Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: 11C1GXbwQxaUvOv05vQpdq2N9UqQVALjGAyEf37jV3E=
Subject key identifier: D8:31:9C:33:12:BC:AF:C5:29:EC:30:B8:95:68:61:94:46:5F:43:5F
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 01A1800625F4EE8C2D8768AD28CD097780DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1387
Signing time: Wed 28 Oct 2026 01:00:48 +0000
Manifest this update: Wed 28 Oct 2026 01:00:48 +0000
Manifest next update: Thu 29 Oct 2026 01:00:48 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: D9laeSwQEgILbg05c+6xpCDTRS9ksJFuPak1uSyiV70=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:80:06:25:f4:ee:8c:2d:87:68:ad:28:cd:09:77:80:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Oct 28 01:00:48 2026 GMT
Not After : Oct 29 01:00:48 2026 GMT
Subject: CN=d8319c3312bcafc529ec30b895686194465f435f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:65:82:59:8c:a7:dc:4c:bd:21:d6:d6:d2:09:
8e:d0:c9:ee:78:c6:da:24:84:d5:6c:04:f7:c5:f7:
48:6e:88:7f:49:34:5a:c4:4c:3f:42:ed:f4:53:1f:
14:88:cf:de:b8:0f:e1:88:2a:d1:c5:c7:f3:b0:03:
b2:bf:46:4b:ac:5e:13:95:36:7a:ab:f8:e4:5c:30:
e9:d9:da:3e:5a:72:c2:15:2b:1e:f2:16:d5:d8:d5:
b4:2b:bc:25:f4:d2:8d:3b:ac:bc:aa:22:46:9a:1a:
3e:f7:eb:6f:93:66:b1:62:bf:a3:e6:b4:a2:cd:3e:
25:1f:25:f0:e5:3c:7f:eb:80:87:3a:c3:5c:26:a0:
85:01:05:c9:43:de:f7:bc:4e:c6:7d:b0:7b:e7:4e:
81:56:f3:46:c2:2b:b3:75:3b:83:ed:31:c7:a5:08:
11:4b:10:8c:45:87:86:ab:f7:69:e1:fc:52:01:c9:
77:46:f5:56:7a:f2:b5:fb:cf:a6:78:61:dd:70:c0:
90:28:98:4d:5d:17:dc:91:e4:4c:90:b1:40:ac:95:
14:f6:c9:e5:dd:f8:f8:9a:c3:56:ec:68:29:77:6a:
b1:d2:09:75:a5:03:bd:68:8a:c2:3f:ed:07:31:4a:
cf:70:25:aa:97:91:00:1c:0e:b9:3b:9b:fd:bc:8f:
21:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:31:9C:33:12:BC:AF:C5:29:EC:30:B8:95:68:61:94:46:5F:43:5F
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:83:f4:fa:53:ae:e5:3e:78:08:88:5a:df:50:9d:49:22:e9:
b4:a0:cc:d2:ca:b2:16:08:f5:1a:28:46:bd:54:74:53:82:67:
e6:6d:35:27:bc:e5:25:d6:c5:de:4e:44:da:a4:a8:b3:f6:fd:
f7:1d:7f:9f:ea:b7:b8:45:7a:b2:61:75:04:79:ba:10:19:0d:
b3:4b:32:9d:76:c8:4a:7b:f9:4b:a6:7e:40:26:a6:0c:ec:74:
dd:37:de:66:0f:d2:ab:53:0a:e3:b7:a6:fc:63:8a:82:0f:4c:
56:1e:7c:9c:f2:48:bb:a5:3f:4e:ff:da:5a:2f:4e:ad:4c:37:
98:b0:5e:0c:54:67:49:d3:0b:71:29:1c:fb:9e:6e:1c:33:98:
ba:e5:54:44:09:40:fc:ff:a4:83:76:97:1a:95:de:d0:ae:4e:
13:e5:52:e0:8a:ec:7c:b2:9f:a9:3c:49:f3:9b:36:39:56:83:
cf:f9:3a:be:f4:ba:42:9b:f0:37:7c:1a:0e:f8:1c:bd:db:c2:
57:a9:66:99:5d:ae:58:c0:9e:50:6e:43:09:7d:64:20:84:0b:
0d:50:bc:15:a7:9a:10:8e:ca:06:db:39:16:e4:11:26:e1:8e:
11:3a:f9:05:d1:4e:af:4f:20:bf:db:5a:e4:ad:0e:34:a2:24:
1f:65:72:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaGABiX07owth2itKM0Jd4DfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjYxMDI4MDEwMDQ4WhcNMjYxMDI5MDEwMDQ4WjAzMTEwLwYDVQQD
EyhkODMxOWMzMzEyYmNhZmM1MjllYzMwYjg5NTY4NjE5NDQ2NWY0MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtWWCWYyn3Ey9IdbW0gmO0MnueMba
JITVbAT3xfdIboh/STRaxEw/Qu30Ux8UiM/euA/hiCrRxcfzsAOyv0ZLrF4TlTZ6
q/jkXDDp2do+WnLCFSse8hbV2NW0K7wl9NKNO6y8qiJGmho+9+tvk2axYr+j5rSi
zT4lHyXw5Tx/64CHOsNcJqCFAQXJQ973vE7GfbB7506BVvNGwiuzdTuD7THHpQgR
SxCMRYeGq/dp4fxSAcl3RvVWevK1+8+meGHdcMCQKJhNXRfckeRMkLFArJUU9snl
3fj4msNW7Ggpd2qx0gl1pQO9aIrCP+0HMUrPcCWql5EAHA65O5v9vI8heQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNgxnDMSvK/FKewwuJVoYZRGX0NfMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYP0+lOu
5T54CIha31CdSSLptKDM0sqyFgj1GihGvVR0U4Jn5m01J7zlJdbF3k5E2qSos/b9
9x1/n+q3uEV6smF1BHm6EBkNs0synXbISnv5S6Z+QCamDOx03TfeZg/Sq1MK47em
/GOKgg9MVh58nPJIu6U/Tv/aWi9OrUw3mLBeDFRnSdMLcSkc+55uHDOYuuVURAlA
/P+kg3aXGpXe0K5OE+VS4IrsfLKfqTxJ85s2OVaDz/k6vvS6QpvwN3waDvgcvdvC
V6lmmV2uWMCeUG5DCX1kIIQLDVC8FaeaEI7KBts5FuQRJuGOETr5BdFOr08gv9ta
5K0ONKIkH2VyDA==
-----END CERTIFICATE-----
Generated at Wed Oct 28 09:28:30 2026 by rpki-client