Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: e7LZcZJju1Sl7L4BPYrFerbl79gMspwDt7yntisPbu4=
Subject key identifier: D7:CD:73:DB:29:BC:C4:D4:61:B4:88:F3:98:36:95:A1:6E:E4:BB:45
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019EC3003B9917AFD0397B03651D54654B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 121C
Signing time: Sat 13 Jun 2026 22:00:32 +0000
Manifest this update: Sat 13 Jun 2026 22:00:32 +0000
Manifest next update: Sun 14 Jun 2026 22:00:32 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: 7FYzIbXMDTp6DZ0CEnhFyOk6g1qJm0fPuq+vtoMWfwE=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 19:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c3:00:3b:99:17:af:d0:39:7b:03:65:1d:54:65:4b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jun 13 22:00:32 2026 GMT
Not After : Jun 14 22:00:32 2026 GMT
Subject: CN=d7cd73db29bcc4d461b488f3983695a16ee4bb45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:f7:11:e1:d2:5d:bf:6b:53:6b:90:e0:0f:44:
01:c4:c9:63:91:39:ed:36:2e:f3:17:31:5d:10:42:
c7:a5:49:d2:47:e1:ae:ca:73:f2:47:c5:2a:10:20:
e7:ca:87:19:10:b1:00:90:9c:6a:d5:a8:4a:91:b0:
4e:34:3e:91:7f:a9:71:a2:48:e4:24:86:4d:a2:27:
09:ef:8b:f4:49:b9:14:fb:cc:94:a3:b5:d7:30:fe:
6f:da:b8:8c:c6:38:06:e8:0b:33:23:49:6f:2f:12:
b1:97:67:41:79:13:75:7d:09:d2:c5:97:02:60:f7:
91:39:4f:47:c1:26:5e:96:40:3e:f8:cc:bc:fe:6c:
6f:de:44:b2:fd:3f:d2:d2:6e:80:50:3c:88:e3:95:
c8:ca:92:e1:ad:ad:8d:e2:78:0c:33:31:51:65:64:
f1:85:29:73:1c:32:e0:0d:13:f4:53:12:cf:71:0f:
f0:a0:be:44:eb:6d:85:68:0a:f3:42:70:f2:65:1e:
f0:e0:ab:83:5f:0f:a6:2c:45:7a:50:b2:77:d8:c3:
6a:dd:6e:c3:fa:e1:4a:8b:c2:b0:33:5c:9d:89:8e:
07:f6:5e:0e:82:7d:11:d5:b2:cb:39:67:f6:5a:33:
71:16:83:a9:1a:cd:3e:bc:de:2b:ec:95:8a:f0:98:
52:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:CD:73:DB:29:BC:C4:D4:61:B4:88:F3:98:36:95:A1:6E:E4:BB:45
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:cd:ac:f1:bf:1c:8c:ec:6f:2f:62:58:c7:9c:5f:d9:6e:10:
f3:c2:54:e6:24:9d:c6:1a:34:35:6a:a0:24:3f:29:a3:ab:cb:
0a:39:42:cc:de:37:9d:66:37:f4:69:12:ae:50:bb:1e:8a:a7:
3d:f9:86:42:6d:e7:c6:4c:51:15:35:1f:f0:e0:e4:8e:3b:78:
1a:58:73:7c:b4:01:81:30:87:83:ac:12:a5:7a:82:e3:60:4f:
71:ea:de:4c:b4:5f:41:06:aa:28:36:1a:77:9b:cc:71:1f:5a:
df:eb:bc:9a:3f:bc:d8:85:b1:98:5c:c6:4d:57:11:55:3f:3d:
72:bf:03:30:fe:b5:de:c4:0a:ef:07:ca:0a:b6:81:75:bb:2e:
b9:43:d8:20:25:9d:30:d5:3b:47:7a:76:d4:42:4e:64:4c:95:
55:7b:5e:43:b3:15:0b:ec:8d:00:9b:e0:8f:63:a3:2e:6b:60:
37:4c:ad:dc:08:f0:35:d1:25:72:11:1b:5a:8c:c6:5d:b8:f0:
b6:42:ff:0b:a6:7e:20:db:09:52:37:f2:a9:35:3e:2c:2a:04:
40:89:56:a2:81:0f:17:69:72:61:d5:94:61:a8:07:20:0d:4b:
47:d2:a5:c6:b5:a1:49:bd:1f:1f:06:32:e5:23:91:f1:0a:7f:
40:57:71:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 05:45:34 2026 by rpki-client