Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: YsCBckIoMYcQc2kjSIPzJNPaRs6jTZfdcLaJ5YJvhnM=
Subject key identifier: 54:24:E3:4B:CB:39:1B:DC:A1:82:17:2B:28:8D:01:D2:99:F3:D4:B5
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019D29979D3119057D7890B1361832C8D05D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1148
Signing time: Thu 26 Mar 2026 10:01:35 +0000
Manifest this update: Thu 26 Mar 2026 10:01:35 +0000
Manifest next update: Fri 27 Mar 2026 10:01:35 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: mXpQPI3GcCKDe5xLhqlsr9ejJOj0ykALgqgItQbgKio=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:97:9d:31:19:05:7d:78:90:b1:36:18:32:c8:d0:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Mar 26 10:01:35 2026 GMT
Not After : Mar 27 10:01:35 2026 GMT
Subject: CN=5424e34bcb391bdca182172b288d01d299f3d4b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:05:87:0e:43:48:64:32:a2:89:20:be:0d:b6:
05:80:d2:3b:d5:47:b2:33:d7:12:36:38:6b:58:d9:
64:98:d5:f2:94:83:37:04:d2:9a:fd:ac:63:41:0b:
4d:cb:17:4e:7a:f1:69:1d:6e:7d:80:26:86:6a:28:
a3:f7:f8:69:80:80:f6:34:9d:c5:e7:59:07:16:d3:
22:49:ca:d8:a5:e9:b5:2c:7d:c8:43:a9:ad:76:d5:
a1:a0:3d:09:81:e6:02:3b:30:84:11:9f:04:e2:7e:
37:84:21:09:b6:79:d2:80:4c:b0:e0:4e:17:9f:d6:
cc:f8:71:73:0b:fe:1d:8b:0b:6d:92:9a:62:d1:5e:
84:a7:f5:31:ca:24:22:50:59:d1:40:d0:59:14:be:
1b:1b:a2:d6:55:4d:06:3a:fd:e0:32:de:20:c9:f4:
85:84:fa:74:ca:00:71:01:0a:7b:68:77:6f:80:80:
f9:d8:be:af:c4:f6:b1:33:60:34:f5:e0:3e:6b:f1:
e2:9a:b2:31:23:87:01:6d:3b:82:87:01:40:93:88:
c0:cf:5b:c3:63:85:0f:8a:32:ab:01:05:21:ce:45:
b2:8b:be:c1:d4:1a:d0:fe:60:c3:c0:03:ec:64:9d:
0c:b0:75:95:07:63:13:5d:ff:40:29:62:5b:42:d7:
42:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:24:E3:4B:CB:39:1B:DC:A1:82:17:2B:28:8D:01:D2:99:F3:D4:B5
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:b8:ed:61:8c:f4:48:a9:5d:9f:92:bd:c4:6d:b5:05:05:dd:
42:14:f9:52:4c:e5:c6:4e:4a:97:71:7b:e2:47:48:b5:08:ea:
7b:b8:61:69:05:3a:3b:cc:e9:8a:1e:77:7b:e6:84:46:3e:d6:
e0:6f:ae:8f:fa:f2:dc:ba:5d:24:4a:81:1f:4b:cc:ae:e4:41:
01:11:21:9d:4f:19:a7:5c:5e:f0:2a:84:63:73:94:7f:a7:16:
f7:df:d9:33:79:44:31:63:ee:15:32:52:c0:fc:df:c4:19:f1:
2c:f9:a7:2a:e8:eb:4e:15:6e:8c:7e:8f:45:4b:24:45:9d:0e:
0b:d8:ea:43:37:e0:c2:26:e3:e2:22:72:d3:42:50:81:b5:7a:
92:92:be:e0:97:8c:64:20:b3:6d:9e:8b:52:aa:78:c6:fc:61:
70:fd:8d:ab:18:d7:40:9d:fb:3d:63:54:82:6d:c7:40:fd:1c:
f1:8b:11:7a:6c:9f:5a:9c:40:6a:8f:02:2f:97:f0:50:67:02:
d6:f0:ee:fe:f4:f6:8b:25:cb:4e:27:2f:fb:15:f7:06:d2:3e:
9e:6b:66:32:f1:08:ce:85:4a:40:6f:d3:f0:5a:1c:44:af:c7:
19:d5:3b:c2:6d:1d:8f:d8:1a:94:9d:ef:a6:4d:bd:2d:4f:3b:
aa:cc:af:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0pl50xGQV9eJCxNhgyyNBdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjYwMzI2MTAwMTM1WhcNMjYwMzI3MTAwMTM1WjAzMTEwLwYDVQQD
Eyg1NDI0ZTM0YmNiMzkxYmRjYTE4MjE3MmIyODhkMDFkMjk5ZjNkNGI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQWHDkNIZDKiiSC+DbYFgNI71Uey
M9cSNjhrWNlkmNXylIM3BNKa/axjQQtNyxdOevFpHW59gCaGaiij9/hpgID2NJ3F
51kHFtMiScrYpem1LH3IQ6mtdtWhoD0JgeYCOzCEEZ8E4n43hCEJtnnSgEyw4E4X
n9bM+HFzC/4diwttkppi0V6Ep/UxyiQiUFnRQNBZFL4bG6LWVU0GOv3gMt4gyfSF
hPp0ygBxAQp7aHdvgID52L6vxPaxM2A09eA+a/HimrIxI4cBbTuChwFAk4jAz1vD
Y4UPijKrAQUhzkWyi77B1BrQ/mDDwAPsZJ0MsHWVB2MTXf9AKWJbQtdCkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFQk40vLORvcoYIXKyiNAdKZ89S1MB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOLjtYYz0
SKldn5K9xG21BQXdQhT5Ukzlxk5Kl3F74kdItQjqe7hhaQU6O8zpih53e+aERj7W
4G+uj/ry3LpdJEqBH0vMruRBAREhnU8Zp1xe8CqEY3OUf6cW99/ZM3lEMWPuFTJS
wPzfxBnxLPmnKujrThVujH6PRUskRZ0OC9jqQzfgwibj4iJy00JQgbV6kpK+4JeM
ZCCzbZ6LUqp4xvxhcP2NqxjXQJ37PWNUgm3HQP0c8YsRemyfWpxAao8CL5fwUGcC
1vDu/vT2iyXLTicv+xX3BtI+nmtmMvEIzoVKQG/T8FocRK/HGdU7wm0dj9galJ3v
pk29LU87qsyvAA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 15:51:54 2026 by rpki-client