
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: WsOwBiEkO0UYz7lFmfmJo7C7CAgTaS2PIepavN3iTf4=
Subject key identifier: E0:24:E8:F1:97:0F:69:B3:FA:77:8A:41:E1:8C:E9:FF:33:9B:A5:0A
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019EA977D57B5A39BB960B803395DC9DB46E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 18E1
Signing time: Mon 08 Jun 2026 23:01:03 +0000
Manifest this update: Mon 08 Jun 2026 23:01:03 +0000
Manifest next update: Tue 09 Jun 2026 23:01:03 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: qoQpHh1yHHyybdmgqyGOMN5ELZfzksTv4XhwrnvYQbs=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Jun 2026 19:19:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a9:77:d5:7b:5a:39:bb:96:0b:80:33:95:dc:9d:b4:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Jun 8 23:01:03 2026 GMT
Not After : Jun 9 23:01:03 2026 GMT
Subject: CN=e024e8f1970f69b3fa778a41e18ce9ff339ba50a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:58:33:cc:d1:34:85:b3:26:00:a9:ad:c6:c7:
6c:c9:25:31:92:14:cb:90:a4:70:3f:89:63:10:24:
6a:8f:3e:a5:52:4a:df:0f:f7:91:57:7f:d4:fa:c8:
43:aa:5a:55:b2:30:d7:f0:46:a9:60:c5:04:e9:5f:
bc:0f:1d:f0:29:d7:af:42:8e:96:30:51:cd:c3:d0:
c5:ed:f8:5e:61:2d:28:a3:58:14:9a:77:b4:97:5f:
a1:12:08:dc:f6:18:b5:ad:2b:b2:65:16:d8:6c:fa:
9c:73:20:b2:56:3d:36:06:ae:74:a7:57:aa:f3:7a:
cf:35:8d:58:1e:f0:1b:4d:38:fc:97:04:26:ed:f9:
61:c7:ee:6c:75:98:65:c8:6a:e6:13:67:70:ff:f5:
8d:80:0c:45:69:8f:24:70:f0:29:88:22:be:bd:26:
a9:eb:78:68:bc:73:22:ca:dd:ae:c2:97:a9:b7:df:
26:f0:41:cd:fd:cf:c1:8e:e9:1c:9d:8a:0a:02:ef:
51:27:24:67:b7:b6:02:1e:d9:58:62:59:6d:69:f2:
c6:91:f5:a1:0f:7b:41:2c:4a:79:8f:26:c5:39:4f:
1e:f5:bc:20:70:e1:de:dc:2c:e9:76:49:8f:fc:ed:
94:d3:b4:fc:6e:43:b4:01:6d:a5:51:7c:50:d9:f0:
fe:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:24:E8:F1:97:0F:69:B3:FA:77:8A:41:E1:8C:E9:FF:33:9B:A5:0A
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:65:eb:7b:d5:0f:ab:fe:39:44:07:f8:e2:ff:1a:c1:1b:ed:
d6:25:f1:81:5a:e3:ae:12:70:00:c1:aa:cb:42:f8:f2:49:00:
6e:38:83:b8:d9:31:5b:dd:0c:3b:57:64:6a:bf:c4:e2:0d:56:
29:6a:83:ec:72:f2:39:72:b2:38:96:ec:dd:1d:a5:ef:89:a6:
96:bc:7f:f7:71:10:ac:ba:12:cf:15:f1:ad:ba:a5:67:29:41:
0e:a1:ad:8d:04:4b:0d:d2:c3:2f:ec:cd:96:f9:c7:c4:a9:a1:
e9:69:2c:0c:a7:dd:37:b0:3c:b7:28:26:b1:37:a2:f0:c4:ae:
f4:d8:ae:a8:21:9f:97:04:f9:e2:48:1e:09:78:9d:8f:70:cb:
28:37:ee:2b:43:ce:0f:5f:fc:1b:8f:ab:32:94:27:64:fb:89:
f9:86:ac:1f:b4:9e:bc:e3:ae:68:1d:91:eb:9f:d3:cd:16:af:
05:63:ac:2f:1c:1d:eb:ce:04:09:e5:83:41:f4:97:18:f6:13:
34:46:9d:80:26:02:7d:e0:1d:95:04:e8:62:8f:f2:25:34:6f:
f4:3d:63:6e:12:2b:8b:e0:2e:9a:b6:7f:a0:c9:ae:bd:e4:7b:
92:5e:57:63:08:41:81:2b:91:f9:6a:89:ff:36:95:f5:fe:4f:
7c:b9:40:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ6pd9V7Wjm7lguAM5XcnbRuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDcxOGQxMzVhMDliYjUyNDcwNmI0MjU5Y2FiY2M2MjZl
NTE0ZWYwHhcNMjYwNjA4MjMwMTAzWhcNMjYwNjA5MjMwMTAzWjAzMTEwLwYDVQQD
EyhlMDI0ZThmMTk3MGY2OWIzZmE3NzhhNDFlMThjZTlmZjMzOWJhNTBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFgzzNE0hbMmAKmtxsdsySUxkhTL
kKRwP4ljECRqjz6lUkrfD/eRV3/U+shDqlpVsjDX8EapYMUE6V+8Dx3wKdevQo6W
MFHNw9DF7fheYS0oo1gUmne0l1+hEgjc9hi1rSuyZRbYbPqccyCyVj02Bq50p1eq
83rPNY1YHvAbTTj8lwQm7flhx+5sdZhlyGrmE2dw//WNgAxFaY8kcPApiCK+vSap
63hovHMiyt2uwpept98m8EHN/c/BjukcnYoKAu9RJyRnt7YCHtlYYlltafLGkfWh
D3tBLEp5jybFOU8e9bwgcOHe3CzpdkmP/O2U07T8bkO0AW2lUXxQ2fD+owIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOAk6PGXD2mz+neKQeGM6f8zm6UKMB8GA1UdIwQY
MBaAFDRHGNE1oJu1JHBrQlnKvMYm5RTvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEt
NWQzM2UxOGE2OWEwLzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iZGQyYmEtYTQ4NC00YjBkLWFlOWEtNWQzM2UxOGE2OWEw
LzEvTkVjWTBUV2dtN1VrY0d0Q1djcTh4aWJsRk84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWWXre9UP
q/45RAf44v8awRvt1iXxgVrjrhJwAMGqy0L48kkAbjiDuNkxW90MO1dkar/E4g1W
KWqD7HLyOXKyOJbs3R2l74mmlrx/93EQrLoSzxXxrbqlZylBDqGtjQRLDdLDL+zN
lvnHxKmh6WksDKfdN7A8tygmsTei8MSu9NiuqCGflwT54kgeCXidj3DLKDfuK0PO
D1/8G4+rMpQnZPuJ+YasH7SevOOuaB2R65/TzRavBWOsLxwd684ECeWDQfSXGPYT
NEadgCYCfeAdlQToYo/yJTRv9D1jbhIri+AumrZ/oMmuveR7kl5XYwhBgSuR+WqJ
/zaV9f5PfLlAPQ==
-----END CERTIFICATE-----
Generated at Tue Jun 9 03:26:15 2026 by rpki-client