Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
File: _NenIe2kWevfmOAp-HyQqYDoHZQ.mft (raw, json)
Hash identifier: st6N4c+dhMhtT5c/FpCX/iHVD3cxax2MzzUM0paOnSA=
Subject key identifier: 2B:7A:7B:D8:B5:69:F0:B0:57:50:17:E7:45:A2:2B:99:69:03:3F:E4
Authority key identifier: FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
Certificate issuer: /CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Certificate serial: 01A1159851EC79A353C4CF5F59D8ADF703F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
Manifest number: 1A8F
Signing time: Wed 07 Oct 2026 09:01:06 +0000
Manifest this update: Wed 07 Oct 2026 09:01:06 +0000
Manifest next update: Thu 08 Oct 2026 09:01:06 +0000
Files and hashes: 1: JGC3hOQ65l3IVZSex1MpcfbZiyA.roa (hash: QObUgpT6rtusfHIb4HhFNGnIlZcsd+4RSYzLE+p//tY=)
2: _NenIe2kWevfmOAp-HyQqYDoHZQ.crl (hash: QaZA7cvyfx6jxzhYqCF9lc1eoUgee2QH3qjzLFPHlDA=)
3: lc9W2wBKoYqSI9KEszj4k6MVn6o.roa (hash: saKepJ0hHzAxA4OvfTff87GabrL2VL5zc0ZTtwa7RP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 09:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:98:51:ec:79:a3:53:c4:cf:5f:59:d8:ad:f7:03:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fcd7a721eda459ebdf98e029f87c90a980e81d94
Validity
Not Before: Oct 7 09:01:06 2026 GMT
Not After : Oct 8 09:01:06 2026 GMT
Subject: CN=2b7a7bd8b569f0b0575017e745a22b9969033fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dd:86:a1:2b:5a:67:6d:bb:b5:44:61:2e:a6:
c1:6b:30:e3:f6:d6:b6:c6:54:75:db:4c:f2:69:bf:
d3:0d:c8:a2:f3:90:ad:30:8d:ce:56:27:a7:33:d0:
2a:59:55:49:2a:bc:05:86:6f:79:1c:c6:33:e0:92:
b4:bf:89:34:97:ff:e5:fc:d1:35:66:6c:35:fb:f9:
65:da:e2:ab:32:73:e1:c7:e2:fd:5d:35:8f:21:af:
11:8e:7a:62:eb:89:d4:4e:5e:58:d5:35:ed:6a:85:
18:3f:9a:9e:04:2a:15:ea:bb:86:a8:36:ad:20:0a:
36:a8:3f:89:43:43:b8:11:a5:f8:52:0d:ee:0f:47:
24:97:26:cd:68:1d:1b:d7:9a:5f:67:2e:45:92:ff:
09:cc:1b:71:ca:a7:bc:56:85:cb:34:fd:a3:ae:a7:
cc:99:56:ef:19:ca:7c:6d:04:44:98:b5:34:c0:59:
99:5e:49:46:34:c5:24:13:f4:45:26:e9:44:6f:09:
19:c2:8f:7c:84:6c:6b:c3:48:55:43:ee:d0:18:eb:
b5:23:86:ab:70:cd:e0:3a:6d:a9:a4:0b:e9:0a:6c:
32:d3:f7:29:4b:eb:f8:a9:2e:bf:d3:a2:5a:ad:53:
c7:19:78:6e:ab:14:47:9d:59:38:d7:3c:d5:a9:ba:
94:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:7A:7B:D8:B5:69:F0:B0:57:50:17:E7:45:A2:2B:99:69:03:3F:E4
X509v3 Authority Key Identifier:
keyid:FC:D7:A7:21:ED:A4:59:EB:DF:98:E0:29:F8:7C:90:A9:80:E8:1D:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_NenIe2kWevfmOAp-HyQqYDoHZQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/cf4ab4-e914-40e1-82df-14dc7ec0495d/1/_NenIe2kWevfmOAp-HyQqYDoHZQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:e4:4b:fd:4a:9c:ae:ee:9a:22:9c:7a:89:62:f6:d2:52:bf:
58:fa:c1:45:78:b0:cf:e2:03:fd:82:9f:b6:49:e5:a2:31:f4:
df:80:58:0d:34:78:8e:8c:fb:8e:52:1a:77:af:21:e6:97:49:
cc:a6:c7:fc:67:0c:12:c5:7e:9b:bb:bd:a9:62:ff:5e:20:af:
82:27:40:c4:8f:2e:4b:61:54:20:51:68:c5:fb:8c:21:bb:e1:
f3:a3:0c:73:be:88:7d:d2:b2:40:0b:b2:32:78:34:7d:10:46:
51:cc:ea:a0:1d:23:68:6a:e7:1d:82:70:ae:16:86:e4:f8:97:
06:bf:80:dc:36:e3:87:6c:e9:a0:d4:9d:ba:8e:bc:d4:9f:61:
a8:20:bb:26:ed:2c:ad:3c:53:fc:69:d9:82:bf:e0:dd:2a:b4:
c6:49:67:7f:08:ae:01:6c:35:b7:d7:7f:f7:6a:eb:af:ee:36:
71:87:93:be:8f:fa:98:1c:37:f5:38:76:8a:0e:04:3b:73:5c:
44:f2:a1:15:96:83:fd:34:cf:7d:e6:f5:ca:fa:15:d6:6d:bc:
b4:dc:84:07:8b:e1:6b:fe:2e:78:56:37:15:b7:9e:41:14:f6:
c0:2b:e5:ae:0d:d8:dd:12:3f:0f:4c:78:d0:25:82:7a:a3:86:
78:0e:8e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:15:27 2026 by rpki-client