Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: 8LX3hAE9kGx94WmV6DeACwLAdauRDwa2erphJPp/sDY=
Subject key identifier: 07:54:5D:A7:F8:0C:BA:F4:60:BF:05:67:41:8F:57:D5:2A:7B:7C:31
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 019D39414C434C7053E63ACBE4E494B2BFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 02AB
Signing time: Sun 29 Mar 2026 11:01:13 +0000
Manifest this update: Sun 29 Mar 2026 11:01:13 +0000
Manifest next update: Mon 30 Mar 2026 11:01:13 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: ZynjqOC8YB4MEHvLDKWzrEcYWZEVK9XX6VWvwhewi/E=)
2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:41:4c:43:4c:70:53:e6:3a:cb:e4:e4:94:b2:bf:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Mar 29 11:01:13 2026 GMT
Not After : Mar 30 11:01:13 2026 GMT
Subject: CN=07545da7f80cbaf460bf0567418f57d52a7b7c31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:2a:11:f2:62:0a:a2:92:25:5f:4a:c8:bc:93:
28:b2:d2:7f:f2:c8:f4:5b:18:9c:08:21:3f:84:df:
6d:f4:c2:f0:cd:48:74:a2:05:4a:73:bf:5c:9e:30:
b9:19:2a:9f:12:5b:b0:38:89:70:0f:5d:0e:e7:0e:
19:c5:5b:74:f4:0a:6f:30:5f:d9:81:b6:ee:67:2c:
0e:02:78:e2:68:38:3e:2a:00:d4:6c:4c:2e:da:e4:
d7:c4:8f:85:60:82:c0:35:90:65:a3:01:d3:7e:0f:
d5:2c:6e:36:60:21:bf:71:6f:51:2e:12:61:0a:bd:
be:db:e4:3d:9b:8d:a4:b7:53:38:72:73:2e:c0:6c:
de:65:55:43:5a:47:5e:dc:7c:c1:60:81:a2:38:65:
cb:ff:2f:d9:d1:fd:7c:46:c7:17:15:eb:5b:69:35:
5d:12:e9:e8:6e:d0:8a:5a:19:d0:85:84:48:26:b2:
12:52:5a:e4:ce:41:75:eb:66:de:76:2a:b8:bc:a8:
30:1f:a3:7f:a3:9e:00:a8:2e:59:4f:46:7f:64:b1:
c8:78:ad:61:bb:69:29:f7:fe:10:0e:1b:c3:a6:e4:
57:3d:01:0a:db:68:3c:49:93:05:78:15:d2:da:af:
16:ef:2e:52:6b:d8:ae:4b:ad:8c:d2:b6:84:4b:3b:
0c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:54:5D:A7:F8:0C:BA:F4:60:BF:05:67:41:8F:57:D5:2A:7B:7C:31
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:59:b3:b2:3d:ba:71:74:62:af:07:8d:c2:1d:dc:05:a5:8d:
7d:8c:bd:a7:75:9b:14:84:da:75:dd:a9:05:c0:fd:77:ad:ca:
4d:e5:bc:aa:47:5b:59:7b:42:a3:e7:d6:71:75:c2:bd:43:e7:
3d:17:df:dc:0b:f6:6e:49:d4:7d:bc:51:df:f2:37:19:a3:ae:
f1:e0:de:30:01:27:f1:0b:d9:ed:04:b6:df:08:99:6f:bc:2f:
51:9a:78:44:e8:c9:72:fe:e1:af:f8:af:4b:41:22:f8:d8:57:
66:0c:56:a2:20:6c:4f:31:07:29:b2:d0:f3:03:09:0a:42:52:
41:b1:45:f4:cb:3f:b6:06:f9:f0:52:71:a8:47:2e:59:55:10:
67:3a:d9:01:d0:85:d2:8b:20:93:0f:35:b8:27:cf:7a:50:fb:
9c:de:fb:e4:28:e1:3d:22:02:b5:d2:87:d4:a5:45:91:e3:a7:
35:94:f7:6b:fa:2e:7f:71:56:27:c7:ba:ee:8c:d2:86:45:6c:
55:2c:37:ec:6f:07:87:65:64:1d:c3:6a:ea:a1:ee:73:2a:4f:
1c:dc:86:2e:42:ea:bc:34:78:64:a7:9c:de:c7:7a:9e:bd:ff:
c4:c6:b6:57:eb:1c:ab:c4:a9:d5:f0:c6:12:c4:f9:b9:9a:a6:
42:de:fa:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:45:12 2026 by rpki-client