Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: TEhdOEf4NWCot7C/td2zq6AQGTuCoL3t3cGhptbu3QE=
Subject key identifier: 93:82:1D:8A:A4:38:F1:33:74:C0:F0:EB:CF:2D:C3:27:71:F1:B6:8C
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019E1EA34FD98ED93DE54A515044A2F4D997
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 1906
Signing time: Wed 13 May 2026 00:01:19 +0000
Manifest this update: Wed 13 May 2026 00:01:19 +0000
Manifest next update: Thu 14 May 2026 00:01:19 +0000
Files and hashes: 1: JGC3hOQ65l3IVZSex1MpcfbZiyA.roa (hash: QObUgpT6rtusfHIb4HhFNGnIlZcsd+4RSYzLE+p//tY=)
2: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: 8w/6ohxXaMF102/ox65UZ7koqBWkYyqePkNyaXkOB0Q=)
3: lc9W2wBKoYqSI9KEszj4k6MVn6o.roa (hash: saKepJ0hHzAxA4OvfTff87GabrL2VL5zc0ZTtwa7RP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a3:4f:d9:8e:d9:3d:e5:4a:51:50:44:a2:f4:d9:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: May 13 00:01:19 2026 GMT
Not After : May 14 00:01:19 2026 GMT
Subject: CN=93821d8aa438f13374c0f0ebcf2dc32771f1b68c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a2:42:1c:06:81:19:31:df:1d:65:c1:2f:88:
cb:b2:f6:a1:79:1a:5e:f5:83:33:36:aa:5f:c4:20:
c3:2f:99:1d:e3:95:a0:38:55:4c:c8:c0:76:c2:71:
7b:9c:c0:fd:f9:b2:ab:f8:84:f0:68:de:bb:47:ec:
c9:b2:6d:0a:b4:24:58:35:36:21:30:e4:8a:b2:f3:
20:6c:c9:f6:d0:c4:a4:5b:0a:41:ae:9e:32:dc:47:
b4:f6:ca:5a:37:41:46:7a:2e:8d:76:42:58:38:02:
2e:61:46:77:f3:0d:6d:ed:f4:47:ba:cb:bb:dc:46:
91:fb:65:25:ad:7a:26:4e:e5:5e:41:6a:d9:6a:1f:
df:30:4b:82:30:dc:ff:f8:02:ce:52:35:d8:36:aa:
62:f8:ce:6c:7f:4f:9e:b3:1d:eb:58:a8:b3:1b:ca:
81:09:31:a0:e8:01:63:88:1a:fa:0b:e0:87:b5:c0:
05:66:82:78:a9:95:18:10:45:1d:29:81:a9:c1:eb:
d1:40:35:e1:58:0e:b0:6f:a4:59:b6:7f:8b:6c:8f:
aa:89:b8:68:98:00:91:51:ae:02:d5:1e:d2:a3:57:
fc:7d:be:97:4a:5c:31:ae:d3:bc:0b:34:54:fc:9f:
52:df:6c:d3:c8:01:65:eb:6d:ab:bd:57:94:75:05:
ae:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:82:1D:8A:A4:38:F1:33:74:C0:F0:EB:CF:2D:C3:27:71:F1:B6:8C
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:64:44:63:08:fc:84:3c:06:73:f8:69:ee:e9:bb:0b:ba:4e:
bd:7c:70:fd:e5:99:ba:7f:ef:ec:74:c9:a0:57:f8:7c:6d:c3:
31:01:eb:78:86:94:23:54:9f:96:e0:ef:a0:ed:f3:e9:91:2c:
7d:a3:4d:71:6d:71:6a:c8:ae:5a:54:05:45:8d:f1:e8:29:4d:
2a:37:4a:9e:10:aa:7a:b6:0c:c0:94:d0:70:2b:dd:88:08:6f:
3b:a4:ac:b2:ca:24:c4:1f:bb:26:ad:2c:8d:c1:84:8e:ef:06:
93:7f:f7:69:fa:fc:b2:41:fd:11:8f:bd:a7:8f:48:40:fc:dd:
a3:af:34:e7:ab:c5:13:4f:c7:9e:47:36:51:31:b3:d4:22:09:
03:44:00:f6:69:e7:54:eb:b4:b7:7e:df:4b:47:4a:c0:7e:87:
87:48:e1:fb:b4:67:2f:43:51:05:20:c7:4d:95:f5:81:15:85:
6c:79:dd:b1:b2:6c:54:92:2a:6c:ae:b3:3b:8a:1d:85:03:6b:
d3:59:55:68:e2:1a:57:62:a5:df:22:e9:34:83:42:0e:fe:03:
7b:54:74:5b:58:e5:ae:db:ee:38:2d:8d:53:da:b0:c1:64:55:
f3:ae:78:58:75:fb:99:88:2f:2e:95:90:bc:c9:00:71:7f:78:
5f:31:35:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:34:21 2026 by rpki-client