Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: j/YdE9zduGXo6oce5BJyws6+lj32lAbSHaoTdgQ9Abg=
Subject key identifier: FA:1F:B9:5E:E1:CE:B9:89:34:63:69:33:FD:77:1F:DC:62:22:73:74
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019D992B13B53C94ECCD56F78A3F132A764A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1854
Signing time: Fri 17 Apr 2026 02:00:30 +0000
Manifest this update: Fri 17 Apr 2026 02:00:30 +0000
Manifest next update: Sat 18 Apr 2026 02:00:30 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: zg1ikUV5OGdaPzXNnomBWj3JK77J5uVdQuezG4li3Ss=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 02:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:99:2b:13:b5:3c:94:ec:cd:56:f7:8a:3f:13:2a:76:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Apr 17 02:00:30 2026 GMT
Not After : Apr 18 02:00:30 2026 GMT
Subject: CN=fa1fb95ee1ceb98934636933fd771fdc62227374
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e4:42:76:2f:8b:a2:8f:6c:da:31:cf:33:4a:
cd:d8:04:47:6a:71:00:d4:37:0c:25:e1:0d:cd:a8:
c4:b0:39:79:0c:2a:42:5a:c5:ea:77:e3:16:d3:fd:
bf:1e:a4:41:ca:c5:dc:cf:75:c6:76:e6:a5:da:30:
1c:64:c1:11:56:17:fe:a6:84:42:ca:88:e4:fd:64:
7a:9a:85:83:6b:a4:6d:7f:42:78:d8:e7:2c:3d:8b:
95:c8:26:5b:a7:4f:be:16:18:8b:f4:99:80:a9:48:
0d:d0:1c:ca:2b:87:07:fa:f1:d0:51:e7:88:5d:ab:
3f:97:4e:fe:b5:71:17:f1:0b:14:98:6e:22:69:73:
9f:3f:bd:cd:62:51:b7:38:3f:57:ca:c6:49:56:d1:
e3:52:7a:79:40:2a:59:32:4d:a9:50:94:68:07:b9:
12:ed:b0:e3:24:84:c1:e0:12:51:fb:a9:a3:2d:3f:
2d:fa:32:71:1b:48:2c:b3:95:97:ba:1a:5f:cc:44:
76:39:a7:99:e3:ec:89:bd:17:b6:0e:6f:91:62:54:
0e:a6:ce:c4:63:ee:5b:99:a4:de:e7:fb:a0:ed:6f:
1f:c9:2f:db:87:d5:63:7f:36:36:88:2c:cf:f5:83:
7b:aa:41:c3:73:e0:aa:fe:e4:b1:1d:02:2e:94:a6:
f7:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:1F:B9:5E:E1:CE:B9:89:34:63:69:33:FD:77:1F:DC:62:22:73:74
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:7e:6d:51:dd:17:35:08:1a:5f:b1:ae:fb:23:c9:d2:c9:ea:
24:0d:bb:f5:0d:a0:81:e8:24:06:b2:2c:5b:91:db:9e:a3:7a:
ee:4b:b1:60:8d:e9:f6:cf:1b:50:29:d7:2c:bf:bf:cc:75:74:
f3:62:0b:f4:91:b5:c8:8d:7f:8b:3a:98:16:19:38:5b:b1:17:
d9:6c:35:cc:69:7e:ba:b8:11:ef:9e:5f:5b:bc:11:e8:a5:8e:
44:c6:57:5b:b0:c1:29:c2:19:a7:15:a9:d9:92:6d:39:86:29:
e2:7c:a6:4c:a5:46:03:e0:b1:9d:d9:50:cc:73:32:ee:61:22:
06:a5:e7:04:e2:93:4e:b7:67:2a:f1:ab:4a:60:45:c4:ee:cf:
3d:ce:08:f4:8e:b6:3a:02:25:ac:2e:76:47:0a:cf:ce:ba:00:
80:9f:db:47:00:26:bf:12:22:3a:d9:ae:9a:a1:72:5c:ae:0f:
3b:37:6c:c7:24:e3:07:9d:8e:be:c5:96:59:15:e4:a3:12:04:
de:0f:3c:cc:92:c0:0e:a4:68:48:c9:58:54:e5:f7:da:4b:59:
50:81:19:62:33:f5:7c:ec:cc:57:82:28:69:f9:ca:66:21:0b:
67:d2:35:ca:45:25:2c:ba:7e:13:a9:ee:f2:a9:d3:e1:fa:7f:
25:1d:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:09 2026 by rpki-client