Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: xGuTYWxiEkbcJ8jI5BX3WFHAFqsU8KkEtVw6TItaIvQ=
Subject key identifier: EC:61:96:27:F7:19:2F:EA:F5:43:2B:DD:B7:8D:C3:89:8D:B9:F0:15
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 01A1291ECD1F213D450CCFD90F83F5097523
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 135A
Signing time: Sun 11 Oct 2026 04:00:46 +0000
Manifest this update: Sun 11 Oct 2026 04:00:46 +0000
Manifest next update: Mon 12 Oct 2026 04:00:46 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: gzZmqlen/ePWIxudKF7iTAE1lIRvX10VPQacWZXAe+g=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 04:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:29:1e:cd:1f:21:3d:45:0c:cf:d9:0f:83:f5:09:75:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Oct 11 04:00:46 2026 GMT
Not After : Oct 12 04:00:46 2026 GMT
Subject: CN=ec619627f7192feaf5432bddb78dc3898db9f015
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1b:85:7f:0e:6b:e2:64:1d:21:ee:f2:aa:a8:
8b:ae:e3:85:6b:32:c7:fe:b7:87:44:45:7d:4c:81:
78:44:3e:0b:ae:02:e4:be:e1:55:87:3e:e7:52:4a:
b2:78:df:c6:4c:df:d2:82:6d:13:21:df:62:c9:bf:
64:5b:0b:77:23:11:02:ab:70:d5:27:b1:f9:a9:bc:
f5:e5:8b:e2:e6:0c:ff:52:1a:f6:cb:00:17:fd:7c:
ec:ac:3e:96:20:d0:76:15:e0:9b:cd:e8:25:04:db:
62:be:43:89:1a:f7:18:bd:23:7b:5d:cd:1e:da:09:
96:7f:bd:c4:dc:5e:b7:c8:00:27:42:e9:7b:53:65:
49:1b:e7:9f:7e:5d:ba:68:13:78:16:4d:a4:e0:37:
78:3b:86:b6:01:49:a9:41:62:74:bf:23:a0:76:3c:
f1:0c:0e:36:c5:d1:41:eb:89:e9:09:05:26:de:94:
9e:17:c7:23:35:f3:ff:2b:7d:00:0d:01:dd:d4:e5:
49:12:5a:9f:60:e2:2a:b1:3d:92:5d:9c:e6:41:0c:
63:cd:14:75:fb:f6:2e:a7:39:5b:5f:96:94:42:d3:
00:98:d4:71:0d:2f:ed:d0:dd:c9:e8:e8:9f:a0:01:
e0:6e:50:1e:eb:b9:9e:28:1a:be:c1:d7:54:8b:62:
1d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:61:96:27:F7:19:2F:EA:F5:43:2B:DD:B7:8D:C3:89:8D:B9:F0:15
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:08:7b:67:85:bb:19:42:66:98:89:10:75:c4:b7:8e:51:2f:
bb:2f:ef:97:4b:2d:13:37:84:5a:1e:dd:d2:d7:4b:ae:71:71:
ce:1a:99:ce:03:e3:09:d9:01:24:b5:ac:83:fd:2f:52:82:5e:
9b:fa:5a:46:59:09:84:6e:54:c9:c5:93:c2:1a:62:c6:71:57:
c8:d6:aa:03:3b:32:aa:11:53:0a:e2:44:5e:a4:d6:e2:28:d0:
22:38:bd:5a:43:19:83:1e:de:d8:88:3f:f3:9e:7a:ea:38:4d:
02:b2:1b:3e:ed:96:35:98:18:cf:c3:f2:b3:39:a3:30:09:81:
7c:63:0c:74:e2:5f:df:63:2a:b6:c1:5e:07:2a:a9:7b:57:64:
da:af:1e:ad:7e:74:1a:6b:03:c4:6b:55:9d:eb:c7:09:b1:58:
6a:6c:45:a1:ca:70:50:62:f7:57:2c:a0:32:bd:33:c6:e8:eb:
2a:18:22:27:07:5e:e9:aa:d4:ae:04:b7:74:52:25:4c:50:92:
11:f9:14:81:bb:7e:47:ad:59:27:a1:1a:82:4c:18:cc:3b:fa:
69:67:82:d5:d7:c4:7d:01:de:0d:82:5e:69:d2:1a:e3:09:bc:
45:6d:3e:e4:f3:96:47:d3:82:b3:00:56:88:3a:bc:b1:80:1f:
fb:34:6e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 10:58:29 2026 by rpki-client