:69:3b:f0:9f:29:df:60:7d:
f2:f2:26:03:df:b6:45:db:2f:57:71:e3:44:4a:27:
54:e6:93:48:27:f3:b9:6b:9d:bd:01:cf:dc:59:3c:
b8:23:dc:49:d1:46:5c:e4:56:a7:6f:a4:3f:33:ad:
cf:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:18:D2:82:1C:FF:E0:83:4B:26:4B:F5:6C:6A:8C:AA:40:D1:35:99
X509v3 Authority Key Identifier:
keyid:37:63:C7:10:6A:5F:26:40:16:2E:79:80:58:3E:AB:5B:D8:00:8C:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PHEGpfJkAWLnmAWD6rW9gAjEU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/33541a-f9ac-475a-b297-88a0e450a17b/1/N2PHEGpfJkAWLnmAWD6rW9gAjEU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:c5:96:97:20:1f:d4:ba:29:0a:f5:71:7c:aa:f5:de:ab:12:
cf:7d:57:7d:87:63:1c:e1:ff:93:7b:79:1d:5f:df:ef:d5:98:
af:ae:7d:67:84:b0:ed:58:f0:7b:66:38:a6:00:33:4e:4d:75:
21:f1:0e:35:70:59:fa:90:ca:cf:63:77:f0:57:51:78:2f:ea:
71:51:53:fa:75:5e:43:c0:7d:15:56:32:45:76:62:e3:b4:9c:
2f:8a:00:ac:7d:94:26:48:54:6a:b6:4a:f0:1b:46:5b:39:cc:
6a:61:ad:f5:a3:17:2a:66:63:da:6d:9f:74:10:8f:b2:11:e1:
58:38:9f:1d:8b:59:37:3d:ea:2e:76:69:2d:1d:99:c7:dd:60:
f2:7a:23:5f:25:5e:80:58:50:c4:fe:93:cd:c2:e7:39:8a:51:
31:ec:8f:b1:50:65:c2:4c:8d:33:ce:8a:22:2a:ae:47:d0:54:
3e:ed:8d:d4:7d:10:0a:44:e7:a7:d2:29:db:08:eb:b1:e6:ca:
37:d3:74:d0:e7:be:34:25:51:d5:5e:5f:a1:45:28:0d:96:ab:
53:1e:bc:95:14:e9:8f:20:fc:7d:2d:45:8c:60:a2:ac:9e:1f:
fb:ef:d7:d4:f2:8e:02:f3:a5:47:d4:21:74:16:92:b9:da:0a:
ba:c7:d4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:25:05 2026 by rpki-client