Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: /lVfobg5CbfGmpcF8vyKqBx6pLmr8cBBBsR7uk+4k3U=
Subject key identifier: 95:78:D1:48:86:ED:21:2A:F1:0E:EA:32:4E:FB:88:AE:96:95:2A:4A
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 019CA9EB88CFD3E731FDDBD3C312176EA162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 100D
Signing time: Sun 01 Mar 2026 15:01:50 +0000
Manifest this update: Sun 01 Mar 2026 15:01:50 +0000
Manifest next update: Mon 02 Mar 2026 15:01:50 +0000
Files and hashes: 1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: xy2vENzghpiA2irAKDIv5NhjxX4UM2eXUT2zdwVLRRY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a9:eb:88:cf:d3:e7:31:fd:db:d3:c3:12:17:6e:a1:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Mar 1 15:01:50 2026 GMT
Not After : Mar 2 15:01:50 2026 GMT
Subject: CN=9578d14886ed212af10eea324efb88ae96952a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ed:72:5d:fb:13:1c:9c:5f:2e:28:61:48:6e:
34:8c:76:d6:d8:69:c1:e9:ae:e6:1b:50:e0:3c:69:
de:b9:03:2f:8d:6f:f4:73:2b:1b:c2:12:df:12:d2:
bf:30:9c:de:d0:da:b4:54:e5:8c:74:ee:97:0f:d3:
f4:d9:96:d2:cb:9a:02:c5:d8:21:d3:4d:5e:44:d3:
99:af:7d:9b:fe:cc:5c:6b:97:83:cb:4a:a7:bd:90:
05:db:f7:7b:03:68:d2:ed:13:35:5a:22:aa:e2:5a:
32:49:c6:49:b9:6e:5d:28:b1:09:be:09:3e:57:d2:
11:e0:00:8a:d6:97:fc:89:33:1f:97:5f:03:8d:b4:
10:8d:cf:4d:d0:03:15:7c:61:ef:18:8d:b2:af:9e:
50:be:7b:25:3c:4e:51:0b:6b:15:ef:90:e1:c0:ba:
c6:d9:3f:24:16:94:6c:6c:82:98:8e:44:ca:c7:96:
ff:53:eb:7d:c3:6a:30:6a:84:f7:55:e4:fc:ed:ff:
b8:a6:74:26:c0:59:ce:a6:61:8c:7c:7f:02:38:45:
cb:10:98:3d:3f:a0:9b:08:0c:27:32:aa:7a:b5:26:
64:63:26:f2:a2:13:9c:03:39:82:76:92:23:d2:6d:
09:ac:2e:cd:17:2b:bd:3f:d7:cd:5a:54:e0:ba:4f:
e4:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:78:D1:48:86:ED:21:2A:F1:0E:EA:32:4E:FB:88:AE:96:95:2A:4A
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:5f:ac:8e:fd:81:52:52:35:aa:80:d2:4c:f5:94:39:be:7b:
76:a5:f0:d7:34:9c:c2:f4:3d:7c:20:55:ee:4f:8d:6b:d1:c4:
2d:09:24:b2:32:81:58:4b:74:05:17:4c:6f:2d:b3:d2:e8:83:
9a:4a:3c:bb:02:65:6e:18:fb:55:50:f6:65:3e:e2:da:71:a3:
7d:0f:20:af:13:d7:e7:e4:04:6f:ce:0c:55:09:59:68:b2:b9:
57:af:26:1d:7b:7f:b6:f0:51:d7:fc:c6:12:c8:67:80:a1:ea:
02:72:2d:e2:fb:15:48:1c:32:7b:cc:02:e1:55:06:25:ae:e3:
4b:89:bd:dd:c8:be:ec:91:e3:57:04:26:00:c5:87:b1:8d:75:
3d:ed:8f:33:be:a6:f9:b5:f7:bd:6a:f1:57:d1:ea:ba:ed:4b:
ce:f3:ae:23:ab:77:24:6f:af:3c:89:df:f3:11:5c:85:38:1a:
05:2c:bf:89:40:2c:0b:3f:70:a3:c3:19:7f:c5:80:73:b7:9d:
54:a6:57:94:40:f0:09:aa:b6:c0:43:17:b2:8b:f8:25:a8:8b:
30:f0:e2:2a:50:9a:1f:61:7e:ab:6d:ec:2a:ff:a7:76:14:6d:
9a:c0:0c:c0:ae:13:c4:ae:9f:11:62:18:3e:ea:a0:9b:e7:6e:
4a:39:d0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZyp64jP0+cx/dvTwxIXbqFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw
YzMxODIwHhcNMjYwMzAxMTUwMTUwWhcNMjYwMzAyMTUwMTUwWjAzMTEwLwYDVQQD
Eyg5NTc4ZDE0ODg2ZWQyMTJhZjEwZWVhMzI0ZWZiODhhZTk2OTUyYTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoe1yXfsTHJxfLihhSG40jHbW2GnB
6a7mG1DgPGneuQMvjW/0cysbwhLfEtK/MJze0Nq0VOWMdO6XD9P02ZbSy5oCxdgh
001eRNOZr32b/sxca5eDy0qnvZAF2/d7A2jS7RM1WiKq4loyScZJuW5dKLEJvgk+
V9IR4ACK1pf8iTMfl18DjbQQjc9N0AMVfGHvGI2yr55QvnslPE5RC2sV75DhwLrG
2T8kFpRsbIKYjkTKx5b/U+t9w2owaoT3VeT87f+4pnQmwFnOpmGMfH8COEXLEJg9
P6CbCAwnMqp6tSZkYybyohOcAzmCdpIj0m0JrC7NFyu9P9fNWlTguk/kNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJV40UiG7SEq8Q7qMk77iK6WlSpKMB8GA1UdIwQY
MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt
Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk
LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG1+sjv2B
UlI1qoDSTPWUOb57dqXw1zScwvQ9fCBV7k+Na9HELQkksjKBWEt0BRdMby2z0uiD
mko8uwJlbhj7VVD2ZT7i2nGjfQ8grxPX5+QEb84MVQlZaLK5V68mHXt/tvBR1/zG
EshngKHqAnIt4vsVSBwye8wC4VUGJa7jS4m93ci+7JHjVwQmAMWHsY11Pe2PM76m
+bX3vWrxV9Hquu1LzvOuI6t3JG+vPInf8xFchTgaBSy/iUAsCz9wo8MZf8WAc7ed
VKZXlEDwCaq2wEMXsov4JaiLMPDiKlCaH2F+q23sKv+ndhRtmsAMwK4TxK6fEWIY
Puqgm+duSjnQKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:51:50 2026 by rpki-client