Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: qsI31BYEEMyoavpou9iSayBtA+o+EFy8GR4bS+uSwDU=
Subject key identifier: 0D:FD:EB:31:62:D1:AD:D0:E7:06:51:25:11:11:C5:72:7D:FE:34:3E
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019FA184C916917BF32962CF0B3FD74E92D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 1086
Signing time: Mon 27 Jul 2026 03:01:01 +0000
Manifest this update: Mon 27 Jul 2026 03:01:01 +0000
Manifest next update: Tue 28 Jul 2026 03:01:01 +0000
Files and hashes: 1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: X58paFUnlx/W8VSoZ3oupma6d43T+LGIst3H13jfG4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:84:c9:16:91:7b:f3:29:62:cf:0b:3f:d7:4e:92:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Jul 27 03:01:01 2026 GMT
Not After : Jul 28 03:01:01 2026 GMT
Subject: CN=0dfdeb3162d1add0e70651251111c5727dfe343e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:55:c9:66:9a:f7:80:81:f1:7e:33:06:c8:14:
83:9d:6c:42:49:1e:8a:01:a0:08:9e:a1:fc:f9:3d:
bc:4c:24:a4:e9:2e:dc:1c:69:ca:83:e5:a0:17:e4:
6c:69:3c:a6:20:72:b3:cf:52:5a:5c:94:05:b6:29:
34:52:ed:ae:76:2b:7c:48:72:68:21:6d:93:06:75:
37:b0:2d:dd:c0:f7:fe:83:08:fa:f1:24:92:c6:b4:
12:07:5f:84:42:6f:35:22:aa:9a:ba:9d:b2:96:e1:
5f:28:7b:b6:2b:0e:99:dd:e1:78:d8:ee:a9:b0:92:
41:8e:5e:cd:d5:23:a1:53:77:f3:29:21:76:e5:b3:
29:39:f1:34:b3:bc:f4:a5:47:1b:cc:c6:b5:0c:23:
43:c8:ad:d2:b7:f3:d0:90:a3:92:a4:0f:ce:ec:c2:
5c:c9:df:91:46:d6:f9:6e:f6:7e:f9:0d:f0:a2:04:
1e:57:c5:6a:60:7b:23:c9:b7:ba:0d:a6:ce:53:e7:
e9:ba:d0:37:62:0b:08:55:bc:16:70:fa:78:cc:5a:
b0:41:79:16:5e:a4:a3:08:33:1d:8e:2a:81:32:c0:
0f:86:a7:b9:b8:66:71:50:74:78:ce:ed:63:ee:70:
26:ea:f3:b5:b5:5c:78:ad:19:13:7f:99:e4:2c:59:
0e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:FD:EB:31:62:D1:AD:D0:E7:06:51:25:11:11:C5:72:7D:FE:34:3E
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:04:61:b2:4b:02:ee:bc:4f:3c:86:37:ab:48:ba:ec:cb:56:
ec:2d:5f:f0:59:db:cb:30:98:cf:ad:25:b5:d6:8c:6c:ac:23:
b7:6b:1a:5f:dc:33:ca:22:64:bf:13:43:08:27:e2:89:8f:be:
7a:6d:d5:62:ea:0d:50:99:6b:7c:97:81:87:04:8d:31:cf:fa:
9c:d3:e7:20:c5:89:67:de:7c:1c:6c:e4:ab:20:c4:a2:10:11:
4f:54:cb:1a:b1:31:3f:49:b4:0d:c4:8d:22:82:a3:f8:f8:a4:
d2:6c:16:58:73:ed:1e:3d:63:28:77:f7:94:69:71:a1:86:cb:
57:09:63:d8:1e:cc:aa:80:46:ed:96:ac:5e:49:25:bd:a6:d5:
e6:66:4e:3c:a6:00:38:78:b3:ee:07:75:c2:d0:08:0f:cb:d3:
8d:20:b8:6b:28:bf:f7:d5:2f:32:03:2e:89:ab:4f:93:9d:ad:
d9:d9:2a:82:ab:d8:2f:35:90:0f:2c:a9:a7:04:b3:19:9a:f2:
d3:12:b9:df:0c:e8:12:ae:b6:05:76:dc:52:91:c9:e7:5e:f5:
dc:50:7d:c2:8b:7b:3b:13:03:6b:f6:e5:d7:db:7b:ef:78:42:
9a:19:7d:71:d1:be:b5:37:55:e1:75:b6:3b:37:65:7e:88:17:
c8:3c:2e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 05:55:39 2026 by rpki-client