Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: eLZ7/uDp6i2gZtds96069edjDt9jl/YHxoDIIHpH5RU=
Subject key identifier: ED:23:24:BB:FA:09:5A:7F:14:58:21:EC:51:D7:E5:D5:B0:30:EB:60
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019DA2D2FC07F83C92D9E97A8FA20A80166C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 16A1
Signing time: Sat 18 Apr 2026 23:00:29 +0000
Manifest this update: Sat 18 Apr 2026 23:00:29 +0000
Manifest next update: Sun 19 Apr 2026 23:00:29 +0000
Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: lb4WH6jNSu+x+O7wQAsO9BdTRNSJFHBYgs61nYX4jLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Apr 2026 23:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a2:d2:fc:07:f8:3c:92:d9:e9:7a:8f:a2:0a:80:16:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Apr 18 23:00:29 2026 GMT
Not After : Apr 19 23:00:29 2026 GMT
Subject: CN=ed2324bbfa095a7f145821ec51d7e5d5b030eb60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:3b:76:c9:55:a3:52:60:5b:fc:fd:08:af:35:
7a:10:43:fe:05:1a:8b:68:9f:2d:00:cf:f7:67:58:
eb:32:f9:80:5a:81:3d:ed:d9:92:f9:4b:b2:85:2d:
56:ef:3b:c6:b3:8b:43:a2:33:03:6b:40:d0:54:18:
24:40:54:d2:80:8b:42:ad:cf:54:81:97:3d:35:f8:
8c:5a:93:51:30:c9:10:64:ff:86:36:20:97:0d:4d:
3d:64:70:4e:0f:7e:52:89:02:64:fe:f0:ef:31:e5:
4e:7e:bc:39:53:1f:65:26:9d:a0:98:d6:8f:19:6a:
b1:e5:21:0f:ef:1e:e0:cb:49:83:74:3c:79:8c:88:
72:92:ff:56:30:76:36:55:4d:1c:64:e4:2d:c6:ab:
10:9a:38:19:06:53:e8:20:bd:ba:4e:0d:6d:a4:fa:
e6:9f:20:87:5e:df:f8:51:7f:a8:ce:41:b0:86:b5:
0f:36:54:d1:8e:b3:2d:da:cb:18:c5:79:4c:4c:59:
6f:4f:25:00:5b:71:f2:19:de:d6:76:2b:f8:a4:a4:
24:a5:6e:5d:78:ba:10:0b:68:6a:47:00:a1:13:82:
71:06:a3:82:64:3c:cc:cc:0f:30:9a:01:a4:95:47:
78:10:ab:2a:fa:9e:ee:7b:0e:9a:4b:08:65:4b:88:
42:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:24:BB:FA:09:5A:7F:14:58:21:EC:51:D7:E5:D5:B0:30:EB:60
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:52:a7:56:09:8d:6d:80:e6:2c:1d:76:96:a6:de:fd:0f:37:
5b:a4:1d:04:4e:a6:85:74:b7:a7:cd:35:cd:f8:59:54:93:d6:
86:4e:35:74:a1:b8:06:8d:52:fe:33:de:dd:3b:ec:ed:9d:8e:
4e:b5:dc:b3:6e:60:d0:a3:d7:47:4c:31:12:76:ff:aa:e0:92:
95:b6:38:e8:ce:c1:d6:b2:d1:ad:17:45:71:aa:81:e4:45:f4:
08:e6:6a:fe:50:75:5a:35:05:5d:dd:cb:4c:1d:2d:0d:f2:91:
3a:5e:37:b9:6b:34:59:7e:d7:0d:50:85:54:9f:d2:ae:41:6e:
3a:dd:7a:62:d6:e9:61:f2:05:98:22:b2:da:a4:26:c5:71:32:
5b:94:39:80:50:32:67:4e:a2:3b:79:56:65:91:89:c8:85:a7:
23:18:c4:b5:63:f6:76:50:63:b7:a4:00:45:15:09:20:b9:ac:
e0:4d:96:98:65:1c:3a:f6:29:51:79:19:3d:6c:ed:db:45:06:
d0:66:b1:b9:88:8b:80:64:c9:c0:99:6d:7e:3a:e4:d3:24:33:
a4:95:00:e7:2e:54:74:04:6f:50:34:89:ee:b7:58:31:ae:06:
3f:93:18:39:bc:73:62:db:bd:ba:6b:d7:45:d1:2c:56:ec:95:
47:d1:34:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:51:54 2026 by rpki-client