Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: 4rRLXKeKzQxi4BKSj5U44NFOpRObkdx0G4kkxCm8W4E=
Subject key identifier: 0A:EE:82:9F:17:C1:2F:FD:47:2B:C6:F0:9C:3D:B4:7E:15:76:C9:FB
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 01A17DAA1B5CE2CAEE9F65C097C0940A2363
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1A58
Signing time: Tue 27 Oct 2026 14:01:02 +0000
Manifest this update: Tue 27 Oct 2026 14:01:02 +0000
Manifest next update: Wed 28 Oct 2026 14:01:02 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: OgfB1irqci8/xy0wGrFYmqQA9Jqj0k5gSkm/xPnpbjs=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 13:57:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:7d:aa:1b:5c:e2:ca:ee:9f:65:c0:97:c0:94:0a:23:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Oct 27 14:01:02 2026 GMT
Not After : Oct 28 14:01:02 2026 GMT
Subject: CN=0aee829f17c12ffd472bc6f09c3db47e1576c9fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:37:78:06:e7:27:5d:ed:dc:d4:16:b6:2b:9f:
43:65:97:21:06:73:45:e8:46:2e:76:2d:ee:1d:9c:
c7:db:c0:ca:a1:98:a8:68:da:8f:b0:c2:a9:28:8f:
2d:ba:60:a1:2d:e3:08:a5:f5:42:7a:13:e2:de:cf:
01:55:28:32:91:88:9c:be:35:6f:a4:16:d1:1c:71:
a9:bb:b2:ad:56:42:5d:6b:ae:21:e1:ca:0f:56:d6:
12:c6:29:9e:bc:fc:83:55:40:11:6a:f3:49:06:83:
88:43:74:15:8f:36:1c:48:89:0b:21:fe:3d:4b:a7:
3d:61:d6:37:9c:43:23:e3:23:20:70:2b:bb:8b:ea:
11:84:bc:01:9c:20:96:2d:ec:92:b3:47:9a:d9:99:
da:6c:8d:55:9f:66:76:f3:51:fd:e5:57:34:53:38:
8d:81:e9:2b:1a:79:7e:7c:44:9b:74:e3:18:b7:ac:
c8:65:cb:45:44:94:d5:30:d8:8f:7f:3f:76:60:47:
dd:02:90:3f:fd:a3:ce:0b:9d:1b:a8:1e:6d:b2:bf:
0d:d0:e7:bb:10:b5:11:30:76:62:15:c0:73:80:30:
e7:5b:85:15:ab:f4:40:15:19:7d:50:a4:e6:67:1d:
58:d6:88:bb:9b:25:02:1a:0b:00:0e:05:47:26:66:
9c:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:EE:82:9F:17:C1:2F:FD:47:2B:C6:F0:9C:3D:B4:7E:15:76:C9:FB
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:b8:31:10:f0:7e:f1:6e:64:00:6f:34:3c:3b:39:78:e0:87:
41:c7:46:6a:7c:99:b4:74:b1:b2:39:56:aa:70:ee:42:2e:04:
5c:e1:94:a9:39:69:fe:c2:8d:a6:cb:af:2e:e3:42:79:f1:c9:
0f:2d:96:ec:93:9b:cf:29:39:d1:5a:a5:51:2f:2d:d4:75:7e:
cc:1a:1e:c1:19:d7:a5:81:2e:5d:ce:ae:a4:97:9c:9e:2c:da:
2f:1d:1d:6b:44:58:25:5e:c6:96:ed:ba:75:de:4e:ad:39:13:
ee:4a:78:22:8a:65:a1:56:aa:78:12:40:57:60:64:6e:a5:76:
71:25:c9:24:30:03:a0:99:51:78:05:52:7b:7d:e2:b8:f2:20:
e6:8a:bf:74:04:86:6e:5d:90:4c:d6:f6:79:bd:3e:df:d4:c4:
75:a0:a3:49:1b:1f:c3:1c:7a:1b:cb:6b:1d:9b:19:44:cf:f3:
95:70:3b:ac:cd:dd:aa:18:1f:62:71:3d:7e:3b:3e:26:38:ef:
8a:c9:b9:0b:2c:34:85:44:a5:43:86:3e:98:c0:c8:22:de:53:
9e:e3:59:30:92:ef:a7:7c:a8:c7:a0:28:b8:4b:2f:70:7c:12:
cc:9f:5e:06:10:41:56:92:a3:79:e5:01:40:59:3c:18:7b:bf:
39:1c:c7:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 17:44:03 2026 by rpki-client