Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: itgehdTjwzjv9leB1i98zOIz/BgFj/VpDT0q18qX5Sg=
Subject key identifier: E1:D0:C2:50:FB:FA:B6:91:23:8C:59:BA:BD:E4:04:BB:89:00:04:DE
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019CADFE25436F9A328F872DD3B3366CD9FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1108
Signing time: Mon 02 Mar 2026 10:00:39 +0000
Manifest this update: Mon 02 Mar 2026 10:00:39 +0000
Manifest next update: Tue 03 Mar 2026 10:00:39 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: PwSUGIjSjTIe7KB4EKu85zh2tzwZWAXkLQ3HxEb0bDA=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:fe:25:43:6f:9a:32:8f:87:2d:d3:b3:36:6c:d9:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Mar 2 10:00:39 2026 GMT
Not After : Mar 3 10:00:39 2026 GMT
Subject: CN=e1d0c250fbfab691238c59babde404bb890004de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:f7:ec:34:08:40:e8:c8:be:10:3f:de:b2:ac:
4a:5e:af:10:59:d5:a7:94:f1:50:a7:47:69:35:f2:
44:28:bd:c1:83:8f:83:76:f5:a7:41:35:09:42:32:
53:41:fb:22:3e:ee:fb:71:aa:00:b9:dc:e6:08:90:
ed:85:36:39:81:3e:5d:8a:ec:ab:5c:4e:55:42:e3:
93:75:3c:84:92:bf:71:5e:b8:69:82:76:b6:69:14:
03:60:38:ae:2e:10:ed:ab:e4:10:e4:d8:ce:ca:da:
23:ea:46:0a:ea:d2:88:cd:16:d1:51:d7:d4:26:e0:
e3:b3:f3:cb:3f:39:64:d3:8c:f0:58:2f:ab:f2:94:
19:3b:6a:e7:75:ce:2c:82:05:c3:24:6a:f7:d0:7a:
b6:20:dc:d1:7f:84:60:85:fb:eb:ab:fe:a0:74:cd:
03:de:8f:c8:4f:0f:11:e5:65:27:77:5a:fc:bb:e6:
79:3b:5d:15:1d:3e:45:28:29:d3:86:cb:01:d8:48:
97:0b:14:aa:77:45:98:4b:c3:f4:5a:ed:6f:1f:06:
0a:9f:0f:45:23:f0:1c:99:be:28:eb:a3:30:ae:4d:
ed:f3:37:e1:38:63:5a:50:88:14:9b:82:73:94:0e:
99:94:6c:f1:f6:63:23:fa:10:ac:5b:cf:7b:b6:66:
1d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:D0:C2:50:FB:FA:B6:91:23:8C:59:BA:BD:E4:04:BB:89:00:04:DE
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:29:95:37:27:9e:27:34:31:27:87:9c:9d:06:bd:bc:aa:a0:
91:a7:d5:f2:75:22:73:ec:56:a3:9e:29:57:26:1a:71:8f:16:
48:39:09:ef:b8:0a:30:67:1e:ac:01:72:f9:b7:7a:6e:81:ad:
c7:19:cf:69:ec:61:5e:81:24:04:1f:12:c2:d6:0a:48:8e:cf:
c1:fd:14:88:3f:4a:8b:ec:15:4d:eb:18:37:75:20:58:16:25:
6f:cb:e1:c9:f3:25:44:9e:3b:e2:b8:d2:6b:a3:44:f5:67:d9:
a8:f6:ec:4e:c5:59:95:88:9e:e5:5d:fe:f2:59:17:71:45:e4:
ae:32:f6:b0:99:25:15:4a:4c:a7:79:75:fe:ee:e4:48:d1:dc:
a9:9a:53:3f:b8:8b:af:b8:90:bc:09:45:d9:60:80:73:2e:30:
48:69:1d:b0:37:c0:75:f1:14:0f:7d:7d:25:2d:05:7d:84:64:
2d:2b:a1:8b:4f:56:8c:1d:14:6b:59:cd:ca:c7:2c:f5:6e:58:
20:3a:68:cd:fe:98:10:46:5c:47:47:b8:cc:9e:87:3c:95:94:
18:09:87:92:49:34:76:fd:61:f8:6d:5b:68:c4:c8:83:dd:08:
85:1c:85:38:59:cf:23:27:1b:9e:6a:6c:a9:7b:d2:6c:80:48:
c4:e9:b1:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:11:20 2026 by rpki-client