Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: 0GIRcfwSjwhKRel7WcLL689vkLmvLrIXMcOuPKDT1z4=
Subject key identifier: E7:6C:DD:09:0C:EB:E9:88:81:22:F5:D3:84:C1:7E:49:8D:EA:F9:1E
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 01A0BEE734089DABAD9751B4BA4864FCCA91
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 047E
Signing time: Sun 20 Sep 2026 13:00:18 +0000
Manifest this update: Sun 20 Sep 2026 13:00:18 +0000
Manifest next update: Mon 21 Sep 2026 13:00:18 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: Tn6uzfb3PQLLJp+0OyWQGMFbeUIOnpDkPVtry44luVU=)
2: WK0mu1qmieSlIr6yg5ax-_qSTA0.asa (hash: Lvp+VsX30yvL6oSGlFhMmUutaj24REfdYi4hraFh+yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:e7:34:08:9d:ab:ad:97:51:b4:ba:48:64:fc:ca:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Sep 20 13:00:18 2026 GMT
Not After : Sep 21 13:00:18 2026 GMT
Subject: CN=e76cdd090cebe9888122f5d384c17e498deaf91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:4a:03:b9:7e:8d:82:29:31:61:62:12:a9:f9:
cd:ba:51:b3:1c:ae:70:4c:25:c2:cd:21:7d:bf:fb:
b6:d4:18:47:08:fc:4e:5b:78:b3:2b:24:3b:d9:10:
df:85:b9:78:c5:6f:cd:39:c4:fe:bc:ce:78:2a:fe:
20:5f:14:dc:b4:2c:25:51:27:40:aa:41:31:bb:99:
e6:ac:b8:e1:df:8e:88:9a:31:cb:82:b4:dd:d0:35:
e9:28:34:1d:0c:5a:ef:75:38:64:f6:7e:b4:bc:12:
f3:74:b9:93:1b:b9:17:cd:ac:c1:a6:d5:63:3c:d4:
82:33:bc:30:9d:97:1d:ff:83:b4:e2:e0:ec:c3:fd:
ef:54:50:74:25:f4:a7:54:dc:a0:aa:2f:83:62:c9:
6d:d9:14:69:c8:0d:27:94:2b:6e:09:d6:3a:ec:e7:
df:4f:bd:f9:b7:0a:c5:b7:8b:77:b4:3a:a9:b6:73:
ef:5d:c5:00:ab:cc:ec:5b:2d:e9:bf:24:51:e0:c2:
5b:2b:fe:34:9a:ef:9f:f2:2b:59:ee:5d:5e:1b:ff:
23:58:32:b7:7b:68:66:93:ba:b4:45:68:fd:0c:2a:
7e:5d:4e:a4:cf:54:22:b5:50:e6:47:f8:88:bb:be:
e3:c7:d7:5f:89:1c:61:a1:18:1c:0a:d8:2b:9b:38:
05:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:6C:DD:09:0C:EB:E9:88:81:22:F5:D3:84:C1:7E:49:8D:EA:F9:1E
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:88:aa:7b:7e:c3:d7:52:b5:b1:42:6e:a1:4d:00:e5:d4:69:
47:de:e6:03:ec:28:23:d1:01:e8:f1:0e:0a:93:62:51:8b:08:
3f:07:11:dd:d9:43:4c:04:0f:68:c6:c7:19:50:6b:f2:29:81:
d8:94:3b:e2:e4:ca:68:9d:d4:04:67:58:18:c9:11:2f:1b:b1:
aa:2f:45:03:a2:65:19:ba:d1:49:3e:c0:af:7e:0a:ae:ba:8d:
89:5a:c2:11:66:0e:c5:ae:7c:35:5a:11:46:f3:12:68:db:b6:
54:15:a2:88:e3:bf:c1:8d:2a:e1:b5:e9:73:6e:2a:b1:dd:88:
88:ef:f8:d4:3e:02:f3:db:ea:07:bc:ea:ff:79:5f:3c:6c:ce:
18:ae:1e:6a:81:fd:53:3d:89:39:a1:d9:4e:63:47:6d:ef:1f:
b2:7d:3d:8a:c6:b8:79:25:ab:7c:a9:63:04:33:54:7d:1f:1c:
93:21:06:a6:43:80:6d:d2:f4:15:d3:88:73:6a:01:45:c1:c7:
c6:74:9f:4b:d5:ae:42:c8:13:79:71:6a:b5:a5:fb:aa:d4:5f:
a9:13:e4:2c:7f:f2:fc:ab:a3:c9:6e:c9:4b:ba:58:7e:c3:8e:
c7:89:ba:25:23:0c:39:d8:1c:ab:bc:d8:3c:fd:0a:6e:74:4c:
77:10:f7:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 22:00:43 2026 by rpki-client