Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: cnZON+9Ksrk81r6UjmZLHzIelsNkb5vgcupzD49o0Uo=
Subject key identifier: 36:2A:44:95:A1:05:88:5A:DF:67:65:1F:FC:EE:04:08:E0:28:ED:57
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019E20C83AF2D6A30301A377CA71129B68BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 11C8
Signing time: Wed 13 May 2026 10:00:53 +0000
Manifest this update: Wed 13 May 2026 10:00:53 +0000
Manifest next update: Thu 14 May 2026 10:00:53 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: 4pkPiLKjzyLParEVJ0oNMNlvSFkHPQP6vjFUUKzMB5U=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 10:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:20:c8:3a:f2:d6:a3:03:01:a3:77:ca:71:12:9b:68:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: May 13 10:00:53 2026 GMT
Not After : May 14 10:00:53 2026 GMT
Subject: CN=362a4495a105885adf67651ffcee0408e028ed57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:40:d4:a2:5e:f2:45:20:36:7e:fb:e4:b7:58:
7e:56:5d:c9:2d:4a:b6:10:2d:d6:9c:b1:81:38:76:
17:e9:8f:a7:16:0b:14:dc:28:99:9b:3c:c2:06:7e:
d1:bd:91:b4:31:16:4b:95:8d:2a:46:c6:4a:42:a3:
45:de:09:a8:b9:09:b1:61:b2:db:0c:0d:4d:4e:7b:
eb:06:0a:86:82:20:eb:59:4a:91:3e:ae:ca:be:cc:
2d:52:57:0f:41:5b:21:12:6b:59:73:ad:13:da:2c:
24:05:18:5f:d0:ba:08:9b:0e:a8:1c:88:33:d8:66:
27:c8:3d:c8:49:c6:d1:0e:df:9a:e4:f7:e2:e0:d3:
42:c3:6b:8d:c0:bf:d1:95:14:94:67:52:16:e4:5a:
5f:7e:a5:40:82:0c:72:ff:82:81:90:cb:1c:26:6c:
0d:8c:5f:9f:78:03:ce:61:f2:51:f8:e0:54:b7:b2:
07:5d:06:a4:cd:77:1d:3d:8e:08:a8:e0:31:72:59:
21:51:e9:e2:0d:71:d6:16:a1:bd:de:24:af:ec:8d:
90:c0:43:95:17:0c:48:73:2c:37:18:33:15:9d:03:
19:7e:59:74:05:6a:10:32:70:2b:6a:38:4f:89:2b:
14:3d:0a:5b:ec:36:a4:84:60:30:20:37:fa:04:51:
64:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:2A:44:95:A1:05:88:5A:DF:67:65:1F:FC:EE:04:08:E0:28:ED:57
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:8a:7c:85:6f:1e:27:bb:99:a3:d0:1e:0d:69:91:7c:93:74:
85:1a:ca:26:96:06:87:87:8c:2a:cd:2f:3b:89:db:b3:95:af:
82:1d:c8:d9:63:1a:12:68:ce:97:b8:7f:f7:f6:3c:72:97:ef:
c0:e0:4b:5d:9d:ca:43:89:59:8d:c0:99:c0:5d:c5:7d:0a:99:
12:f6:43:71:ca:86:15:a2:fe:7f:21:df:9d:b2:b0:26:61:3f:
2c:e9:2d:7a:6b:6f:ab:45:84:09:22:a2:95:5d:52:e9:ae:77:
99:44:5e:0c:71:06:24:89:f3:f0:93:a2:02:67:f2:4f:29:b5:
ae:95:01:b9:1d:0a:91:a7:8b:f8:fd:a2:85:9e:79:fb:a7:5e:
07:e8:97:43:59:38:49:69:96:39:c1:70:64:f6:a4:c3:d5:42:
d2:c9:8f:a6:0f:54:87:f4:3d:65:fa:20:27:97:9b:35:1e:52:
6e:56:b5:1e:07:53:7e:d5:ea:69:62:e4:26:a2:7f:e5:71:33:
fd:2a:ab:87:9c:00:e5:4d:33:ed:30:c3:73:0c:d4:62:5b:f3:
75:90:82:4d:d1:40:c4:de:19:2e:7b:b4:97:54:31:8b:3f:e0:
20:ea:0a:b5:f3:2f:fd:07:76:9e:01:3c:47:80:a4:9a:2b:25:
f9:c0:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 17:25:46 2026 by rpki-client