
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: 0HOGfP25kGao5B/ZLOAB7CF8wUyDmi0+7RrDRTNgADo=
Subject key identifier: A4:B7:50:8F:45:7C:04:7A:26:D5:61:0E:6D:A1:C4:6F:E2:56:1D:23
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 019E1EA2D71117283F015800171F103EFD92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 10CE
Signing time: Wed 13 May 2026 00:00:48 +0000
Manifest this update: Wed 13 May 2026 00:00:48 +0000
Manifest next update: Thu 14 May 2026 00:00:48 +0000
Files and hashes: 1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: X82HFHqnSV53GRd1iMFwhc03ludU3CQp6g+w3h0/YM4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 14 May 2026 00:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1e:a2:d7:11:17:28:3f:01:58:00:17:1f:10:3e:fd:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: May 13 00:00:48 2026 GMT
Not After : May 14 00:00:48 2026 GMT
Subject: CN=a4b7508f457c047a26d5610e6da1c46fe2561d23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:fa:82:8a:ed:0e:06:ca:f1:f0:dc:15:83:f0:
37:80:df:b6:06:0e:e5:39:98:ca:3d:df:b5:8f:56:
79:fc:80:ef:ff:0c:b0:5a:11:94:fc:ef:b7:db:bf:
22:31:1e:28:6e:bd:27:1c:3e:16:67:b0:d2:39:08:
09:bc:31:97:2e:77:e6:bf:7c:fe:41:ea:52:fd:ec:
d5:c1:db:6d:df:1c:90:4c:30:24:68:24:b2:d5:7c:
a7:a6:2b:0a:61:f1:47:2e:f5:4a:00:a4:2e:73:7e:
91:0b:42:d6:a9:c3:e9:05:c4:62:0e:d7:31:68:c7:
a5:70:54:fb:03:1c:fb:01:ab:f6:d1:00:17:c7:4b:
74:d9:41:73:25:2d:ee:00:a0:9d:57:b0:e2:a3:1b:
73:51:e4:85:54:8c:70:60:a2:4f:ed:b3:b4:5e:49:
71:02:d5:80:7d:8c:e6:00:7a:d9:42:93:1a:5c:bc:
11:29:0c:a5:17:0e:7b:2b:0a:cf:de:2a:39:e6:1c:
f6:80:96:a0:55:b4:d4:ea:ab:11:9d:67:62:64:5f:
4c:ac:d7:9d:c6:87:d5:43:67:b2:e1:b9:d7:ab:14:
05:7a:a0:da:62:69:54:45:7f:c3:78:11:83:e4:ed:
a5:7e:dd:6a:0c:fa:43:80:43:dc:79:ba:e7:22:40:
f8:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:B7:50:8F:45:7C:04:7A:26:D5:61:0E:6D:A1:C4:6F:E2:56:1D:23
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:ef:70:fb:d4:33:00:f0:b3:73:12:5b:f2:90:c6:bf:e7:ec:
f1:d7:0b:0b:a4:7f:61:a2:fb:e2:2d:0c:be:da:ca:4d:44:6f:
65:44:c7:0b:0b:4e:98:0a:5a:06:f5:cb:f9:12:a0:d4:78:0d:
0b:20:52:8b:26:9e:9b:14:f3:01:12:cd:6a:c9:2f:8b:1a:98:
00:81:13:8a:00:a9:dd:d7:8f:1f:ae:80:46:3c:06:3a:ba:1f:
69:ca:3c:ec:25:11:0a:71:de:d9:ca:d6:4f:66:10:93:90:73:
91:af:78:f7:90:e3:ae:ee:3e:40:a7:44:34:9e:fa:aa:0d:c9:
6b:2d:b8:29:67:ea:8e:ed:49:09:77:be:f8:d6:3c:6a:64:65:
f0:4c:d0:35:01:2c:50:89:dd:4a:28:c9:d9:1c:cf:52:a0:94:
9e:8c:5d:4e:bf:83:f6:55:33:11:9b:d1:89:ec:a5:94:90:ed:
0c:0e:23:ed:45:1f:b8:90:22:4c:b3:f2:56:33:80:1b:72:bf:
9a:88:80:ca:d7:32:25:35:df:49:f0:b3:02:c6:0f:ab:38:27:
49:48:2b:2c:7c:63:7c:0e:1c:61:7e:21:1d:06:da:08:1f:ad:
52:7b:bf:41:da:c5:5a:ca:19:1f:25:39:21:50:bb:9f:c1:23:
bd:ea:ef:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:13:28 2026 by rpki-client