Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: 5li2RjNRO8oMqr7WeWNIX82RrGbLvmR0FRS7x16rY/c=
Subject key identifier: 9F:3E:7F:97:B8:C0:86:4B:C9:C5:B4:F4:EB:B2:59:6A:84:1F:EA:C8
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019EC0A3B513B3193F6459E2CC21A488AF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 18ED
Signing time: Sat 13 Jun 2026 11:00:14 +0000
Manifest this update: Sat 13 Jun 2026 11:00:14 +0000
Manifest next update: Sun 14 Jun 2026 11:00:14 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: tpHmKjDKhpDg+iaLbiX7r89JvrATjz7rBV+ctZwYMyg=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c0:a3:b5:13:b3:19:3f:64:59:e2:cc:21:a4:88:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Jun 13 11:00:14 2026 GMT
Not After : Jun 14 11:00:14 2026 GMT
Subject: CN=9f3e7f97b8c0864bc9c5b4f4ebb2596a841feac8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:7b:d3:78:15:1d:f7:0e:86:f9:7c:ca:b5:d1:
18:6f:c0:c1:cb:26:98:9e:0b:ed:5c:0b:35:96:d2:
8b:79:0a:a9:4a:d1:8d:82:64:7a:73:17:aa:af:99:
26:17:b9:8b:b9:06:99:c3:42:6e:a5:69:01:51:c3:
52:18:8d:99:1c:af:bf:6d:f2:ae:bb:ec:bf:04:24:
c7:8d:ba:bf:5b:79:ec:8e:66:09:e4:e2:18:de:85:
7f:5b:5a:22:f5:63:ef:f2:f2:d3:4d:b0:36:83:de:
af:f4:20:50:36:de:b1:f7:68:bb:6f:eb:10:e5:a4:
e1:88:9e:56:77:81:7c:70:fe:f0:3a:40:38:97:f1:
19:60:83:02:7f:fb:2b:21:f7:0d:01:9a:8b:1e:5f:
6b:60:91:dc:a0:f3:08:75:6f:9c:1f:de:ea:15:25:
07:00:12:e8:5a:08:e2:67:05:4a:a1:a2:3f:fe:b4:
42:2d:92:42:e7:c6:8d:ea:5e:b9:b7:1a:dd:7f:91:
69:bf:0b:a3:fb:72:a7:b2:3b:2f:82:a5:ce:65:a3:
51:2c:1d:c3:78:2e:53:ed:1a:16:1a:bd:01:e6:ae:
7f:ec:33:cd:47:94:9b:5e:d2:df:91:2a:44:ab:7c:
e3:5a:fd:75:fb:0c:a7:fe:ff:6b:cc:0b:f2:b3:a6:
72:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:3E:7F:97:B8:C0:86:4B:C9:C5:B4:F4:EB:B2:59:6A:84:1F:EA:C8
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:3e:3d:b9:4a:34:dd:3f:1e:a4:ce:11:44:c0:8b:9b:16:61:
0c:bb:f7:79:e7:83:ac:a8:ab:e4:9e:bc:c6:69:83:20:99:e1:
86:d5:20:ab:63:39:e8:29:94:d2:48:d2:aa:85:bd:6c:5b:19:
d3:c6:d7:b3:25:ae:bf:89:eb:89:ef:d7:58:ba:47:99:06:cf:
83:3b:a9:73:82:99:0f:27:c7:4e:bf:b4:9d:08:f3:2d:00:61:
d9:01:fe:94:d2:f6:38:f9:5f:0f:5d:75:6a:45:ce:84:4b:c9:
f4:42:d8:c6:b1:14:47:84:41:fc:1b:8a:d4:9c:18:9d:e7:60:
3e:61:85:90:1b:a8:a7:4d:f2:f5:bd:51:3a:db:e5:c6:ed:92:
61:6a:4a:7b:2d:92:b0:a0:4f:da:f4:ba:c9:09:ea:61:b1:fb:
96:30:03:44:83:b4:5a:01:81:01:c9:5a:e8:b2:42:e5:33:07:
8b:fd:24:5d:3a:93:90:73:0c:d3:bd:50:f7:83:2b:b4:7d:7e:
82:c4:5e:a3:af:25:25:99:d6:cf:6e:64:98:08:3c:f2:f7:58:
eb:d4:0e:55:e2:96:c7:75:46:f8:28:e1:ab:8a:f9:97:13:fa:
86:03:ca:90:16:94:04:85:14:cf:63:e7:d1:11:47:de:71:26:
69:bb:46:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ7Ao7UTsxk/ZFnizCGkiK8sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl
NTE0ZWYwHhcNMjYwNjEzMTEwMDE0WhcNMjYwNjE0MTEwMDE0WjAzMTEwLwYDVQQD
Eyg5ZjNlN2Y5N2I4YzA4NjRiYzljNWI0ZjRlYmIyNTk2YTg0MWZlYWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA23vTeBUd9w6G+XzKtdEYb8DByyaY
ngvtXAs1ltKLeQqpStGNgmR6cxeqr5kmF7mLuQaZw0JupWkBUcNSGI2ZHK+/bfKu
u+y/BCTHjbq/W3nsjmYJ5OIY3oV/W1oi9WPv8vLTTbA2g96v9CBQNt6x92i7b+sQ
5aThiJ5Wd4F8cP7wOkA4l/EZYIMCf/srIfcNAZqLHl9rYJHcoPMIdW+cH97qFSUH
ABLoWgjiZwVKoaI//rRCLZJC58aN6l65txrdf5Fpvwuj+3KnsjsvgqXOZaNRLB3D
eC5T7RoWGr0B5q5/7DPNR5SbXtLfkSpEq3zjWv11+wyn/v9rzAvys6ZyIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8+f5e4wIZLycW09OuyWWqEH+rIMB8GA1UdIwQY
MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt
NWQzM2UxOGE2OWEwLzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw
LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKj49uUo0
3T8epM4RRMCLmxZhDLv3eeeDrKir5J68xmmDIJnhhtUgq2M56CmU0kjSqoW9bFsZ
08bXsyWuv4nrie/XWLpHmQbPgzupc4KZDyfHTr+0nQjzLQBh2QH+lNL2OPlfD111
akXOhEvJ9ELYxrEUR4RB/BuK1JwYnedgPmGFkBuop03y9b1ROtvlxu2SYWpKey2S
sKBP2vS6yQnqYbH7ljADRIO0WgGBAcla6LJC5TMHi/0kXTqTkHMM071Q94MrtH1+
gsReo68lJZnWz25kmAg88vdY69QOVeKWx3VG+Cjhq4r5lxP6hgPKkBaUBIUUz2Pn
0RFH3nEmabtGLg==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:20:43 2026 by rpki-client