Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: nN3uGwPgSOsccLEH/0FCT4TewaYnoNCh4cmH+lj/1SI=
Subject key identifier: 01:75:56:56:01:07:97:2D:24:C3:2E:BE:91:94:35:AF:AC:F8:5A:28
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 019D2583EECABBD82EA94C7227D7E9E691D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 1885
Signing time: Wed 25 Mar 2026 15:01:36 +0000
Manifest this update: Wed 25 Mar 2026 15:01:36 +0000
Manifest next update: Thu 26 Mar 2026 15:01:36 +0000
Files and hashes: 1: JGC3hOQ65l3IVZSex1MpcfbZiyA.roa (hash: QObUgpT6rtusfHIb4HhFNGnIlZcsd+4RSYzLE+p//tY=)
2: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: 8n1zxYXCJDXaC+M3R8DbLVKrlayEsTQbxweMekAxkyE=)
3: lc9W2wBKoYqSI9KEszj4k6MVn6o.roa (hash: saKepJ0hHzAxA4OvfTff87GabrL2VL5zc0ZTtwa7RP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:83:ee:ca:bb:d8:2e:a9:4c:72:27:d7:e9:e6:91:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Mar 25 15:01:36 2026 GMT
Not After : Mar 26 15:01:36 2026 GMT
Subject: CN=017556560107972d24c32ebe919435afacf85a28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:bc:29:0e:a4:b9:61:bc:e4:73:de:60:5f:25:
c7:c6:25:5f:b9:9e:ea:c9:5c:90:03:28:f4:33:8d:
8a:92:c9:62:88:a8:f0:df:06:09:b4:bf:f0:db:0c:
43:09:2d:f7:4e:9a:ed:5f:8c:26:83:8b:b8:94:c4:
7b:9b:df:b7:19:1b:51:b2:1b:d6:f8:35:02:fe:a3:
b2:65:51:6e:a7:99:9c:1e:f9:76:71:54:d7:2c:0f:
99:a9:cb:23:21:0f:9c:c1:d1:de:43:e8:ac:a1:b4:
6a:e9:96:fe:c2:f8:e6:72:3d:48:fa:0c:a4:f0:b0:
e9:46:9d:71:55:9b:fc:fb:2f:85:7a:58:de:b5:62:
f3:f0:77:4c:03:b6:0a:96:19:14:7d:72:53:bf:30:
de:ed:11:09:19:22:f1:5b:4f:35:61:a3:1a:2b:7f:
58:6b:3f:16:0c:7d:85:3d:3d:62:c5:b2:8a:78:59:
af:45:8e:c3:bf:78:c6:a9:fe:ee:72:a1:54:88:62:
18:e8:ee:b3:79:b7:5c:7c:aa:1a:60:f4:08:58:ec:
5c:83:ae:68:4e:e4:a3:b2:5a:9a:33:ab:db:75:ad:
49:b3:b5:46:ba:65:3c:ed:f6:d9:6c:9e:56:69:0d:
b5:bb:83:ea:f2:dc:2f:51:8a:a6:b1:99:d1:f1:6e:
b2:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:75:56:56:01:07:97:2D:24:C3:2E:BE:91:94:35:AF:AC:F8:5A:28
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:d8:0e:3c:26:01:ec:56:60:ad:81:08:34:e3:7c:a2:c9:73:
d9:33:c7:47:64:67:ad:32:e7:e3:56:65:90:f7:9a:1e:cd:43:
e0:89:1a:f9:99:f8:88:f0:f2:26:25:db:5f:48:17:0e:a7:e7:
dd:69:aa:07:a8:73:92:fa:d3:ab:1b:d0:53:de:1e:3e:d5:c4:
00:20:3c:32:04:6b:4a:53:af:6f:13:4f:5d:a5:37:46:34:84:
2a:76:cd:9d:af:12:0f:1f:1a:ae:27:c1:7d:05:1a:bc:9c:c4:
eb:82:6f:13:28:f9:41:e1:1a:2c:be:cf:3a:1d:03:94:ee:55:
ea:70:69:63:a7:c4:63:cf:70:b0:26:7a:50:83:83:ef:f9:1b:
cf:b4:b3:55:59:32:47:02:84:d6:00:6d:3a:e0:b5:ce:fb:8f:
45:f3:a0:79:3e:4a:ee:c5:13:66:0f:38:20:f1:8c:2a:61:ff:
b5:7a:be:ab:fc:ad:31:51:bb:4b:75:30:09:24:50:ed:df:a1:
ce:15:47:36:27:c6:07:64:28:1f:56:00:20:b8:7b:1a:bb:56:
03:6a:ec:b0:81:fc:54:8f:64:8b:6b:55:91:4e:b9:53:08:eb:
26:1b:07:bd:b5:9d:3b:c4:24:c7:56:dc:e8:17:ba:51:db:5e:
0c:d7:d4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:20:04 2026 by rpki-client