Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: I6p8NhjAQVVLu3QI2cACQlnuKeba6/DOf2o1A9MSLfg=
Subject key identifier: 47:E4:01:C2:A1:17:71:01:1C:B8:7C:56:98:39:4F:D3:4F:B7:6D:26
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 019DA56696A612D9F2345968FB5B50547814
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 02E3
Signing time: Sun 19 Apr 2026 11:00:56 +0000
Manifest this update: Sun 19 Apr 2026 11:00:56 +0000
Manifest next update: Mon 20 Apr 2026 11:00:56 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: nq3T0x/vjzVRsl2R8m4sQgj+27gcyiTujbe2+938N9o=)
2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 20 Apr 2026 04:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a5:66:96:a6:12:d9:f2:34:59:68:fb:5b:50:54:78:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Apr 19 11:00:56 2026 GMT
Not After : Apr 20 11:00:56 2026 GMT
Subject: CN=47e401c2a11771011cb87c5698394fd34fb76d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:83:f8:57:33:a3:ad:eb:19:24:96:01:9a:35:
6e:ff:fc:ec:9c:c2:e5:ca:4f:8b:8d:e5:f6:aa:5b:
62:9a:52:4e:f2:f3:0c:a1:7c:ba:2a:b4:6a:b6:9f:
c3:e9:ae:c7:f1:57:28:2d:84:4e:24:74:fa:42:ee:
27:06:4f:de:2b:0c:e9:bd:d1:bc:14:98:b2:bc:19:
7b:78:5e:50:d1:d1:05:a3:ef:59:ce:f6:43:43:4c:
bd:9b:7e:03:eb:aa:1d:0e:66:0c:15:11:fb:8e:e6:
b2:6b:e6:c6:dd:17:94:ac:60:78:69:5b:dc:25:1a:
30:4c:73:c0:3a:39:a5:c0:b6:2b:c6:9d:29:5b:6a:
0c:6e:75:8d:47:fc:c1:f9:6b:2b:ea:df:dd:f6:aa:
aa:ad:40:13:3a:2e:ad:bb:18:27:89:09:fa:55:dd:
ed:3e:99:94:b5:17:6d:80:9a:93:2e:39:3f:71:76:
0f:0d:52:09:62:fb:23:1f:b4:a9:22:79:8e:12:ac:
f5:e0:44:9a:d3:46:d4:23:b5:36:1f:26:4f:ad:fe:
b1:0a:e6:be:71:e4:5c:74:2a:28:ca:62:40:9f:c1:
9e:1b:d2:c8:3e:ac:cd:1d:12:90:69:26:d7:a9:88:
0b:ba:4f:74:cf:97:b5:0d:60:39:8a:93:30:b0:8e:
8a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:E4:01:C2:A1:17:71:01:1C:B8:7C:56:98:39:4F:D3:4F:B7:6D:26
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:8d:3b:01:dc:01:0d:f0:58:e5:ef:60:3f:63:e8:4a:80:12:
3f:34:82:ff:cd:b5:3b:5d:2c:7f:e9:ce:a8:e2:2d:76:b5:e1:
9b:45:6e:5e:a7:1b:7c:21:44:58:96:df:cb:58:31:03:f6:9d:
e1:cd:fe:f2:30:c4:98:b5:b1:42:f9:c6:ea:83:0d:ac:90:9c:
8e:ff:6a:ff:1d:21:21:10:ae:5a:54:69:85:4d:d5:00:37:08:
c1:e2:de:97:75:ed:a1:f7:43:38:31:88:9d:9a:0e:c8:fe:4a:
88:43:43:6d:4b:2f:68:d6:f7:e1:50:aa:e2:1b:bf:45:e6:dd:
20:f5:fd:da:63:7d:00:b9:6b:7d:b7:6a:5c:5d:a2:6f:5f:c4:
49:cd:16:e3:ef:5c:29:d6:d0:53:7d:a7:77:e5:87:30:43:c5:
fd:52:95:51:26:f0:79:16:26:11:0f:14:8e:68:96:c5:2a:94:
dd:3a:a5:09:82:0e:2b:09:7f:f0:53:62:63:5b:2d:6e:2f:2d:
c6:ea:bf:df:db:13:8f:15:09:ed:5a:36:f3:b8:1c:0c:b7:c4:
2f:49:93:c5:e7:ec:d6:58:ac:2c:48:a7:95:ca:2f:d8:4a:6c:
ce:5e:5e:97:f2:fd:27:ae:77:b5:aa:8e:21:a4:2f:89:77:81:
9a:12:c7:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 14:44:26 2026 by rpki-client