Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: 0X/zrvriM2atoI86OsLxBmRBWplk97zNxkra8DdI+YM=
Subject key identifier: 57:53:EA:48:7A:8F:7D:88:1D:9A:E6:DA:A2:0E:82:00:55:29:F9:24
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019D9B87824AF86CD9F0BF7888DF0E8500BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1183
Signing time: Fri 17 Apr 2026 13:00:42 +0000
Manifest this update: Fri 17 Apr 2026 13:00:42 +0000
Manifest next update: Sat 18 Apr 2026 13:00:42 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: laPxnZ0d9VawWg8G8IDhnDGbNG06YjGbBPD5tn2KQks=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9b:87:82:4a:f8:6c:d9:f0:bf:78:88:df:0e:85:00:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Apr 17 13:00:42 2026 GMT
Not After : Apr 18 13:00:42 2026 GMT
Subject: CN=5753ea487a8f7d881d9ae6daa20e82005529f924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:60:f5:0f:43:4a:01:14:f6:c9:69:0e:98:bf:
53:b5:c9:f0:c1:19:05:31:f9:be:fa:b2:39:9f:f0:
df:78:17:02:00:2d:6a:1d:8b:71:39:a9:8d:13:9c:
8e:6d:92:54:15:67:51:07:5b:77:1b:5c:b5:84:ac:
fa:ca:8b:62:cd:a0:a6:6d:a0:21:a8:81:94:a1:60:
86:4b:a4:3a:3a:55:aa:0e:a8:8c:27:83:f3:ab:a9:
4b:a9:f9:05:40:a8:bd:44:70:a4:37:c0:6f:9f:4a:
19:5e:44:ff:b3:e6:1e:87:d2:25:e2:38:c7:86:ee:
03:c9:2b:72:d9:fc:2e:7c:0d:45:d8:24:7a:09:66:
e1:88:99:87:3c:ca:c3:f7:e9:c0:30:53:7b:a8:b9:
53:e4:ea:0a:17:89:b4:ad:c6:69:73:d6:87:44:33:
de:0c:a8:30:5a:79:53:12:bc:45:32:87:67:cf:9d:
b9:bc:33:1c:3e:cf:99:2b:e3:fd:be:aa:16:8e:58:
77:9e:58:bc:fa:1d:46:2f:42:16:3e:3f:e4:63:f5:
8e:1f:7a:ac:1d:a0:40:cf:31:7e:84:a1:bf:38:5a:
9b:68:7f:ed:d5:38:0d:38:3f:1c:f3:ad:2f:f3:95:
55:1f:ad:6e:6c:28:81:dd:df:9d:9d:5d:e0:32:4c:
37:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:53:EA:48:7A:8F:7D:88:1D:9A:E6:DA:A2:0E:82:00:55:29:F9:24
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:af:84:11:6a:0f:3b:97:bb:98:12:a1:2a:45:2d:49:bb:91:
2d:0c:68:90:31:04:15:67:5a:a8:07:29:c2:ee:1a:4d:e9:24:
8f:b7:28:c0:e5:bd:72:5b:33:3f:15:fa:21:45:db:c3:b9:bb:
7f:12:c4:79:c9:7f:2e:f1:cf:ac:f6:1c:79:5b:0f:ae:c3:18:
a7:14:78:7f:9d:28:ae:9a:15:08:73:24:5f:94:e9:f5:6e:00:
bf:29:14:0d:99:dc:f0:8c:27:51:90:6a:25:c8:4d:04:a6:45:
b5:9e:8e:2a:cc:0d:b4:3e:a2:ec:41:78:66:df:4e:b0:0c:fb:
69:d4:1b:60:ce:de:2f:e6:93:5e:e8:e5:de:55:2c:51:cb:a2:
4d:5b:42:f7:0c:da:45:0d:29:a6:d6:9d:48:bd:74:74:09:ef:
d7:e9:68:fd:84:3f:dc:12:5e:e3:47:75:06:6d:99:5a:1d:72:
fa:10:59:99:75:d8:2b:9d:d3:ff:4e:69:7d:ec:54:06:63:7c:
9d:9b:20:4d:0b:c9:a2:51:e5:15:f0:1b:45:80:80:3f:98:b4:
93:5e:8d:c3:12:06:e2:89:b7:32:50:21:1b:61:81:28:c2:3f:
9c:dc:a8:3f:d1:14:d2:66:ca:a4:c7:93:45:43:c7:59:0c:e9:
b7:bf:c3:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2bh4JK+GzZ8L94iN8OhQC+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjYwNDE3MTMwMDQyWhcNMjYwNDE4MTMwMDQyWjAzMTEwLwYDVQQD
Eyg1NzUzZWE0ODdhOGY3ZDg4MWQ5YWU2ZGFhMjBlODIwMDU1MjlmOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx2D1D0NKART2yWkOmL9TtcnwwRkF
Mfm++rI5n/DfeBcCAC1qHYtxOamNE5yObZJUFWdRB1t3G1y1hKz6yotizaCmbaAh
qIGUoWCGS6Q6OlWqDqiMJ4Pzq6lLqfkFQKi9RHCkN8Bvn0oZXkT/s+Yeh9Il4jjH
hu4DySty2fwufA1F2CR6CWbhiJmHPMrD9+nAMFN7qLlT5OoKF4m0rcZpc9aHRDPe
DKgwWnlTErxFModnz525vDMcPs+ZK+P9vqoWjlh3nli8+h1GL0IWPj/kY/WOH3qs
HaBAzzF+hKG/OFqbaH/t1TgNOD8c860v85VVH61ubCiB3d+dnV3gMkw3lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdT6kh6j32IHZrm2qIOggBVKfkkMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgq+EEWoP
O5e7mBKhKkUtSbuRLQxokDEEFWdaqAcpwu4aTekkj7cowOW9clszPxX6IUXbw7m7
fxLEecl/LvHPrPYceVsPrsMYpxR4f50orpoVCHMkX5Tp9W4AvykUDZnc8IwnUZBq
JchNBKZFtZ6OKswNtD6i7EF4Zt9OsAz7adQbYM7eL+aTXujl3lUsUcuiTVtC9wza
RQ0pptadSL10dAnv1+lo/YQ/3BJe40d1Bm2ZWh1y+hBZmXXYK53T/05pfexUBmN8
nZsgTQvJolHlFfAbRYCAP5i0k16NwxIG4om3MlAhG2GBKMI/nNyoP9EU0mbKpMeT
RUPHWQzpt7/DWQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:03 2026 by rpki-client