Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
File: N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft (raw, json)
Hash identifier: uMyEEl4pro6HrRd53YOLnPWsCwZ8DG6Be9LjpycEc68=
Subject key identifier: A7:70:CA:1F:9A:A7:3A:EB:7F:32:88:56:42:16:EE:86:07:A0:47:5A
Authority key identifier: 37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
Certificate issuer: /CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Certificate serial: 019DCC3D51F05492B74BF25882EB5987BCEE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
Manifest number: 0F93
Signing time: Mon 27 Apr 2026 00:01:03 +0000
Manifest this update: Mon 27 Apr 2026 00:01:03 +0000
Manifest next update: Tue 28 Apr 2026 00:01:03 +0000
Files and hashes: 1: 7gnjXnI-ZTpVeuTinf1LnDXydf0.roa (hash: 8DVOv1AjDNoic42uVDeO1fW4tNhyh+GK5DnAzDK9vtU=)
2: N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl (hash: V5/+ZD1DnxQpMBaQhTnvbN16/cLpHxWY3j21unuCax8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 00:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cc:3d:51:f0:54:92:b7:4b:f2:58:82:eb:59:87:bc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37602539ec32c3919ff1cbc9594ddcab815674c5
Validity
Not Before: Apr 27 00:01:03 2026 GMT
Not After : Apr 28 00:01:03 2026 GMT
Subject: CN=a770ca1f9aa73aeb7f3288564216ee8607a0475a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:a7:34:84:5e:39:ba:34:0b:9b:88:48:f2:f9:
0a:02:42:ef:02:9e:95:c4:d5:29:93:5b:3b:89:37:
cc:96:6e:9b:ac:55:12:e9:f4:e6:3f:81:0b:f9:ff:
d2:01:dd:46:a5:12:0b:fc:bc:7e:41:ad:64:1d:62:
7d:06:05:8f:af:f6:31:6f:ac:a3:28:8e:73:2d:4c:
1e:90:37:25:de:5a:e8:e9:51:81:cb:b0:48:11:ca:
00:bf:63:7d:19:c7:bb:ba:7e:be:95:78:f4:b0:97:
e6:7e:e3:3d:16:73:8f:10:71:24:ab:0c:63:bc:74:
5d:fe:4d:94:e6:64:c0:7d:99:36:10:c2:df:34:e5:
bf:c0:fb:2a:78:2d:f1:40:0e:b8:55:c0:c9:8d:1e:
1d:27:b9:a2:93:f2:b6:ac:56:cc:5f:11:9d:3f:6b:
b7:c4:f7:55:4c:95:bb:c2:f7:dc:56:e2:1b:39:eb:
74:21:91:ac:10:f1:3a:11:00:21:e8:4d:b0:e0:79:
0e:b9:6d:08:59:a4:9d:5a:3d:e1:6a:c9:dc:de:65:
03:36:8d:51:6b:ea:4d:4c:a8:68:57:e2:b1:e1:d1:
74:a0:ae:fd:99:05:56:19:89:a3:0f:88:1c:b0:56:
19:4f:bd:43:f2:06:d6:e6:bb:9a:3c:2a:4e:df:60:
04:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:70:CA:1F:9A:A7:3A:EB:7F:32:88:56:42:16:EE:86:07:A0:47:5A
X509v3 Authority Key Identifier:
keyid:37:60:25:39:EC:32:C3:91:9F:F1:CB:C9:59:4D:DC:AB:81:56:74:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N2AlOewyw5Gf8cvJWU3cq4FWdMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/2155f1-976a-4f7e-95a4-076e1d77aebe/1/N2AlOewyw5Gf8cvJWU3cq4FWdMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:29:c0:7c:d8:99:96:36:01:86:c9:ae:7e:8e:bd:24:7f:8e:
d8:a7:14:b3:57:8c:c1:33:78:1f:fb:5e:81:f6:0e:80:02:61:
75:bf:82:5f:45:23:38:9b:bf:93:58:00:41:9d:09:fb:b7:04:
26:41:60:96:91:67:f0:c1:2f:48:95:77:b1:ac:d5:62:a5:ae:
6f:a6:ce:f9:ff:0a:56:9e:02:f5:23:2d:14:7b:a6:02:a9:0c:
48:45:21:8c:e2:28:91:29:0e:61:9e:6a:b0:d4:63:10:92:20:
c4:a7:a3:6d:05:8b:e9:fa:72:be:d3:88:d5:fa:8e:38:ec:00:
79:d2:58:04:84:8f:52:76:e7:af:a5:07:8c:07:5e:10:68:74:
06:68:28:a6:60:9c:88:b4:ae:4d:bc:38:e4:bb:37:b2:05:86:
dd:c8:a8:18:6a:21:e7:08:13:ff:8e:fd:9e:72:89:48:9a:6f:
d0:02:b5:9b:01:bb:94:ca:83:81:e6:6b:b8:b5:c9:2a:9e:3a:
22:17:93:ef:61:8f:0d:5a:a0:a0:80:1c:ae:36:b1:f2:5f:66:
ff:ac:ab:5c:db:f9:6d:d6:79:e5:4b:e1:db:d3:8c:f0:ec:e4:
d9:8e:6f:10:95:8c:b5:28:2b:a1:d1:a1:14:bf:11:81:b6:8a:
34:83:4b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 09:54:28 2026 by rpki-client