Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: YIPzLvUJ6tAw146fEVgI5mIuKcQJhUunIKsJSmRzxHk=
Subject key identifier: 0F:BD:97:86:FE:47:F5:85:58:EC:C6:83:23:09:32:68:F8:80:93:2D
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019FA304B69427A03F468E2F1AB971F5739C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1290
Signing time: Mon 27 Jul 2026 10:00:22 +0000
Manifest this update: Mon 27 Jul 2026 10:00:22 +0000
Manifest next update: Tue 28 Jul 2026 10:00:22 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: QW6F0oFbQrBEJcGkhLzWe0E6EJOwjtJ2+zTljXckarg=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 10:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a3:04:b6:94:27:a0:3f:46:8e:2f:1a:b9:71:f5:73:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jul 27 10:00:22 2026 GMT
Not After : Jul 28 10:00:22 2026 GMT
Subject: CN=0fbd9786fe47f58558ecc68323093268f880932d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:5c:b2:cf:3a:16:ff:0e:c2:14:df:12:4d:a6:
55:e5:6d:c5:a6:76:ba:e3:b0:30:a7:32:75:f6:5c:
e8:f3:3d:de:54:7f:2a:bf:5f:fe:74:a0:61:cb:94:
f7:d8:5b:9e:0f:fa:29:3a:b0:34:ee:26:85:38:84:
25:68:71:6e:bf:32:cc:80:40:ce:37:2d:2c:b3:43:
5a:8f:19:4c:4f:91:e8:5a:38:bf:57:be:fb:59:8e:
50:52:1e:32:3f:c1:34:e2:48:d1:4d:c0:89:37:51:
58:9d:78:ac:45:3e:33:d8:57:10:0c:e1:ac:2b:e5:
0d:4c:d5:29:65:db:19:d7:a1:aa:87:11:49:82:ee:
96:bb:bd:42:25:30:fb:d7:82:ea:af:a7:b1:85:cc:
04:69:7d:b1:19:bd:8a:4f:5e:7b:8f:48:64:fa:db:
cc:f3:bb:08:c1:66:68:6d:fe:a5:a1:1a:89:c8:fb:
c5:49:d1:ff:e2:4b:08:64:11:2d:88:76:8e:84:a7:
21:70:16:55:70:b5:30:95:9c:74:2d:51:96:ed:6f:
8d:3b:11:cd:9f:6f:80:b2:1c:c3:69:16:c2:0c:0f:
ee:da:f7:d0:29:e1:bb:c6:cf:2f:32:20:6e:07:e4:
cf:e3:d8:5f:15:1d:a5:40:d1:e0:34:ac:46:25:1d:
ad:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:BD:97:86:FE:47:F5:85:58:EC:C6:83:23:09:32:68:F8:80:93:2D
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:b2:42:ca:2d:e4:0f:2d:4e:8b:4b:c1:d3:bc:6e:1c:b7:14:
f2:10:db:98:0b:b4:0b:57:d1:87:43:8e:37:e9:d5:4b:b7:68:
a8:7a:84:9c:b3:55:be:92:9a:e8:0f:06:07:2f:72:1f:04:bf:
ee:f3:8f:1e:d0:86:7d:d7:82:c4:69:7f:2e:f8:e7:32:7b:26:
31:15:96:19:2d:8c:2b:dd:3c:0c:a4:13:a4:f6:5d:19:49:71:
66:27:c0:43:c1:44:4c:6c:3d:24:15:39:f0:55:89:c8:f6:ad:
8d:76:ab:ea:b4:03:64:05:53:aa:b4:c9:a4:af:f0:85:5a:16:
69:9f:ec:f0:6c:f7:5a:73:f5:dc:9c:79:2e:76:a9:0a:fb:ae:
5a:88:c8:90:9e:bb:99:ac:19:b6:77:c5:f5:b0:6a:ae:5c:8e:
8e:3a:b9:6a:5b:34:da:8d:85:33:bc:12:d9:2c:66:42:cd:d5:
fd:c0:39:47:6f:f1:c5:3d:3f:26:81:ea:c3:f8:2a:ce:f8:9b:
c3:fd:10:9d:cf:b3:04:f7:e2:98:d8:27:a0:7f:19:7b:e0:2a:
a0:4d:f1:e9:8e:54:28:2d:f6:68:9c:49:a2:f1:44:8b:fe:ed:
65:9a:45:38:1d:68:40:8b:f7:eb:f2:68:2d:6c:07:5e:e1:c4:
80:3d:31:98
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ+jBLaUJ6A/Ro4vGrlx9XOcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNGQ4NmFmYjU5ZjFkOWRkMTZjMTEyNTAwOWI5OTgzODJl
MzZlZDMwHhcNMjYwNzI3MTAwMDIyWhcNMjYwNzI4MTAwMDIyWjAzMTEwLwYDVQQD
EygwZmJkOTc4NmZlNDdmNTg1NThlY2M2ODMyMzA5MzI2OGY4ODA5MzJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FyyzzoW/w7CFN8STaZV5W3Fpna6
47AwpzJ19lzo8z3eVH8qv1/+dKBhy5T32FueD/opOrA07iaFOIQlaHFuvzLMgEDO
Ny0ss0NajxlMT5HoWji/V777WY5QUh4yP8E04kjRTcCJN1FYnXisRT4z2FcQDOGs
K+UNTNUpZdsZ16GqhxFJgu6Wu71CJTD714Lqr6exhcwEaX2xGb2KT157j0hk+tvM
87sIwWZobf6loRqJyPvFSdH/4ksIZBEtiHaOhKchcBZVcLUwlZx0LVGW7W+NOxHN
n2+AshzDaRbCDA/u2vfQKeG7xs8vMiBuB+TP49hfFR2lQNHgNKxGJR2twQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA+9l4b+R/WFWOzGgyMJMmj4gJMtMB8GA1UdIwQY
MBaAFJxNhq+1nx2d0WwRJQCbmYOC427TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgt
ZjRmMDU2MWI3YTU3LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NmRjMjUtYjM4OS00MDI0LWJmMjgtZjRmMDU2MWI3YTU3
LzEvbkUyR3I3V2ZIWjNSYkJFbEFKdVpnNExqYnRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZLJCyi3k
Dy1Oi0vB07xuHLcU8hDbmAu0C1fRh0OON+nVS7doqHqEnLNVvpKa6A8GBy9yHwS/
7vOPHtCGfdeCxGl/LvjnMnsmMRWWGS2MK908DKQTpPZdGUlxZifAQ8FETGw9JBU5
8FWJyPatjXar6rQDZAVTqrTJpK/whVoWaZ/s8Gz3WnP13Jx5LnapCvuuWojIkJ67
mawZtnfF9bBqrlyOjjq5als02o2FM7wS2SxmQs3V/cA5R2/xxT0/JoHqw/gqzvib
w/0Qnc+zBPfimNgnoH8Ze+AqoE3x6Y5UKC32aJxJovFEi/7tZZpFOB1oQIv36/Jo
LWwHXuHEgD0xmA==
-----END CERTIFICATE-----
Generated at Mon Jul 27 16:27:45 2026 by rpki-client