Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: ZyL/bLTMqtx3FZFhOKIfU+8TW0nBwYdVf99PvpD60iM=
Subject key identifier: 3E:B5:D9:1B:4E:0B:6A:96:0E:2A:85:AD:5D:35:E6:0C:54:04:F8:35
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 01A08EA0920AA99EF8CAD7076C24B46855F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 130A
Signing time: Fri 11 Sep 2026 04:01:22 +0000
Manifest this update: Fri 11 Sep 2026 04:01:22 +0000
Manifest next update: Sat 12 Sep 2026 04:01:22 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: O4C17qg30HthxFzULBtrFG2Lr29qXaWmHJSs+vMIvyY=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8e:a0:92:0a:a9:9e:f8:ca:d7:07:6c:24:b4:68:55:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Sep 11 04:01:22 2026 GMT
Not After : Sep 12 04:01:22 2026 GMT
Subject: CN=3eb5d91b4e0b6a960e2a85ad5d35e60c5404f835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f0:32:14:95:a2:b2:b0:e2:bf:3e:5a:cb:10:
da:0a:a9:26:3d:59:39:04:d0:38:bb:18:8c:1a:ab:
be:f4:b5:a7:91:6d:70:ed:82:44:41:4e:54:16:82:
8b:4b:25:61:fb:db:e0:db:94:7c:14:f2:5d:62:97:
e7:9a:8a:5c:18:e2:a1:85:24:63:88:97:0f:cc:79:
18:17:16:3f:5f:56:f5:73:32:df:99:5b:1a:4e:f6:
5a:a4:1f:79:3b:07:6f:a2:4a:c9:fa:ed:77:b6:3f:
5d:ae:ac:99:ed:d5:30:fa:b1:62:a0:83:21:1c:de:
25:ae:b2:40:ba:c9:fa:44:15:b5:1c:7b:e4:c6:0e:
d9:ac:1f:f5:0a:8e:a4:77:a3:82:94:77:8e:b2:7d:
80:af:0a:c0:e0:73:72:2d:79:03:90:7d:24:8c:76:
3f:ca:a2:b8:c7:e9:6e:98:76:3b:fb:fb:f7:64:8c:
f9:7e:16:af:2a:cd:3c:11:e0:46:48:69:47:ac:ff:
06:12:00:b1:31:bf:9e:d5:62:43:82:be:17:41:bb:
81:21:20:6f:56:d7:6b:9a:82:91:92:e0:ce:f4:85:
3c:4b:0b:a4:c3:2b:bb:32:70:b3:64:09:39:29:67:
06:2c:38:38:d1:67:79:ca:41:ec:63:72:2a:c7:86:
c3:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B5:D9:1B:4E:0B:6A:96:0E:2A:85:AD:5D:35:E6:0C:54:04:F8:35
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:46:0d:19:b0:d0:80:7e:68:fd:18:f0:9b:69:e9:f3:0a:f8:
df:01:1d:af:15:39:22:30:c7:e9:38:87:34:2e:6c:d2:54:f8:
d4:20:cb:bf:40:dd:e5:15:0e:89:57:b9:50:5a:d1:97:49:a2:
1b:d4:f0:08:9f:f1:d2:83:a8:7c:d9:84:fe:14:e9:50:59:3c:
ad:1d:03:59:11:3f:f8:f2:ca:0c:dd:01:f5:46:49:e8:eb:7a:
a4:ba:15:32:9f:ef:bd:38:5b:46:eb:3f:35:4e:8e:f4:83:31:
bb:f5:a0:2d:50:2b:93:f7:82:65:33:31:d4:18:52:a3:31:69:
e8:c6:37:02:68:e0:09:b4:8a:c7:33:e4:7e:03:fe:a5:63:45:
2d:0f:76:35:da:ff:38:8c:3e:e9:c0:74:50:92:01:44:d4:dc:
4a:d0:32:86:26:d1:95:65:53:6c:e4:dd:f8:1d:68:76:1f:30:
38:5b:3d:90:6e:ae:c8:3e:7a:f2:4d:20:b6:ec:d5:67:54:b0:
b9:70:21:9c:b9:c2:74:43:e3:d8:68:fd:57:74:eb:52:2c:02:
06:4d:41:58:27:b3:ac:b2:68:54:50:ce:c8:cd:09:2b:a5:22:
12:ee:95:a7:6c:53:c1:a3:d9:8d:56:28:e1:85:64:99:d6:5b:
97:c7:5d:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 06:53:24 2026 by rpki-client