Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
File: cneEWZV3bPbyoIN_etTBqRvJfYI.mft (raw, json)
Hash identifier: NueKd31+VuvtcaVeGjaEiisg/I0i1mxG/n7M9wUJ4lE=
Subject key identifier: B3:FC:95:81:29:CE:32:65:79:6A:33:4F:90:08:CC:48:B9:C8:02:90
Authority key identifier: 72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
Certificate issuer: /CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Certificate serial: 01A0CF35F6A0E83610243BF1428AD692F1B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
Manifest number: 19DB
Signing time: Wed 23 Sep 2026 17:00:15 +0000
Manifest this update: Wed 23 Sep 2026 17:00:15 +0000
Manifest next update: Thu 24 Sep 2026 17:00:15 +0000
Files and hashes: 1: Uvjl_e-fGHqxg-WZscin2AO7GsM.roa (hash: fWbVIXU+/s+B7hBrHIOQSlS6p7bvD78hGqL26k6k6h4=)
2: cneEWZV3bPbyoIN_etTBqRvJfYI.crl (hash: UiVCBobKngYqn5dzGzs3jsheCW95n/hYOT0o8w7OgOM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cf:35:f6:a0:e8:36:10:24:3b:f1:42:8a:d6:92:f1:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7277845995776cf6f2a0837f7ad4c1a91bc97d82
Validity
Not Before: Sep 23 17:00:15 2026 GMT
Not After : Sep 24 17:00:15 2026 GMT
Subject: CN=b3fc958129ce3265796a334f9008cc48b9c80290
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:50:14:e5:ed:b4:23:cc:26:27:01:b8:9c:af:
98:cc:09:ee:cb:d5:6a:22:6a:46:35:c1:6e:8f:cf:
35:35:87:fb:3e:14:af:ce:3a:44:ee:4c:f3:6b:13:
10:a6:03:bc:d6:92:e3:17:87:66:3e:17:19:cf:95:
6e:c0:55:2a:eb:4b:76:ad:f7:11:3a:a4:3e:6d:51:
b6:46:6f:2c:8a:bc:86:7d:02:c9:56:23:f8:1a:da:
0d:e4:b6:54:d8:69:ac:b3:18:ec:03:99:1b:4c:93:
9c:c0:ec:8d:b0:85:01:02:c8:29:ea:5a:07:28:ac:
39:a4:fe:ac:eb:09:a2:20:d1:5e:45:78:eb:80:a2:
31:9e:c1:96:29:bb:06:7c:f6:d5:7d:3a:37:0f:87:
c1:27:4a:30:e8:cf:08:cd:70:3f:08:fd:41:bb:36:
39:d7:3f:b3:a4:91:93:c0:0e:eb:73:5b:e4:bb:39:
f7:f2:ff:02:12:99:79:51:43:3d:a2:6f:30:fc:66:
a8:9c:76:c2:0e:35:df:52:2d:73:f7:16:e9:8a:02:
3a:26:77:1f:34:97:bd:a1:5d:64:d5:42:81:02:c1:
2f:59:09:73:63:b5:9c:08:09:f6:1d:ce:b1:fd:87:
a4:4e:28:ca:6c:7b:c0:00:84:f9:a0:43:66:63:7a:
95:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FC:95:81:29:CE:32:65:79:6A:33:4F:90:08:CC:48:B9:C8:02:90
X509v3 Authority Key Identifier:
keyid:72:77:84:59:95:77:6C:F6:F2:A0:83:7F:7A:D4:C1:A9:1B:C9:7D:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cneEWZV3bPbyoIN_etTBqRvJfYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/6e90d9-8cce-4ff5-abd8-eee6ba1829b4/1/cneEWZV3bPbyoIN_etTBqRvJfYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:46:dc:b2:93:7c:ea:4b:0c:7f:77:94:5a:a9:bf:72:73:10:
ac:ff:c7:b6:23:b3:a5:5f:bb:03:dd:38:64:7a:0f:e9:09:8e:
db:34:43:1a:9d:2b:1f:b3:a9:b8:39:0c:98:5a:39:f1:3d:e7:
18:53:27:ef:e4:89:bc:54:65:3e:52:1e:04:df:fa:1a:fb:06:
c6:5e:37:17:39:2b:87:f4:23:63:b5:64:b0:7b:b5:81:ca:1b:
ce:ca:ae:bc:aa:47:54:0f:48:95:5e:90:1e:f2:95:4c:a9:df:
36:5a:95:16:80:6d:ef:2e:73:db:c7:80:96:dd:2d:9d:9f:41:
e6:12:85:2b:bc:aa:3c:af:12:aa:fb:34:cb:4f:a4:a6:e5:3a:
98:cd:2e:1c:95:9c:43:7f:5c:ce:b5:1d:30:ae:31:97:1f:c9:
fc:b6:d5:9e:89:ed:6c:05:8c:23:a0:07:28:7b:49:1a:92:a7:
ce:36:da:9f:64:02:11:fa:a3:04:96:ea:66:7b:d5:46:9a:c4:
8f:e4:eb:52:ff:7e:e3:c7:80:be:1f:27:45:06:c7:8d:32:a8:
a4:ce:99:bb:3d:ac:95:f8:9c:48:50:4e:2e:01:0b:26:27:58:
54:87:89:29:3d:9c:af:fa:57:32:a3:a7:bb:e2:8b:60:70:68:
3a:91:7c:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 22:51:45 2026 by rpki-client