Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: rpGbYTTff9Yex74X/4B7wFRjN2RFEWmwBAcVIVlbzb4=
Subject key identifier: A0:B5:EF:74:6F:D1:03:E8:86:2F:B4:CA:05:C3:CC:67:BB:85:43:2C
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 01A192E82D650AE0D6C4CA37B58FF3C5408D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 18AB
Signing time: Sat 31 Oct 2026 17:00:51 +0000
Manifest this update: Sat 31 Oct 2026 17:00:51 +0000
Manifest next update: Sun 01 Nov 2026 17:00:51 +0000
Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: SNeuv7zbz5w+BrCN+5yHvwUZm33fwdDR5G/Dqy7n4gg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 01 Nov 2026 17:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:92:e8:2d:65:0a:e0:d6:c4:ca:37:b5:8f:f3:c5:40:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Oct 31 17:00:51 2026 GMT
Not After : Nov 1 17:00:51 2026 GMT
Subject: CN=a0b5ef746fd103e8862fb4ca05c3cc67bb85432c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:0a:23:90:bf:99:8d:30:46:5a:59:a0:a6:4b:
25:4c:e8:90:43:b7:35:61:47:4a:89:95:6a:24:65:
c1:04:5a:09:b4:d9:eb:68:a9:87:e8:6c:f9:78:d7:
ed:be:13:6b:a9:de:b3:86:85:1e:fa:f4:ce:b6:2c:
a3:33:a2:1d:87:0c:cf:83:39:a8:bd:f6:d1:1a:92:
36:2e:04:8d:91:2b:f2:dd:43:d5:b8:2e:dc:aa:f7:
c2:4b:e3:60:52:ad:c6:ba:c4:fb:2b:8b:73:31:5b:
c7:8e:2a:e2:93:68:94:52:d2:05:ad:3e:8f:03:99:
a9:81:b3:8a:35:7b:20:df:75:a8:21:f0:3e:6d:e0:
25:37:fb:79:ef:12:02:b3:d2:a0:87:69:d5:fd:75:
33:0e:dd:ff:39:8b:a5:80:ea:74:ba:10:63:df:fb:
b9:39:6d:5c:10:42:40:61:55:d9:d9:6b:f5:ff:6b:
8d:7f:bd:44:1a:2f:9d:76:4b:cf:5e:85:a1:6a:4f:
2b:ef:60:10:90:1d:3d:ee:5c:04:df:85:a3:98:98:
ae:0a:cd:7d:b0:0a:e4:51:82:8d:9d:a0:a5:73:44:
76:60:82:96:85:7d:d2:72:8a:6b:97:e6:9f:84:cc:
62:a3:12:ef:a2:b7:51:6c:e9:33:a4:40:9c:46:4a:
95:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:B5:EF:74:6F:D1:03:E8:86:2F:B4:CA:05:C3:CC:67:BB:85:43:2C
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:5b:e0:27:d6:58:4d:ff:9a:f7:93:f3:8f:9a:26:3d:b7:be:
ff:ad:4e:27:f1:4e:fd:60:fc:db:0b:2a:1d:63:ea:db:6d:72:
5d:30:f0:2e:37:9e:57:97:cc:b7:17:ae:9e:55:c3:27:2e:58:
22:8c:e3:09:3d:0c:d0:7a:ad:8d:f5:f0:ba:68:d9:5f:82:ed:
f2:34:75:6c:2a:08:a4:3e:a7:01:0b:95:f7:60:f0:b5:33:63:
91:c2:84:3a:5c:97:8e:fb:eb:e2:9c:21:ca:60:46:34:c6:38:
ce:9e:a4:01:36:b6:cb:b6:a1:82:6a:95:04:4a:e7:91:82:c6:
9f:4b:95:f8:4e:bf:5f:60:39:b1:7e:fc:64:a8:b3:2d:20:46:
9f:fc:02:f4:1a:00:42:a0:77:e4:24:6a:21:f0:db:c0:75:1d:
db:18:2d:06:d1:39:b0:c6:f0:63:2a:7f:23:5f:bd:44:a4:b1:
a6:b5:63:63:8a:09:45:e3:ce:5a:2c:ea:98:6c:c7:f6:fc:9a:
b0:c4:6b:81:c3:ce:0e:e8:86:76:c5:ce:5c:01:8d:90:1e:b7:
95:b3:2d:96:c2:59:d5:50:88:a6:6f:f4:90:35:cf:2a:eb:52:
de:cc:5b:fe:31:26:e6:1b:ef:a9:56:68:06:9b:d3:52:ae:81:
01:b4:7c:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 22:50:06 2026 by rpki-client