Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: p0+4Q/fzBgdjxHBL4XdXYMhV9/G2Ac3AKUTlB+RfgQc=
Subject key identifier: 56:2A:4E:9E:FD:98:7D:2A:DB:6F:A3:6E:DD:BC:CF:5D:F7:74:1D:63
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 01A1382457770ACB993FE231B42438E1B396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1A34
Signing time: Wed 14 Oct 2026 02:01:08 +0000
Manifest this update: Wed 14 Oct 2026 02:01:08 +0000
Manifest next update: Thu 15 Oct 2026 02:01:08 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: Ok0DLRR/79GuVAQDS3xa529n3GEMH1wR2nWX4cmQ94o=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 02:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:38:24:57:77:0a:cb:99:3f:e2:31:b4:24:38:e1:b3:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Oct 14 02:01:08 2026 GMT
Not After : Oct 15 02:01:08 2026 GMT
Subject: CN=562a4e9efd987d2adb6fa36eddbccf5df7741d63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:9a:4c:68:14:76:52:9d:e1:f5:57:76:d6:9a:
5a:23:dc:ab:19:08:b1:69:57:21:75:e0:de:89:49:
aa:ca:8f:d4:d0:a0:3b:68:f3:1d:dd:af:d0:32:55:
73:ff:c4:38:4f:84:6f:5f:7c:da:85:f0:10:da:93:
2d:a3:5b:c3:3d:82:1a:2b:b0:99:23:81:ad:6c:ca:
8e:78:09:0c:9a:c2:86:b9:ee:a2:08:9c:99:9e:3b:
95:16:27:91:80:fc:2d:71:ec:e1:ad:2f:47:f5:66:
17:d2:35:6d:5d:a6:7c:cf:e5:48:84:83:7d:42:f5:
e5:08:95:9e:b3:f2:c0:11:36:3a:e8:4f:fc:38:14:
77:5b:e1:d0:65:78:09:cf:54:e9:1a:3b:35:12:b7:
7a:51:49:e0:96:74:16:02:71:fe:4d:f8:67:38:05:
2f:d8:98:9e:b8:44:d3:48:c9:8e:d3:4d:c3:9d:91:
b5:f8:b4:e4:23:d0:4b:74:5b:a0:80:dc:c3:20:f8:
c5:f8:9a:b8:f3:03:4c:d7:46:78:97:36:68:8f:e4:
d6:f6:a6:0c:b4:5c:f7:12:2b:bb:7c:fa:95:d0:1c:
c1:1e:b5:0b:03:15:07:2b:ec:23:39:81:55:44:9c:
34:ec:a7:14:bf:df:6a:e6:17:e8:27:24:c2:1b:31:
17:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2A:4E:9E:FD:98:7D:2A:DB:6F:A3:6E:DD:BC:CF:5D:F7:74:1D:63
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:b8:9b:66:a7:89:47:2f:92:69:6a:5d:9f:48:1f:ec:48:85:
46:a1:e5:c9:0d:5d:5f:c9:50:6b:45:9b:6f:16:5e:23:81:8a:
04:3c:dc:62:43:f3:c5:78:ea:1a:d5:37:63:00:ee:37:87:5e:
de:4c:10:8a:8d:b0:a2:a9:12:fd:04:08:38:89:bf:d9:84:0e:
4f:dd:ce:c8:df:cf:aa:6b:0a:d4:e4:ec:b5:c9:fb:fe:54:b8:
54:81:01:df:07:4a:53:2c:36:91:e1:51:7f:27:d4:58:78:d8:
4c:8a:77:73:97:05:6d:bf:8e:23:84:c6:d7:f1:9d:44:fb:08:
83:b5:91:62:55:42:c4:3a:17:76:72:a9:87:15:7b:f1:c8:4c:
df:84:73:91:64:af:b5:ae:73:3c:d2:d1:63:25:a1:78:a7:95:
c0:51:7c:5c:72:a0:09:91:41:85:3f:6d:4b:36:38:c3:b3:b5:
67:98:b0:4a:58:a4:2d:da:d4:66:ae:2e:a8:45:c6:92:02:9c:
13:d3:1d:1d:1b:33:4f:62:96:5f:86:55:a2:25:77:1c:5f:12:
b7:07:89:2d:29:d9:91:51:54:f1:5f:77:a6:77:4e:47:da:ac:
db:79:49:18:dd:ac:64:aa:b0:a0:e6:b3:d7:ed:9c:08:bd:28:
94:12:0e:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 11:10:05 2026 by rpki-client