Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: cVm1+ygxWynK1iwWA7yUx6GKGTgruPgXrdNpqxjcb/U=
Subject key identifier: EF:97:A6:30:11:14:D7:06:8F:BB:5A:C8:70:85:8E:50:E6:49:FF:B1
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019CABA230A9FECA965AAF223B0A55512EFB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 1621
Signing time: Sun 01 Mar 2026 23:00:58 +0000
Manifest this update: Sun 01 Mar 2026 23:00:58 +0000
Manifest next update: Mon 02 Mar 2026 23:00:58 +0000
Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: a/0fQuHdkW+eEXZga7NSXZxZtUI1bW4GWZ+OMQA5w2k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ab:a2:30:a9:fe:ca:96:5a:af:22:3b:0a:55:51:2e:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Mar 1 23:00:58 2026 GMT
Not After : Mar 2 23:00:58 2026 GMT
Subject: CN=ef97a6301114d7068fbb5ac870858e50e649ffb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:58:9e:2b:4c:cb:df:5e:6b:39:7d:e1:56:0e:
b2:97:dc:10:b0:c7:85:5c:70:9d:76:b9:b6:00:4a:
0f:4a:63:bf:02:d8:29:74:3f:8c:03:20:5b:e5:1d:
fc:84:5c:44:44:2e:91:04:8a:0b:2c:bc:6d:5c:42:
dc:57:47:58:86:4d:5a:25:82:bb:61:b8:72:0e:af:
d8:c0:82:08:2a:1a:e2:aa:a7:ee:03:58:d4:2c:83:
2e:41:77:8d:76:59:de:1b:d2:60:8b:dd:58:1b:5c:
23:8d:67:f1:b4:58:0b:35:ca:04:5b:c1:ae:71:1f:
f6:74:bc:7e:aa:f9:5d:52:09:8e:0d:5a:9d:c3:a0:
37:d0:1f:41:45:16:24:14:34:dd:7d:9e:0b:30:74:
76:77:f5:22:2e:74:7d:7f:e1:6b:08:a3:b5:f2:28:
9e:ab:b0:4b:93:ba:e9:1f:9f:7c:f2:50:81:0b:ad:
99:58:a0:1a:c7:33:99:68:77:ce:2d:d8:5b:b6:7c:
68:39:3d:ce:ac:96:4e:38:96:db:86:bb:a4:af:d1:
d0:c5:0a:29:7a:b2:82:15:7d:1a:56:4f:6d:06:d3:
26:ac:19:d5:55:a4:b2:25:6b:6d:97:ba:59:5e:d5:
d0:91:db:66:05:76:7f:41:96:6b:1d:8e:62:8a:91:
1b:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:97:A6:30:11:14:D7:06:8F:BB:5A:C8:70:85:8E:50:E6:49:FF:B1
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:86:bb:10:24:67:7e:34:b9:21:79:7f:5f:72:ff:11:53:a5:
db:61:c4:fd:01:8e:86:68:97:09:c5:5e:1d:7f:e6:c9:c0:56:
42:d9:e3:5d:ff:84:72:60:69:2d:d1:e9:98:4b:cb:13:46:7a:
0e:c7:d9:a7:8b:94:36:48:1c:fe:0c:88:3f:7b:07:54:b5:66:
4b:5c:a6:cc:e5:c8:18:5b:54:b3:38:89:5e:29:29:74:03:18:
e3:ba:55:ab:d9:4a:07:61:30:8b:80:dc:dd:70:bf:f7:1a:43:
46:c4:0e:80:69:0c:6c:d8:8e:19:40:b4:cf:f0:9a:45:94:7a:
68:86:1d:85:90:3f:87:fe:2b:20:0e:72:8d:26:36:30:ca:5c:
da:77:c9:bf:41:fd:17:2c:74:71:23:00:92:84:6e:eb:81:26:
45:b7:d1:34:db:c8:0a:10:3d:19:3c:44:aa:e4:60:13:c7:5e:
8a:24:26:5c:79:4b:b4:c3:41:f4:6b:0d:b7:28:6e:90:17:70:
b3:b1:df:b4:28:aa:ba:13:02:07:79:74:4b:d8:4b:15:39:e8:
af:77:a2:c9:36:f3:40:32:6f:85:10:f3:76:7b:8a:47:20:f0:
a4:21:e9:73:b0:8c:70:06:53:1e:4e:e7:17:f0:3e:63:21:a8:
c9:8e:85:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 05:42:53 2026 by rpki-client