Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: SY0ZoOf5tsUcwZQHAWVhiineQq9E/Awx5Uayg9FAdFY=
Subject key identifier: 83:11:49:4A:47:7F:5D:DD:4C:2D:0B:0D:FD:49:5D:4A:84:22:44:D3
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019F9323D47856496D52CFC13E2981A62D61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 17A2
Signing time: Fri 24 Jul 2026 08:00:26 +0000
Manifest this update: Fri 24 Jul 2026 08:00:26 +0000
Manifest next update: Sat 25 Jul 2026 08:00:26 +0000
Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: DdHQ83tSR0U0rjAfD6hkhMBmQ3VrBftAtSN7K4hDOSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:93:23:d4:78:56:49:6d:52:cf:c1:3e:29:81:a6:2d:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jul 24 08:00:26 2026 GMT
Not After : Jul 25 08:00:26 2026 GMT
Subject: CN=8311494a477f5ddd4c2d0b0dfd495d4a842244d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:af:66:a4:af:ac:1d:63:ed:e4:98:d8:26:c7:
c9:ae:d2:f4:34:12:c3:b3:e1:ed:70:7d:32:f8:ca:
4a:48:dc:23:94:11:ea:ba:ac:6f:9f:8a:1a:3b:6e:
62:56:9f:67:7a:07:43:76:93:37:ba:63:82:b1:76:
73:e7:d1:f3:41:10:c7:0a:d4:80:de:49:2d:47:62:
6d:62:54:75:bd:08:53:36:ce:e0:c4:f4:f2:5f:6f:
32:1c:0f:36:6b:33:d8:67:71:8f:24:7f:d5:db:2e:
77:f0:41:92:d8:76:88:90:1d:01:eb:ab:5e:b4:80:
87:03:d1:f3:90:b0:58:cc:ba:53:6f:6f:56:8b:3c:
e4:cf:87:f9:8a:b8:ba:03:1e:4a:3d:14:6d:eb:ff:
9f:17:a7:e0:42:a5:e2:3c:d6:18:23:77:7c:a1:1f:
3c:ca:ab:29:34:f1:b2:de:1d:f4:f1:08:e3:22:39:
69:d2:cc:21:a4:1f:9d:a0:0e:72:17:ce:44:af:7d:
b9:0b:07:4f:93:69:27:f4:0d:ce:36:cf:9e:2d:b2:
45:51:c3:6b:17:8a:39:4b:a5:98:4d:0d:84:c6:e2:
c9:32:7b:39:87:69:90:a5:f3:2a:06:f5:46:51:af:
75:33:12:db:fc:27:2d:ae:15:9a:2d:fa:74:f3:9b:
71:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:11:49:4A:47:7F:5D:DD:4C:2D:0B:0D:FD:49:5D:4A:84:22:44:D3
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:6f:59:61:84:ef:72:e8:e7:38:ca:92:6a:f0:94:9a:2f:8d:
59:c0:90:22:fa:dd:49:bb:f0:60:27:60:aa:a0:a4:8d:c1:ea:
c9:66:d6:65:11:dd:f7:43:8f:96:7f:46:b5:01:5b:af:67:a8:
f5:e4:0c:6b:89:ae:22:7d:a2:f4:93:65:32:b0:d3:d0:3c:d6:
fa:05:39:b5:bb:9d:45:bc:46:40:41:c8:d7:12:02:01:ba:f9:
ea:53:9d:89:a2:f4:7d:43:68:c9:67:2c:7c:f1:22:cc:1e:ff:
30:29:e2:0a:74:f3:f6:ee:06:73:de:c3:cb:ac:06:29:70:cb:
eb:06:35:47:4d:34:9a:97:30:1c:e4:34:05:4b:3f:b2:41:a6:
8b:d3:69:09:d6:94:dc:7b:2b:a7:4a:d5:83:4a:7d:e1:4f:9d:
16:1f:41:5f:e9:11:94:88:64:50:a2:f4:fa:e1:d2:13:6f:a0:
9a:40:60:2b:61:0f:f7:24:68:09:81:21:a2:50:34:50:48:96:
49:fd:61:7a:f8:84:20:e5:77:42:d3:0b:7b:3e:3f:c3:b9:e2:
60:0f:63:d3:18:2d:a1:41:57:09:1f:8a:81:68:11:4d:cd:79:
70:d6:7f:30:c9:07:d7:cd:c4:a8:29:fe:e6:7f:25:03:6c:96:
47:a4:53:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:50:19 2026 by rpki-client