Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: edfqXKkJfF3mEeKbj3QNdVoQ169p1DI/rFDGrLOktbE=
Subject key identifier: 57:D6:82:83:FA:95:F7:B3:7B:2F:C5:67:50:1E:88:31:C3:F4:BE:62
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019D390A07E641CD1D89919E52682D788D3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1150
Signing time: Sun 29 Mar 2026 10:00:51 +0000
Manifest this update: Sun 29 Mar 2026 10:00:51 +0000
Manifest next update: Mon 30 Mar 2026 10:00:51 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: xueB7FbS2MNQ7iOgnU7jAAcsN4lu4urzHHbwKvdqwU8=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:07:e6:41:cd:1d:89:91:9e:52:68:2d:78:8d:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Mar 29 10:00:51 2026 GMT
Not After : Mar 30 10:00:51 2026 GMT
Subject: CN=57d68283fa95f7b37b2fc567501e8831c3f4be62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:af:a5:ec:99:e0:31:f9:15:2a:20:cf:a7:9f:
a0:58:c7:f0:b7:2f:13:7f:26:8e:c5:bd:9d:82:04:
e0:c8:06:aa:7d:14:b9:db:bd:a9:71:66:ca:29:56:
bf:b7:1a:c2:5b:49:de:6b:b0:7d:5f:92:a2:68:cd:
77:cf:4e:52:93:ba:6c:4b:03:3e:28:36:08:db:5a:
87:c8:9c:4c:61:75:62:e8:f2:7c:9f:0a:0d:63:96:
89:63:01:e0:6f:87:9f:1e:72:0b:fa:d3:67:b1:c5:
83:77:31:77:96:47:e8:cf:4c:b7:f3:23:2d:ff:26:
bb:ae:97:55:39:67:9d:2c:ad:47:8a:cb:cb:44:24:
98:84:62:4f:1f:03:b5:61:07:34:08:e1:87:b8:76:
d7:c7:07:50:37:c9:6d:65:8b:16:8d:fa:94:30:e1:
81:55:6c:17:4d:c3:29:04:26:0d:c1:64:84:fd:cb:
01:7d:58:93:4d:00:71:f9:91:47:6d:80:65:a4:58:
17:05:ae:35:e0:5d:5f:62:43:85:07:5d:0e:8b:25:
a7:db:53:de:b1:0e:fa:5e:60:34:16:eb:6e:b9:26:
19:61:ce:82:20:85:81:7e:12:d4:e2:ee:a5:e8:d1:
74:41:2e:82:e1:b1:26:0e:0d:f2:44:8e:53:23:da:
e9:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:D6:82:83:FA:95:F7:B3:7B:2F:C5:67:50:1E:88:31:C3:F4:BE:62
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:9d:13:51:08:0f:e7:6b:54:c4:1e:10:3e:dd:85:d3:32:7f:
e6:cf:75:cf:fe:c6:79:7a:d7:13:fb:9c:2b:a3:b6:01:33:5f:
fc:25:41:c5:dd:7f:b1:45:32:71:c8:8e:1b:5a:d4:fd:83:69:
c0:2f:73:3f:34:64:27:5b:76:44:d0:23:36:a9:e1:89:fc:4e:
42:6f:99:d4:18:75:cf:a7:f7:d7:33:7e:53:c7:cd:75:66:7d:
7b:33:cc:2a:90:27:5e:5c:11:e1:53:dd:e9:61:c2:73:f4:18:
ff:ea:86:74:c1:ba:5c:04:5f:be:77:b5:4b:bc:50:9f:a6:96:
e3:56:a0:12:3a:66:d8:88:95:c0:7c:96:ec:72:9f:06:bd:14:
37:90:af:2d:9e:e9:e5:fe:8c:4c:8c:e7:48:e9:f8:54:56:37:
e9:af:9f:8e:d5:62:e5:42:66:c3:10:c1:f6:a6:31:d6:e8:2a:
b4:d9:ea:72:16:d0:f3:f6:82:70:55:41:0e:af:ab:50:e6:57:
ad:de:4a:65:76:a9:bd:d5:88:76:e0:49:4a:f1:59:d7:c9:ff:
da:61:87:d8:f0:8a:29:b9:e8:a8:ca:f4:08:a6:43:78:7e:83:
9e:6b:5a:4c:c9:b7:3e:ac:9c:7f:c7:ee:72:b3:89:84:52:37:
91:bd:55:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ05CgfmQc0diZGeUmgteI07MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjYwMzI5MTAwMDUxWhcNMjYwMzMwMTAwMDUxWjAzMTEwLwYDVQQD
Eyg1N2Q2ODI4M2ZhOTVmN2IzN2IyZmM1Njc1MDFlODgzMWMzZjRiZTYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwq+l7JngMfkVKiDPp5+gWMfwty8T
fyaOxb2dggTgyAaqfRS5272pcWbKKVa/txrCW0nea7B9X5KiaM13z05Sk7psSwM+
KDYI21qHyJxMYXVi6PJ8nwoNY5aJYwHgb4efHnIL+tNnscWDdzF3lkfoz0y38yMt
/ya7rpdVOWedLK1HisvLRCSYhGJPHwO1YQc0COGHuHbXxwdQN8ltZYsWjfqUMOGB
VWwXTcMpBCYNwWSE/csBfViTTQBx+ZFHbYBlpFgXBa414F1fYkOFB10OiyWn21Pe
sQ76XmA0FutuuSYZYc6CIIWBfhLU4u6l6NF0QS6C4bEmDg3yRI5TI9rpNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFfWgoP6lfezey/FZ1AeiDHD9L5iMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIJ0TUQgP
52tUxB4QPt2F0zJ/5s91z/7GeXrXE/ucK6O2ATNf/CVBxd1/sUUycciOG1rU/YNp
wC9zPzRkJ1t2RNAjNqnhifxOQm+Z1Bh1z6f31zN+U8fNdWZ9ezPMKpAnXlwR4VPd
6WHCc/QY/+qGdMG6XARfvne1S7xQn6aW41agEjpm2IiVwHyW7HKfBr0UN5CvLZ7p
5f6MTIznSOn4VFY36a+fjtVi5UJmwxDB9qYx1ugqtNnqchbQ8/aCcFVBDq+rUOZX
rd5KZXapvdWIduBJSvFZ18n/2mGH2PCKKbnoqMr0CKZDeH6DnmtaTMm3Pqycf8fu
crOJhFI3kb1V+w==
-----END CERTIFICATE-----
Generated at Sun Mar 29 12:53:07 2026 by rpki-client