Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
File: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft (raw, json)
Hash identifier: GhuBIeC615Kuui6aR/K0HuvAhZ0KBFgADXJ1FygcYL8=
Subject key identifier: 01:20:13:7B:80:F1:85:0C:44:E2:F3:A8:35:A3:07:EA:1F:92:E6:0B
Authority key identifier: 37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
Certificate issuer: /CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Certificate serial: 019D39AEB8CAE136E078E50DAFC5D4FB6C3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
Manifest number: 0943
Signing time: Sun 29 Mar 2026 13:00:45 +0000
Manifest this update: Sun 29 Mar 2026 13:00:45 +0000
Manifest next update: Mon 30 Mar 2026 13:00:45 +0000
Files and hashes: 1: 4zAmEJqR1DqYOFNN31dLsnJzv_g.roa (hash: 0KHfMaTBbna47YAZcNimsTmzVEm9F8k0s5RoP/K5SQA=)
2: N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl (hash: 4W+heNPiyUjO1koMyKu4cCraqpCXK3pMLjOaA7mjeV4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 13:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:ae:b8:ca:e1:36:e0:78:e5:0d:af:c5:d4:fb:6c:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3763e45b816493ccdbdd4b07708a21fb73a1e599
Validity
Not Before: Mar 29 13:00:45 2026 GMT
Not After : Mar 30 13:00:45 2026 GMT
Subject: CN=0120137b80f1850c44e2f3a835a307ea1f92e60b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:bb:ab:f3:80:34:45:cd:b3:77:83:d5:f0:45:
b4:0c:8e:74:a3:d7:b3:bf:eb:d1:1e:92:9c:64:39:
e8:25:15:66:ae:f2:7d:63:c0:9d:55:ec:92:fd:73:
a1:ba:0b:68:c8:34:18:09:4c:50:d4:33:f9:34:33:
eb:ed:0d:a8:08:39:d9:e6:b3:5f:fa:e8:13:ee:bc:
5d:c6:0e:1b:f6:88:d8:a8:b4:af:c3:34:39:f7:02:
8f:c4:7d:31:c9:b7:c0:e9:f0:03:fe:3b:29:f1:50:
75:dc:90:89:57:e7:de:69:81:83:60:b5:68:b3:ad:
75:11:66:c4:ec:c0:d9:c2:f7:83:22:cd:4a:5f:9f:
33:77:07:f9:85:3c:ab:59:fe:d4:de:8e:56:76:cd:
08:0d:30:15:70:80:ad:14:3a:1a:a7:18:f3:02:e6:
1d:ec:95:ae:b6:7d:d3:d5:d7:63:3b:50:53:c6:4c:
b7:08:fe:c9:e7:f8:88:72:fb:8e:5d:81:b5:a9:d8:
3f:15:15:44:be:bd:ff:5c:e2:8c:49:ac:e7:07:30:
e2:15:a8:bd:c3:1c:14:46:d9:e2:ef:eb:b0:71:d2:
71:d8:f0:9e:a4:bf:52:68:c2:dc:fe:4d:12:c2:1f:
02:0d:1b:38:3d:ee:8d:4d:91:02:bf:a4:6c:85:89:
89:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:20:13:7B:80:F1:85:0C:44:E2:F3:A8:35:A3:07:EA:1F:92:E6:0B
X509v3 Authority Key Identifier:
keyid:37:63:E4:5B:81:64:93:CC:DB:DD:4B:07:70:8A:21:FB:73:A1:E5:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/adbb47-572a-49cc-a6d0-51ff20f9fef9/1/N2PkW4Fkk8zb3UsHcIoh-3Oh5Zk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:a8:78:35:ff:60:ab:48:3f:8a:94:a3:d8:39:1a:34:ba:26:
fa:77:af:60:17:01:77:27:57:a0:73:aa:ba:d7:84:f1:79:bb:
6b:16:41:0b:10:54:57:b2:79:a1:b2:a4:ab:ee:66:54:70:8a:
7c:35:b1:d6:e8:dd:67:d3:12:50:c6:10:6c:fc:90:da:f3:97:
3e:dc:57:82:4c:60:76:13:0e:91:24:8a:3d:22:52:28:22:33:
36:4f:5d:a8:2b:c2:60:9e:3f:f4:2b:3e:07:97:dc:c9:5e:f5:
67:32:ff:1c:90:cf:3f:95:c0:e5:c2:cc:f5:fa:45:fc:3e:e9:
b7:c4:70:3d:51:13:88:c3:56:54:31:59:3e:a2:08:dc:c7:be:
a3:d5:99:bf:ae:2e:a4:6c:d9:32:13:0f:09:dc:f8:9d:95:f4:
46:36:6d:d8:f7:87:38:29:c2:22:9f:fb:51:25:b4:3f:6f:9a:
ca:fd:87:fe:ae:80:dd:ef:a8:52:5d:48:88:59:6a:ea:90:e4:
e8:60:56:5c:b2:c5:23:8e:35:6c:90:74:bf:f9:ce:de:8a:47:
78:5b:f1:7a:1a:37:5d:49:d1:02:09:c1:ad:bb:34:cd:05:14:
4e:d5:f3:9b:12:99:f8:eb:33:11:98:6f:3c:0a:93:6e:71:49:
41:12:e7:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 19:53:51 2026 by rpki-client