Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: 57M9Ak+ypsnal371X0hPYsGpSmUaZUb0uo+0Yi4lzRQ=
Subject key identifier: F1:68:42:D2:4D:97:3D:2E:43:9A:39:D9:27:38:EF:9B:1F:0F:51:9B
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 01A0D04892BDA870E04A896E6F73222AD3C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 0487
Signing time: Wed 23 Sep 2026 22:00:12 +0000
Manifest this update: Wed 23 Sep 2026 22:00:12 +0000
Manifest next update: Thu 24 Sep 2026 22:00:12 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: Hm2L464YEhpgNXvwzcm1iX4aCpiMXOqiUfBLMces4H0=)
2: WK0mu1qmieSlIr6yg5ax-_qSTA0.asa (hash: Lvp+VsX30yvL6oSGlFhMmUutaj24REfdYi4hraFh+yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 14:12:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d0:48:92:bd:a8:70:e0:4a:89:6e:6f:73:22:2a:d3:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Sep 23 22:00:12 2026 GMT
Not After : Sep 24 22:00:12 2026 GMT
Subject: CN=f16842d24d973d2e439a39d92738ef9b1f0f519b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:1d:49:52:03:7d:1d:4f:0d:ef:c2:22:0a:
ff:5f:60:5d:1c:85:4c:72:b6:53:a9:d0:05:3d:80:
c8:38:61:dd:ce:3e:d6:98:97:bd:a2:02:1e:68:81:
29:e8:d3:9b:86:3c:34:a3:e6:3c:43:88:3b:fb:c9:
87:8e:5e:04:20:4e:67:03:c5:27:a8:04:d2:4d:6d:
a1:96:f4:fe:e8:e8:b3:a8:0a:f1:03:28:c3:0b:2b:
9d:bd:4e:79:6c:0b:32:ab:56:b3:db:fe:19:e6:2d:
37:5b:1a:b1:02:10:f6:68:c2:50:91:b1:60:d0:36:
81:47:67:56:38:e5:6c:46:6d:93:65:95:b2:21:b9:
c7:d9:1b:af:9e:a3:8e:8e:38:3b:39:78:c3:f3:1a:
fd:af:19:b3:6d:de:72:d6:c6:d1:89:f5:a7:fd:78:
0c:81:40:0e:3d:6b:57:cf:2a:82:d9:df:50:ca:6a:
e0:a3:e5:cf:a2:95:be:c8:58:b9:66:ba:de:ed:9b:
2c:12:34:55:05:a6:a7:17:b7:8f:47:ce:ff:c9:48:
9c:e5:61:9b:a7:47:6d:81:06:1a:a2:46:69:3c:a2:
4c:6a:6a:0e:7c:ee:07:41:a6:18:13:93:92:73:97:
61:f5:b4:3e:80:75:08:17:0d:4c:af:4f:09:68:69:
01:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:68:42:D2:4D:97:3D:2E:43:9A:39:D9:27:38:EF:9B:1F:0F:51:9B
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:b1:30:bd:d6:9f:b4:fc:ca:b8:5f:49:ba:23:1e:98:3f:ad:
a9:fc:b0:da:5d:45:a2:54:9e:1a:85:e4:e4:08:26:10:83:0d:
fb:55:07:66:59:ad:f1:d5:17:2d:5b:f5:56:e0:95:f8:ac:f4:
84:4b:b8:cf:41:32:9b:87:9a:3b:c8:0b:30:0b:0b:3c:38:12:
0c:16:07:ed:aa:e0:10:fd:39:8f:3c:72:9a:31:54:6d:55:28:
48:e4:31:c5:2c:32:e2:6c:08:7d:02:45:35:ac:e5:0c:95:64:
db:09:6e:a5:85:fe:c6:b0:d6:a9:47:69:c5:f0:c7:b0:df:ee:
68:20:de:f0:b3:e6:26:5a:b1:69:57:7c:bd:8d:c8:4e:f3:5d:
ed:0b:ba:bb:af:e4:bd:c9:d2:71:f0:4d:1f:60:1a:44:43:ca:
8c:39:9c:d1:25:1a:24:03:bc:50:af:d1:1e:2c:8e:bb:a6:b3:
b3:fd:41:7d:9f:53:38:4d:4f:35:4d:06:77:5c:7e:c9:f6:d6:
66:a2:5d:1b:66:3b:27:f2:dc:fe:0a:76:b4:63:6c:b7:9b:97:
fd:35:6a:6e:94:52:8a:dc:8b:66:2e:81:87:04:6b:dd:99:20:
80:d1:bb:51:dd:9f:e3:a6:d5:81:8f:d0:57:4f:71:25:67:ae:
95:94:fc:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 00:38:05 2026 by rpki-client