Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: jK/5vN/7MtsL26ka6IItsQul8go/rNShJk+lWB0Y2fw=
Subject key identifier: 04:BB:63:F8:1E:7B:14:BB:5D:75:D6:E5:8B:A9:A7:19:D2:1E:BF:0C
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 019F1265362E6BD265C5378B177361905B97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 03A0
Signing time: Mon 29 Jun 2026 08:00:50 +0000
Manifest this update: Mon 29 Jun 2026 08:00:50 +0000
Manifest next update: Tue 30 Jun 2026 08:00:50 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: luR+Xb0TlClKkMCCFeOvqfObCyH0kiGOOAbDYzC94Tc=)
2: _ypyg9Q0sLjMtZaOy7pLrLoXqrs.asa (hash: cs6IIPhJcAGLMc1/88+5xffxucA9bdvOQN2oaDdE+H8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:65:36:2e:6b:d2:65:c5:37:8b:17:73:61:90:5b:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Jun 29 08:00:50 2026 GMT
Not After : Jun 30 08:00:50 2026 GMT
Subject: CN=04bb63f81e7b14bb5d75d6e58ba9a719d21ebf0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:78:4c:df:25:79:15:14:fa:64:5c:8c:62:17:
e1:56:99:16:f4:a3:14:f6:ba:dc:0e:a4:f2:8d:3c:
cd:1b:38:a1:23:91:91:aa:89:73:17:37:c1:dd:75:
e0:93:6e:b3:c9:ac:da:2b:13:81:6b:02:50:82:d1:
55:76:a6:7f:7a:87:7c:5c:54:98:c6:51:4e:32:ee:
0c:37:67:07:ef:4d:d4:69:81:40:25:19:b1:0c:c2:
8e:3f:f4:62:b1:cc:95:53:47:6a:cc:cb:9f:65:33:
85:e4:36:34:2a:79:5d:f5:c6:f6:d0:63:ad:c2:47:
b9:fd:ae:31:36:04:cd:9b:22:60:c2:61:2c:35:1e:
b0:b9:3d:b7:4f:e7:0f:57:4f:d7:9b:e7:a1:3b:ee:
c6:d3:10:92:8f:b0:33:1b:f0:56:9e:46:fb:be:84:
2b:21:b7:4a:5a:a3:b0:cf:a3:f5:fd:12:d5:ba:e3:
66:64:ab:84:fc:7b:9c:fa:11:83:d8:46:d8:8d:58:
60:43:76:d6:0f:aa:08:11:c5:70:e2:31:66:07:67:
d0:b1:60:2c:a8:79:09:2f:89:15:37:c6:28:72:67:
1a:99:80:c6:7f:33:37:50:b7:03:13:f7:b1:9d:23:
89:76:2e:eb:b1:c4:12:af:92:c5:a0:ff:d4:4c:50:
5d:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:BB:63:F8:1E:7B:14:BB:5D:75:D6:E5:8B:A9:A7:19:D2:1E:BF:0C
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:50:22:01:f4:d4:de:0e:10:0d:58:a9:24:01:a8:e1:05:a2:
ff:72:d1:71:51:cf:24:a1:fd:bc:6f:6c:1a:bc:f4:7f:dd:44:
e0:78:b5:cc:4f:52:a0:05:d9:81:5b:9b:47:8e:17:dc:50:e6:
7c:8b:ce:72:a5:ad:bc:fa:d9:a5:69:70:20:13:a6:ce:ff:86:
6b:af:e9:d2:85:d4:40:05:0a:dc:91:21:55:3d:f0:17:dc:b1:
18:11:e7:e5:60:ff:cf:80:c2:e7:16:7d:c7:e2:12:ca:76:f3:
87:39:8d:92:f1:b1:a3:64:d4:6c:bc:bf:71:4b:46:8b:06:ad:
41:64:44:25:ad:e6:58:b9:28:61:85:05:de:f4:ef:a9:5f:23:
73:7b:f0:8e:46:4e:5d:9b:fd:85:5f:e7:e6:36:3b:7b:85:48:
1b:2b:f4:b7:5c:88:44:1a:28:af:bc:1f:00:f8:4a:06:5a:94:
73:d3:c4:46:7e:ee:1d:c3:6e:13:5a:0a:3d:7d:1b:ca:c2:c2:
ec:ef:09:9d:10:a2:41:26:9c:0c:68:01:39:03:9f:8e:9e:b7:
3f:7f:a6:f6:6b:9e:b0:c7:7d:01:53:cd:82:29:d3:22:04:63:
a7:df:50:98:88:92:d7:9c:7b:b4:73:54:d7:23:29:b6:a2:24:
d0:e1:37:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 10:40:34 2026 by rpki-client