Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: /O/3fpomBRk4duoRp0xy9W8T22RhBuywzmBX1k+0efE=
Subject key identifier: 52:28:E6:71:63:E4:F6:BF:A8:95:0C:A2:65:F0:36:B0:F7:B2:38:84
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019CE47EAD3377426A35AA3751D3EA7DA642
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0F1B
Signing time: Fri 13 Mar 2026 00:00:32 +0000
Manifest this update: Fri 13 Mar 2026 00:00:32 +0000
Manifest next update: Sat 14 Mar 2026 00:00:32 +0000
Files and hashes: 1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: hk2PpsRYeveSE/+suMuh0u3zy0iOWiM6QfY3rS5tVs8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 21:05:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e4:7e:ad:33:77:42:6a:35:aa:37:51:d3:ea:7d:a6:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Mar 13 00:00:32 2026 GMT
Not After : Mar 14 00:00:32 2026 GMT
Subject: CN=5228e67163e4f6bfa8950ca265f036b0f7b23884
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:34:c7:d6:46:3e:98:e3:01:20:03:a1:31:4d:
ca:58:e0:c0:36:17:f1:49:f1:c9:5a:57:f1:e7:7c:
19:38:11:8f:be:70:ea:b2:7b:23:ac:38:7a:4f:ec:
24:dc:b6:4f:3b:27:ab:c9:bb:10:e9:02:1e:df:28:
60:bf:6a:b9:01:5b:a8:61:f7:83:de:ab:78:e1:f3:
28:4a:fd:44:fd:bc:69:c0:66:94:9e:f7:e5:46:77:
cc:b4:09:99:4a:93:aa:5f:62:32:57:89:5b:ba:0f:
b7:5e:1a:3d:04:9d:79:7f:83:6a:a4:76:5e:fc:19:
9c:86:5b:c6:1e:d2:87:0b:cc:84:23:e3:e6:63:0e:
67:d8:5f:0b:12:77:e8:e3:17:65:ff:65:ef:99:34:
4a:20:e7:d6:d2:11:69:4d:c3:5e:f8:1b:ad:0a:52:
67:40:83:00:8d:fd:b0:81:8f:7f:30:ee:c2:20:4d:
b9:ab:8f:4c:83:f6:3c:fa:e6:4a:7f:e7:a0:20:04:
c9:d2:ca:a7:9a:a9:cd:b3:6c:41:fc:4c:89:e2:3e:
96:e8:81:fe:9d:7b:df:77:21:f7:9c:e3:66:06:34:
c6:40:0f:95:ba:de:95:d2:a9:46:a8:81:cc:f5:d7:
89:40:ab:e3:cc:62:8b:15:6f:98:22:06:5b:85:e0:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:28:E6:71:63:E4:F6:BF:A8:95:0C:A2:65:F0:36:B0:F7:B2:38:84
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:28:af:93:9c:fc:ac:64:d0:7d:95:b4:5c:97:9b:28:3e:ce:
4e:60:55:2b:74:f2:6f:a5:97:c2:3f:a4:e0:4b:d5:96:75:32:
01:8a:21:35:8b:df:0c:ea:96:1d:7e:c0:7d:17:ee:7c:bf:36:
a6:a7:df:a3:bd:f6:2f:3f:d0:98:2c:23:12:ba:5d:d9:10:46:
a0:d1:f6:ec:d5:97:c3:64:43:1c:b1:da:c5:be:d5:59:ad:5d:
a5:06:c9:d7:7a:1b:32:29:36:63:5c:ba:ae:48:a3:f3:81:51:
b4:23:e8:b1:1a:e5:1f:d2:2c:84:19:c3:9e:9b:ba:35:81:46:
f3:6b:e4:1d:b8:d9:d1:e0:13:4b:93:10:b3:95:9e:07:28:d3:
41:3e:b6:a9:5e:3b:44:81:27:bf:dc:dc:8f:00:8d:97:e0:cd:
5b:6e:e9:61:15:62:d3:98:06:2f:2b:93:01:c0:3f:2e:84:85:
b0:76:2b:42:97:d2:1b:51:08:6f:77:03:f9:5e:d8:fa:ca:75:
47:16:19:5e:08:b3:f0:35:be:46:b9:9a:7d:7e:a1:37:69:17:
76:90:01:bd:b7:3a:c5:23:0a:be:5e:10:a2:f5:41:21:ff:db:
2f:e4:b5:6a:78:74:96:4d:ea:23:9f:1f:14:3c:f0:65:74:51:
e9:70:32:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 13 05:00:05 2026 by rpki-client