Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
File: NNEMl2M2XzPU3hEJftXhmsm3qP8.mft (raw, json)
Hash identifier: om3qTP9RBiYLvKyGCPKXR8F/fFUc6Yss/L9pXvC9AIA=
Subject key identifier: 0D:12:79:D5:E2:CE:89:47:5F:69:70:85:A4:89:99:90:90:01:FF:CA
Authority key identifier: 34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
Certificate issuer: /CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Certificate serial: 01A0E96468B9CDCA80CE1CEF4B83E5975E80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
Manifest number: 0494
Signing time: Mon 28 Sep 2026 19:01:06 +0000
Manifest this update: Mon 28 Sep 2026 19:01:06 +0000
Manifest next update: Tue 29 Sep 2026 19:01:06 +0000
Files and hashes: 1: NNEMl2M2XzPU3hEJftXhmsm3qP8.crl (hash: IjqgKpbzMrYuLVn8G6sGzZMNC50P+eKvVgJ3VVBxjzo=)
2: WK0mu1qmieSlIr6yg5ax-_qSTA0.asa (hash: Lvp+VsX30yvL6oSGlFhMmUutaj24REfdYi4hraFh+yo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 14:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e9:64:68:b9:cd:ca:80:ce:1c:ef:4b:83:e5:97:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34d10c9763365f33d4de11097ed5e19ac9b7a8ff
Validity
Not Before: Sep 28 19:01:06 2026 GMT
Not After : Sep 29 19:01:06 2026 GMT
Subject: CN=0d1279d5e2ce89475f697085a48999909001ffca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e0:b4:b7:19:cc:95:88:fb:ce:c8:5f:b6:1d:
6a:36:db:f0:ad:86:c8:13:2c:17:e2:e2:25:f5:57:
32:f2:25:11:d0:a5:63:b8:2a:28:e6:e4:a3:1f:cc:
38:75:a7:6a:e9:5f:09:b4:c6:0b:57:1b:77:ad:82:
e2:ab:8c:cb:3a:a1:7b:c8:c7:0f:f3:46:43:2a:82:
14:50:36:2a:4b:ac:37:9f:90:24:5d:5d:dd:09:51:
cd:b8:a1:17:50:69:fa:84:65:8b:5f:1c:e3:e6:45:
21:70:44:98:da:c9:b0:72:30:ed:45:25:4a:bf:6f:
73:d9:13:a3:30:83:ee:a9:44:44:39:03:8e:59:d1:
27:9f:9a:c1:5c:d9:cc:7e:12:7b:eb:6a:e2:29:22:
a6:fc:d6:7d:8c:c9:66:2e:e1:7f:47:e0:64:4a:37:
0e:b5:e8:99:c8:34:58:aa:50:3f:0a:2b:74:77:85:
11:7f:2b:32:e7:8d:69:e9:f1:b6:39:45:cf:29:32:
95:da:8b:a1:f3:d9:fd:24:ce:f6:05:2c:09:24:5a:
02:23:10:d7:7f:f1:18:e4:03:21:d5:f0:ac:1f:10:
d7:76:34:71:54:3d:a3:2d:13:61:17:ef:ff:04:a8:
51:30:9f:9f:67:e8:91:b5:d5:ae:89:57:d8:b9:f3:
a4:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:12:79:D5:E2:CE:89:47:5F:69:70:85:A4:89:99:90:90:01:FF:CA
X509v3 Authority Key Identifier:
keyid:34:D1:0C:97:63:36:5F:33:D4:DE:11:09:7E:D5:E1:9A:C9:B7:A8:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NNEMl2M2XzPU3hEJftXhmsm3qP8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/57bcff-15be-4fd8-b491-7f8784e219e9/1/NNEMl2M2XzPU3hEJftXhmsm3qP8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9e:35:69:3d:cd:dc:ca:df:6a:66:b3:d0:77:19:7c:f6:fa:14:
7f:48:f3:98:b7:d4:6a:e5:c4:42:d4:f2:1d:2b:39:e3:f0:7c:
50:47:8d:c0:84:32:37:ee:84:c7:9d:fb:fb:8c:67:74:c7:a0:
9a:a5:45:93:53:6f:25:b2:15:13:33:d8:b7:06:a1:2f:8b:0a:
c0:e1:c7:aa:a9:2a:e6:bf:b5:01:63:6a:e0:f3:8a:6b:0d:2e:
42:42:d3:95:24:62:fa:60:5c:46:e9:d6:c6:57:1f:a5:b7:36:
ea:e3:63:c7:fd:a6:f4:8e:57:27:65:a3:81:03:72:f3:1f:55:
1c:dc:5a:f8:8d:3e:40:0b:e7:d4:5d:85:c3:c9:76:0b:b5:85:
76:83:7a:56:df:da:ab:01:12:f5:e9:9a:95:f4:2e:d8:e3:03:
b9:84:9b:7c:c3:a0:13:85:08:bf:4f:af:70:ca:55:60:53:83:
73:7a:50:b8:b6:35:d6:6c:0f:c8:67:6d:2c:ee:35:a0:fe:59:
54:78:76:99:e3:69:3b:54:f9:7b:69:8a:0d:d6:e3:81:a7:65:
f2:12:e1:0e:39:c1:88:e8:0c:82:cd:9c:ef:1e:2f:d5:bd:92:
da:c7:ed:de:60:9b:7f:a1:f9:60:0a:ae:48:e6:e3:c1:37:d9:
53:6c:11:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 22:48:01 2026 by rpki-client