Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: tfRxEl5e+npiGK5dEzatx30l+QnJsjorC3/oz6L0ZKg=
Subject key identifier: 21:D1:5B:6D:FD:48:06:94:60:7E:97:92:98:75:D7:55:EC:AF:11:63
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019F9391C54A0CF84D6BB4A618C3106683FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1288
Signing time: Fri 24 Jul 2026 10:00:31 +0000
Manifest this update: Fri 24 Jul 2026 10:00:31 +0000
Manifest next update: Sat 25 Jul 2026 10:00:31 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: ldfc03pbUToN/OZ/8nxUfp40G0oNq3YHDO2KXJEZK2g=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:91:c5:4a:0c:f8:4d:6b:b4:a6:18:c3:10:66:83:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jul 24 10:00:31 2026 GMT
Not After : Jul 25 10:00:31 2026 GMT
Subject: CN=21d15b6dfd480694607e97929875d755ecaf1163
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:d2:02:79:5f:8d:e2:fa:4d:95:36:a3:1e:a6:
f5:b7:e0:d0:fa:2e:97:8e:b6:7e:08:38:f7:6d:a4:
90:af:89:b3:c5:2d:4c:08:1b:19:0a:ce:20:a0:6d:
7f:a7:ce:96:e3:68:0b:30:b1:b5:8a:91:a2:3e:cd:
82:c9:cd:30:2c:2b:50:4f:7c:65:d1:fd:2a:81:ba:
2a:53:0c:b3:a3:07:d2:56:e6:a5:3e:b6:5b:4b:f8:
68:ff:ee:67:4f:b8:60:71:5f:bc:99:c4:d6:71:9b:
b8:ab:c6:49:69:f7:63:69:e2:ca:6a:d9:0b:56:f7:
a3:a5:dd:29:f5:dd:d3:cb:bc:ff:4b:41:67:fe:0d:
e0:52:be:5d:05:0f:8f:09:a0:b3:61:3f:f0:92:09:
8f:c4:d8:b9:c4:58:43:98:78:46:21:96:5a:c7:b0:
16:92:a1:6b:5f:ae:71:60:23:17:fe:41:60:e0:95:
03:2f:6f:6b:8c:18:09:ff:87:24:59:1e:c9:a1:ff:
1a:33:40:15:d7:0e:70:08:f0:f0:4f:35:5b:1e:da:
4f:c9:4c:fd:ea:b8:d3:58:c1:1b:27:72:fe:a9:ff:
02:7c:33:71:4f:cc:e7:ff:67:10:7e:31:7c:ca:43:
2a:6a:5f:d0:a0:fc:7e:72:30:db:3c:33:af:88:d6:
8f:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D1:5B:6D:FD:48:06:94:60:7E:97:92:98:75:D7:55:EC:AF:11:63
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:8e:11:10:e0:aa:15:40:98:a1:22:81:6b:fd:0d:94:09:19:
c5:08:d6:72:03:70:05:83:78:4a:ab:be:05:32:24:47:90:40:
fe:c0:f3:22:ac:6f:4a:c6:65:4f:3b:5f:f4:da:17:0b:e4:19:
40:a3:49:5e:0c:b9:96:db:3e:29:91:e3:b8:79:ab:2c:0a:35:
be:51:21:74:52:66:6f:22:20:f1:38:35:83:ff:19:2c:5f:87:
f7:92:46:19:db:08:8b:50:b6:45:2a:e0:32:42:40:12:2e:a2:
ba:16:a8:1f:be:ed:4f:38:7f:a5:40:e0:7d:35:06:bd:4a:da:
d1:d4:30:e8:a7:30:62:19:0b:02:c7:4c:0f:d4:b7:ff:b2:79:
ad:e7:3f:f8:5f:97:e9:d8:e9:21:0f:79:2b:da:0b:14:a8:8c:
99:64:88:91:14:e2:8b:b3:11:20:88:b7:b8:49:b3:15:fd:1d:
ad:be:6c:e2:36:e0:fc:95:85:1a:c9:65:da:1b:0d:ae:df:a6:
ce:f9:a4:13:49:fc:7a:5d:5b:ec:4e:22:83:6e:39:0c:f7:23:
42:8e:e4:b7:ca:15:27:3e:a3:ed:e3:13:0d:e0:b8:e2:2d:c7:
b0:18:de:a1:7c:f2:01:74:1c:1f:4a:de:2b:e1:2f:7d:5b:a8:
ed:ce:dc:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 16:43:52 2026 by rpki-client