Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: vP47IHL+gAoFyh7QxoT4hnLXLGxGXTnUQWKNYjVI78I=
Subject key identifier: 46:3A:61:E1:6B:E8:DB:3E:79:64:F1:83:4E:8C:E1:A4:15:31:B8:3C
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 01A0D9BB8A3ED98DFB633C1182AE86EE7A84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 1238
Signing time: Fri 25 Sep 2026 18:02:21 +0000
Manifest this update: Fri 25 Sep 2026 18:02:21 +0000
Manifest next update: Sat 26 Sep 2026 18:02:21 +0000
Files and hashes: 1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: v4rMWZ0CtIdMYg+2dv57xOGfZI5lrgvOO2gq7J+EUno=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:bb:8a:3e:d9:8d:fb:63:3c:11:82:ae:86:ee:7a:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Sep 25 18:02:21 2026 GMT
Not After : Sep 26 18:02:21 2026 GMT
Subject: CN=463a61e16be8db3e7964f1834e8ce1a41531b83c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d9:fa:cf:81:15:d7:d6:f6:3a:2c:54:74:01:
0c:4f:21:0c:61:ac:b8:40:4f:fe:ed:15:c9:68:6b:
37:b1:29:b9:cf:f6:f9:98:23:83:35:a8:2b:f9:71:
2a:20:91:53:20:c5:6d:a6:de:5d:f4:04:2a:2d:e1:
f4:e6:ed:2d:5d:0e:a7:3f:87:93:1c:91:d7:47:43:
43:7f:1c:0f:f5:e5:74:6f:31:6e:4c:40:d8:1c:c5:
d7:1d:73:77:cb:90:13:79:77:3d:ce:86:c5:59:ac:
f0:4a:da:f2:fb:16:88:aa:fc:00:b0:35:ce:8c:71:
94:39:f4:98:cd:a5:b6:54:54:29:8a:e8:e6:99:0a:
53:0e:76:4c:04:02:13:7c:9e:3f:36:4d:cd:45:eb:
2c:ea:92:ee:ba:f5:2f:76:72:79:1d:2c:74:a1:35:
59:d3:4c:2a:2d:60:a1:bc:fe:e8:b9:68:d8:eb:cb:
28:1f:07:46:0c:1c:f5:3e:92:3f:6d:9d:d1:ec:31:
71:d3:2e:9c:af:88:de:b8:8b:bb:8f:fa:49:ae:87:
d5:d2:16:5f:d0:a9:0e:ac:14:77:72:91:a3:d5:38:
e1:1b:b8:9c:1b:5b:3f:ad:4d:af:01:19:e2:d0:10:
47:af:62:7b:6a:45:fc:d2:d4:77:b1:5e:f7:57:3f:
d9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:3A:61:E1:6B:E8:DB:3E:79:64:F1:83:4E:8C:E1:A4:15:31:B8:3C
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:46:0b:c7:a3:ea:3f:ee:9e:72:24:9b:ea:af:58:93:4c:51:
88:c5:31:bd:0b:86:1c:c3:bf:c6:ba:34:b1:35:8c:db:f2:c6:
c0:50:ae:9e:ed:c2:77:e6:8b:96:44:ab:f7:bc:02:f9:0b:ff:
7d:99:60:13:46:d0:54:9c:bb:fa:ec:43:bc:e8:04:3f:d3:1d:
52:de:cb:fd:1f:2f:50:b9:15:9c:71:60:15:bd:3e:53:da:0e:
c5:df:16:05:42:45:a8:24:60:77:4e:ec:29:f5:db:3f:8a:2f:
b0:d7:fd:6f:4a:44:bd:7f:b5:ef:30:52:0d:56:26:34:10:29:
2f:d3:2b:b6:7d:ea:60:b1:45:e1:d4:bd:8e:38:55:8e:aa:b7:
e1:d5:aa:22:c8:f0:ad:87:75:d5:50:07:38:8b:90:e3:54:13:
9a:63:5d:1e:5f:61:da:ac:f9:bd:24:3e:3b:7e:fc:37:aa:08:
3f:60:a6:80:8a:59:f7:b7:b7:38:cf:b5:2d:7b:97:14:4f:0a:
9a:66:9f:60:f8:bf:cd:60:e2:c4:12:45:bd:ce:40:c1:60:47:
c8:a0:c8:36:c5:73:06:7b:e3:9b:88:4a:f1:7b:36:dd:dd:60:
ee:ec:9e:3d:a6:b0:2d:2b:96:81:b3:40:5b:a7:1f:c3:70:8d:
98:52:b1:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAaDZu4o+2Y37YzwRgq6G7nqEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmZTM0OTEwNDJlZjMxZGNjNmUwYWQ4ZTU1Y2JlMTQ5ZGQw
YzMxODIwHhcNMjYwOTI1MTgwMjIxWhcNMjYwOTI2MTgwMjIxWjAzMTEwLwYDVQQD
Eyg0NjNhNjFlMTZiZThkYjNlNzk2NGYxODM0ZThjZTFhNDE1MzFiODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69n6z4EV19b2OixUdAEMTyEMYay4
QE/+7RXJaGs3sSm5z/b5mCODNagr+XEqIJFTIMVtpt5d9AQqLeH05u0tXQ6nP4eT
HJHXR0NDfxwP9eV0bzFuTEDYHMXXHXN3y5ATeXc9zobFWazwStry+xaIqvwAsDXO
jHGUOfSYzaW2VFQpiujmmQpTDnZMBAITfJ4/Nk3NRess6pLuuvUvdnJ5HSx0oTVZ
00wqLWChvP7ouWjY68soHwdGDBz1PpI/bZ3R7DFx0y6cr4jeuIu7j/pJrofV0hZf
0KkOrBR3cpGj1TjhG7icG1s/rU2vARni0BBHr2J7akX80tR3sV73Vz/ZawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEY6YeFr6Ns+eWTxg06M4aQVMbg8MB8GA1UdIwQY
MBaAFG/jSRBC7zHcxuCtjlXL4UndDDGCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDIt
Yzc4YmQyMjhhOTFkLzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC9mODliZjAtM2Q2Zi00YjRkLWJmNDItYzc4YmQyMjhhOTFk
LzEvYi1OSkVFTHZNZHpHNEsyT1ZjdmhTZDBNTVlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC0YLx6Pq
P+6eciSb6q9Yk0xRiMUxvQuGHMO/xro0sTWM2/LGwFCunu3Cd+aLlkSr97wC+Qv/
fZlgE0bQVJy7+uxDvOgEP9MdUt7L/R8vULkVnHFgFb0+U9oOxd8WBUJFqCRgd07s
KfXbP4ovsNf9b0pEvX+17zBSDVYmNBApL9Mrtn3qYLFF4dS9jjhVjqq34dWqIsjw
rYd11VAHOIuQ41QTmmNdHl9h2qz5vSQ+O378N6oIP2CmgIpZ97e3OM+1LXuXFE8K
mmafYPi/zWDixBJFvc5AwWBHyKDINsVzBnvjm4hK8Xs23d1g7uyePaawLSuWgbNA
W6cfw3CNmFKxtA==
-----END CERTIFICATE-----
Generated at Sat Sep 26 02:57:51 2026 by rpki-client