Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: GDTE1I5MwVbUN+6+hHcZeeNtwGFv3uaAjmEpAl9NrOY=
Subject key identifier: F3:10:E5:EF:FE:10:A0:9D:CF:98:01:13:53:56:EA:37:76:50:9D:C6
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019FAC3EFC751533DA6FA0E8221AADD1DE70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 17AF
Signing time: Wed 29 Jul 2026 05:00:36 +0000
Manifest this update: Wed 29 Jul 2026 05:00:36 +0000
Manifest next update: Thu 30 Jul 2026 05:00:36 +0000
Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: a/gGd4roPalnh8yVwYJjBgrnPLpG6TSJJsjYhBwe+No=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 05:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ac:3e:fc:75:15:33:da:6f:a0:e8:22:1a:ad:d1:de:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jul 29 05:00:36 2026 GMT
Not After : Jul 30 05:00:36 2026 GMT
Subject: CN=f310e5effe10a09dcf9801135356ea3776509dc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:c6:95:d4:b7:43:f4:75:48:91:c6:dc:20:dd:
37:c3:f8:f8:1d:80:e9:f7:40:c6:b2:ba:49:ad:e9:
fc:11:34:99:e3:2e:4b:8c:19:a8:e5:67:13:2f:47:
b9:83:5f:00:6b:c9:03:b6:67:ba:de:e7:d9:87:8f:
ef:e1:54:8e:cb:48:4e:54:f7:8a:65:6d:6b:0d:2c:
da:d7:43:ed:f8:fa:e3:35:65:8e:38:63:d1:6d:69:
4c:fa:75:2e:fa:44:e0:7d:27:c3:d7:34:a4:f0:43:
ce:70:b9:a3:9e:02:f0:c7:11:95:23:d7:dd:e6:7f:
21:2e:62:21:4e:58:db:f1:c0:14:7a:4f:c9:19:a4:
0b:e8:69:9e:f7:9a:09:7d:86:d9:95:63:90:f8:1a:
39:03:6c:8f:73:a4:0d:99:a0:14:c2:56:0c:35:39:
fd:c3:3e:aa:b5:52:d9:02:c9:e0:f8:d3:0a:ac:58:
57:a6:16:ba:7c:0b:e6:8f:a3:b9:ec:e0:be:a0:54:
bc:5a:ff:54:c5:cc:6b:57:61:87:1d:52:cc:f9:19:
fc:54:87:95:05:3d:51:d6:10:ce:83:a6:1d:03:dd:
34:a3:ac:f9:71:5e:94:71:60:89:08:7e:7f:96:1d:
c5:2c:fe:90:16:da:58:ed:08:aa:68:3d:6b:3c:ee:
c0:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:10:E5:EF:FE:10:A0:9D:CF:98:01:13:53:56:EA:37:76:50:9D:C6
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:20:93:0e:10:8c:dd:df:78:20:84:6d:51:a0:3e:b8:f7:6b:
5b:57:0a:e8:b8:2c:b0:c0:58:6f:87:0e:14:bb:a7:fe:27:f4:
c2:81:c6:16:72:ec:00:04:26:cf:15:ff:77:e3:39:ca:bf:3a:
39:b4:84:22:ba:61:e9:c6:76:22:ea:7f:86:cb:5c:f6:4d:08:
68:eb:b6:f6:bf:d1:1c:32:82:e2:5d:2b:a5:7d:e3:da:ea:9a:
ac:e9:57:db:91:bc:f2:70:93:17:93:f3:13:9d:41:53:b7:5c:
5f:df:fd:51:48:88:17:04:a2:e0:a6:64:15:79:9d:69:9a:ee:
31:bc:f6:b3:2d:df:65:89:29:e5:ab:b5:e1:18:ee:28:df:f5:
59:a4:3e:2d:5a:4c:5d:f3:c9:03:bd:3d:a0:7b:50:f8:62:cd:
c0:3b:4f:5c:1f:be:f5:82:2a:9a:c4:ab:a0:90:c2:46:6a:cd:
07:d1:b8:63:09:fa:54:68:12:59:e9:8a:e3:ec:cb:a7:fd:bf:
8a:d3:91:1d:52:e3:c7:cd:2c:f2:27:12:95:f9:ce:4f:7d:06:
29:bc:9a:e7:32:9f:6b:16:e0:fc:cb:63:c6:7a:90:8b:de:88:
8e:0b:8a:d6:dd:6d:8c:7a:45:06:a4:36:70:03:e0:c9:40:c0:
40:e1:91:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 12:03:33 2026 by rpki-client