Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: M+Ngc9AHf8qNHr1ayQryeBoHvzGA/ZdToCFqaMq+ogU=
Subject key identifier: 96:42:A7:0C:A5:05:1E:B0:81:CE:FF:3F:D1:BD:50:CA:1D:FF:8D:8E
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 019D25F1B72F865C87E30C4C9FFB4B61600E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 02A1
Signing time: Wed 25 Mar 2026 17:01:31 +0000
Manifest this update: Wed 25 Mar 2026 17:01:31 +0000
Manifest next update: Thu 26 Mar 2026 17:01:31 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: hokWrBW+n9XPPCBeR13K+80TxDrbfxIapDC65Vc0Uyg=)
2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:f1:b7:2f:86:5c:87:e3:0c:4c:9f:fb:4b:61:60:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Mar 25 17:01:31 2026 GMT
Not After : Mar 26 17:01:31 2026 GMT
Subject: CN=9642a70ca5051eb081ceff3fd1bd50ca1dff8d8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:5a:a4:ad:bb:85:f4:0b:15:8c:b5:32:f3:f1:
77:ad:e5:45:d9:c4:d4:c8:8f:94:60:d4:e5:f4:40:
cd:69:62:59:fd:78:2d:86:a2:05:ee:b0:ac:ee:5c:
73:27:a0:ad:42:de:80:26:66:bc:dd:ff:6e:88:bd:
6f:54:ad:c2:3b:74:b1:36:ef:c4:60:e9:4d:93:af:
69:7d:93:44:ea:32:63:5a:30:4f:e5:86:d8:ca:a5:
12:13:87:07:6d:7a:75:0e:95:f3:cc:e3:2b:9d:82:
1a:39:f8:7b:4f:e7:40:e2:46:f7:a1:fb:d9:0b:ea:
6a:74:2e:a2:a5:bb:a8:77:82:06:86:9c:fe:e7:a9:
0d:a7:95:49:0b:74:9a:14:21:de:86:0d:4e:a7:6c:
b1:14:85:6a:6f:d7:cf:e1:c0:23:cf:ab:42:f8:45:
e9:f7:77:39:a6:61:54:2f:ca:82:59:67:bf:aa:fe:
3e:61:0c:49:af:ac:c1:17:bc:79:4e:c0:6d:45:6d:
bb:fb:90:14:94:fc:cd:a4:7a:26:df:6a:59:7b:a0:
e2:c3:c4:db:51:14:26:b6:6e:8e:7e:e8:3a:30:99:
50:e0:be:a8:54:bb:37:40:ee:24:08:a3:91:18:bf:
32:8a:5f:c9:8c:40:25:53:ba:2a:28:a8:9b:3d:d1:
85:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:42:A7:0C:A5:05:1E:B0:81:CE:FF:3F:D1:BD:50:CA:1D:FF:8D:8E
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:30:09:cf:4d:44:96:c8:8c:4b:d4:d3:eb:06:86:48:e2:1e:
e4:c5:44:8a:fe:56:e8:96:0e:15:0c:44:5e:06:42:a4:52:64:
01:ba:39:ba:9e:f6:2e:17:ad:61:f1:42:1b:ac:e6:09:6b:73:
23:d5:7a:a1:20:0b:f2:34:65:e4:ec:d2:81:0f:2c:31:a9:79:
59:ee:1e:cc:64:20:bc:65:4b:17:02:15:52:a4:d3:0c:d8:0c:
93:32:2b:fb:92:23:17:76:ff:3c:7f:c9:25:c9:3e:a1:75:e2:
d0:97:17:58:6d:0d:88:6f:26:f0:1b:ca:4b:4c:ac:ee:75:c5:
3a:f3:f9:60:38:74:43:eb:2c:c3:18:7c:2a:bc:80:41:00:d9:
18:a9:7f:5f:63:38:c5:ce:cf:68:91:4b:a5:41:68:f5:de:f5:
fe:19:37:9a:eb:6f:49:ff:81:df:4c:73:a8:1b:cd:43:65:1c:
5c:a1:63:ae:29:b1:fe:af:3c:26:5d:50:b4:d2:5c:f4:20:9f:
19:25:a7:cd:de:c3:a2:e4:70:25:a5:4d:32:19:51:16:d9:0c:
ae:f5:58:b2:34:70:44:e4:ed:5f:94:55:a4:7d:80:55:1b:93:
17:8c:35:54:ce:85:98:db:f1:b6:40:7e:ec:9f:91:ba:dc:3e:
09:79:29:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 21:29:07 2026 by rpki-client