Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: UO2K4z2epcDhUDFdh/aY0vLfvPk7mKA0FTZXUd4sU60=
Subject key identifier: 7A:7C:DB:10:0C:C1:03:60:35:2B:A8:37:6F:E5:65:CD:18:9D:31:BE
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 01A0EAE4EAB1A0CBFED23E5ADE3D03E70F0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1A0C
Signing time: Tue 29 Sep 2026 02:01:05 +0000
Manifest this update: Tue 29 Sep 2026 02:01:05 +0000
Manifest next update: Wed 30 Sep 2026 02:01:05 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: dc1CHnAmwQnP+hfc7B8NN9cg8y2gn4Ly/Ie0h2bXP9E=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ea:e4:ea:b1:a0:cb:fe:d2:3e:5a:de:3d:03:e7:0f:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Sep 29 02:01:05 2026 GMT
Not After : Sep 30 02:01:05 2026 GMT
Subject: CN=7a7cdb100cc10360352ba8376fe565cd189d31be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:de:b5:9e:d1:20:27:66:24:ad:a6:9c:61:de:
a2:5c:22:f2:0c:21:80:2f:90:7c:12:77:1b:89:9c:
01:af:ae:10:06:22:45:68:6a:38:63:bb:4d:71:15:
87:ac:d8:35:f9:db:1c:ea:7a:db:4c:14:c6:26:f1:
e7:54:43:f5:29:5e:c3:ba:77:b1:ad:e2:56:21:d9:
86:5c:a0:0a:15:d1:62:1a:62:a5:08:a7:f6:d8:76:
34:6c:19:bf:5b:ac:06:88:c7:86:77:2c:4d:91:73:
8c:63:e7:41:f3:f8:fb:eb:8a:25:97:cb:4b:42:48:
6d:ce:85:0e:97:c3:ae:91:88:3b:13:c1:8c:c1:18:
62:6d:42:7d:b6:1d:d1:96:cb:b3:e4:ec:cf:86:fb:
a7:ef:e1:2f:45:a7:d6:fd:82:97:58:3f:b5:5c:3c:
78:f0:4a:83:10:d9:64:39:a7:e3:28:7c:8a:4c:d7:
c1:57:aa:21:90:57:82:33:14:59:8a:4f:ec:b2:a9:
45:6c:c6:9c:73:bf:d9:8c:18:8a:27:a4:e5:81:9f:
a7:8b:a0:ac:85:02:cf:2c:77:a6:6d:c5:04:97:bd:
c5:f2:bd:7f:cf:e0:27:42:df:62:c5:bd:f7:b2:39:
6a:e8:85:cd:d5:59:ee:02:13:c3:d0:68:51:ee:e2:
e2:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:7C:DB:10:0C:C1:03:60:35:2B:A8:37:6F:E5:65:CD:18:9D:31:BE
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:45:f6:31:b2:e2:45:24:4b:49:41:96:9d:12:c5:11:ce:49:
01:a9:35:3e:c2:b2:4c:20:ef:b5:93:d9:73:71:ed:ba:ac:c1:
e4:0d:5c:55:fc:17:ab:f6:fc:74:94:f7:41:37:48:cf:36:8a:
ff:d9:8a:89:a3:08:74:25:28:29:7e:6f:95:0c:37:14:67:08:
1e:38:ba:b3:83:70:6f:3d:32:58:66:16:5e:fd:c9:f6:b0:d2:
14:20:f2:1b:8d:7c:b9:3b:da:31:97:f5:20:97:a7:ad:1c:b8:
03:81:a5:67:cb:18:10:5f:60:a2:aa:34:f2:85:e4:35:40:74:
6c:24:7a:28:89:e4:3e:a4:35:58:83:e0:4a:f4:4a:e4:ca:25:
fb:16:6c:c4:29:a9:6e:b2:3f:31:19:1c:b2:b5:c3:5d:1a:68:
cf:c3:7b:66:f3:a9:3b:be:6c:6b:6a:48:1e:f9:e3:62:81:ef:
0b:27:36:df:e4:00:54:a3:5b:83:43:88:14:30:4f:37:60:ef:
d7:d7:98:9c:4d:8e:e4:2a:dc:45:44:c4:20:ad:c4:c6:b6:cd:
6d:3f:bf:ce:1f:c2:26:41:e9:2b:76:20:74:7d:78:a7:aa:ef:
18:41:f0:19:6b:7c:36:a9:6f:77:1e:0a:ab:7e:6e:b0:79:65:
b9:fe:7b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 09:26:43 2026 by rpki-client