Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: 8FvR/1+69OZIM32DwsX9hA0Qontu3qQqU7hX6wSjmU8=
Subject key identifier: 48:04:E4:3A:5B:9C:06:B2:8F:8A:66:A3:C5:AB:A2:5C:FE:1D:29:0C
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019FAE2D6B8FDDD6DB698068084CDD941DE2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 17B0
Signing time: Wed 29 Jul 2026 14:00:39 +0000
Manifest this update: Wed 29 Jul 2026 14:00:39 +0000
Manifest next update: Thu 30 Jul 2026 14:00:39 +0000
Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: Yn3igGRsowYUAFhXaTCT1QOjq+daMARMPfrHKg9ytzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:2d:6b:8f:dd:d6:db:69:80:68:08:4c:dd:94:1d:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Jul 29 14:00:39 2026 GMT
Not After : Jul 30 14:00:39 2026 GMT
Subject: CN=4804e43a5b9c06b28f8a66a3c5aba25cfe1d290c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:bb:f3:75:68:a7:9a:81:b8:d8:61:7b:57:a2:
9b:e3:1d:c0:a7:28:44:c7:fe:32:51:6c:1c:d8:ea:
e3:83:d2:85:c8:f1:6d:f9:21:33:58:80:75:d5:19:
70:b5:95:f5:62:b3:38:0f:0a:b9:52:38:0c:5d:8d:
00:5f:ae:78:1c:86:e3:7e:79:aa:fc:d1:eb:24:7e:
08:d3:3b:dd:f2:b1:67:a0:43:c8:e3:b0:f1:d8:45:
f2:ec:bf:b2:be:30:b2:36:81:87:24:aa:ed:ed:e9:
1a:10:0b:cf:e5:12:ef:90:58:90:fe:fc:f7:10:29:
a9:96:f4:83:77:c6:ca:90:d9:df:69:a3:e1:b5:97:
69:74:51:cf:d2:c5:6a:89:b8:e7:d6:03:8c:60:e7:
0a:be:0e:13:02:8b:ca:60:54:20:64:0e:89:a2:fc:
c1:50:cf:1a:d6:73:ad:87:d4:6d:c6:e3:7d:f7:64:
a9:c8:5a:6f:96:cb:fa:4b:2b:8e:31:35:7b:34:b2:
7b:c8:e7:2f:96:30:7c:ed:77:26:ae:0a:74:cd:9f:
1a:b6:ee:e8:e7:0a:14:59:a3:32:f2:9c:48:cf:26:
85:87:30:dc:60:9a:89:11:fb:df:75:e0:46:a0:f9:
8e:5b:f0:e3:ca:eb:20:fd:ee:e3:6d:49:c6:b9:7b:
23:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:04:E4:3A:5B:9C:06:B2:8F:8A:66:A3:C5:AB:A2:5C:FE:1D:29:0C
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a5:16:6e:a1:a9:d0:36:a4:55:96:2f:65:56:df:25:35:e8:
9e:2f:4f:cd:07:65:f9:1a:73:29:12:8e:a1:1a:05:a9:2f:56:
9d:05:6b:de:97:11:04:82:6e:06:94:b0:9d:a0:24:09:81:f5:
39:ca:c6:ea:58:76:cf:81:58:e5:cc:d7:b0:61:62:86:6c:e4:
6d:b6:04:0e:5d:88:b3:1e:bd:90:bd:3e:db:8d:95:e1:97:cb:
bb:0c:ef:79:c7:70:67:c2:2f:f5:6c:e8:45:cf:1b:41:78:ac:
2b:54:1a:9b:bd:9b:3d:41:7d:bd:3e:e9:18:1e:33:5d:1d:e5:
ec:45:23:3d:27:1c:30:41:1f:46:9c:e8:f9:8c:8a:3f:10:9c:
15:6e:3d:31:a6:8f:b7:eb:31:02:2c:7c:f6:29:d6:71:2c:ad:
ab:7e:2c:57:0a:97:9c:55:64:ac:48:72:e7:52:9d:d7:60:d4:
9b:49:0e:26:6f:95:a4:8b:49:53:18:1b:95:f3:a6:c4:41:fb:
03:cc:c3:3f:1a:17:56:2a:16:f7:54:2d:f5:9a:9f:e0:26:ee:
21:79:d5:a3:34:97:66:35:83:4b:f3:64:96:33:40:b7:f8:ba:
88:42:98:fe:a5:02:6d:d8:72:86:c2:f5:ca:69:a0:e5:88:48:
c2:1e:af:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 30 00:02:54 2026 by rpki-client