Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
File: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft (raw, json)
Hash identifier: TpePoVNZ5ll4GrCzuEf7RqMqGVNSSm11onp5+Fb91nU=
Subject key identifier: A0:BF:99:5B:04:35:12:EE:73:58:D9:0C:77:D3:D6:3B:9A:C2:92:6C
Authority key identifier: 9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
Certificate issuer: /CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Certificate serial: 019EB9584DEC2315C0C059359DCEB28A4963
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
Manifest number: 1217
Signing time: Fri 12 Jun 2026 01:00:32 +0000
Manifest this update: Fri 12 Jun 2026 01:00:32 +0000
Manifest next update: Sat 13 Jun 2026 01:00:32 +0000
Files and hashes: 1: nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl (hash: Bx0Q3CeoOqNLLv3AP7VvUEEAr2QOZTTS5hTRzmrWZ9U=)
2: vwfZCtFuWehcEgyRDVAHYKDEtwI.roa (hash: Sgdlru0nop1Xjq6jvSjHsB7R8K2ZeWume4Iu0PS/9RU=)
3: zl8R-189TzEnYGCKXzH4pqn-lWw.roa (hash: 7wMTfy+bMTzl4FSQjUUEY+RswNNysqtgZ4eYejStkZo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 22:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b9:58:4d:ec:23:15:c0:c0:59:35:9d:ce:b2:8a:49:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c4d86afb59f1d9dd16c1125009b998382e36ed3
Validity
Not Before: Jun 12 01:00:32 2026 GMT
Not After : Jun 13 01:00:32 2026 GMT
Subject: CN=a0bf995b043512ee7358d90c77d3d63b9ac2926c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:32:20:f0:f7:32:1f:e8:b9:6e:16:43:38:8b:
6e:ba:9d:53:20:f8:da:32:4a:c0:9a:a3:9a:58:1d:
5e:2c:91:a1:f9:ea:4b:0c:10:5d:9b:8a:3b:41:c2:
6c:7f:ed:a4:fa:7c:87:e5:a6:f7:13:79:e8:3a:ab:
8d:87:b8:6c:15:4f:65:ef:77:d8:80:6a:e3:ab:7b:
d0:68:1e:38:df:92:89:8d:7b:07:6f:a5:80:2f:70:
5c:79:1b:b8:9c:84:36:5f:64:8b:90:21:b9:d8:5a:
9b:3f:94:6c:ae:20:95:4f:39:df:bb:5b:89:e9:ae:
f4:5a:14:f6:07:a3:70:47:17:3a:6a:80:ba:4c:82:
02:67:9e:b7:b9:16:20:fe:1f:a1:aa:bf:4d:58:50:
f4:f8:8a:2c:00:fb:26:26:51:13:98:ef:b4:11:cb:
ef:01:63:6f:2f:06:d6:d2:6a:bc:53:0d:38:00:81:
5f:2b:8b:39:f4:e2:7e:ec:d6:62:bd:ea:8c:57:d2:
a6:38:e3:c1:36:f2:05:f8:de:0d:6c:34:17:10:d3:
88:6d:3f:be:6d:58:2e:bc:49:ce:d7:5c:05:e3:41:
5c:74:f8:29:7b:aa:d7:26:33:dd:ea:36:53:a7:39:
cc:ec:61:7b:f2:94:21:a1:de:7e:c4:4f:e0:e7:3a:
3a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:BF:99:5B:04:35:12:EE:73:58:D9:0C:77:D3:D6:3B:9A:C2:92:6C
X509v3 Authority Key Identifier:
keyid:9C:4D:86:AF:B5:9F:1D:9D:D1:6C:11:25:00:9B:99:83:82:E3:6E:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/76dc25-b389-4024-bf28-f4f0561b7a57/1/nE2Gr7WfHZ3RbBElAJuZg4LjbtM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:49:80:8a:ac:8a:45:d7:50:d1:1d:8d:86:eb:d4:3f:18:ab:
97:67:eb:fe:dd:d2:65:0f:6b:15:be:2a:43:93:f8:64:80:5a:
9e:6f:d2:10:c1:9d:72:5e:d8:30:67:be:96:54:1a:2d:1a:ef:
a2:80:73:79:32:b3:e5:22:3d:59:00:b0:a8:88:cb:3c:11:4e:
85:85:9d:5d:09:48:eb:a7:07:8f:7b:d4:cb:dd:a9:dc:6e:1a:
a5:c8:0d:c0:ad:42:0f:9b:ef:11:1d:ec:6e:96:75:d9:13:72:
ba:17:2a:14:fb:ea:17:88:d4:cb:39:a9:1d:f0:80:b6:3d:65:
49:a7:66:cc:e3:86:1e:4c:96:12:00:d1:11:c9:2b:2d:1e:e9:
74:af:85:66:90:18:00:92:32:83:83:26:af:06:af:c3:ea:61:
68:1f:03:9c:35:31:f6:de:ed:b5:ff:44:ef:b8:f6:1c:2b:76:
49:a9:ee:d4:18:ce:7d:19:33:70:9e:0a:fa:e6:0e:db:42:fa:
73:bc:79:a7:43:80:09:40:fa:03:99:7c:a4:15:84:57:b9:8f:
aa:32:4c:df:82:69:24:31:d5:bf:71:3a:0b:c6:25:a2:07:cd:
3f:39:93:8b:ea:2d:32:28:80:45:56:94:5f:66:a2:52:ed:e9:
1a:03:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 07:07:11 2026 by rpki-client