Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
File: nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft (raw, json)
Hash identifier: rdcxB8Jk819YjopTkKJ7ETlmKT3lBvX42+EPO/g45p8=
Subject key identifier: 94:00:08:AB:C6:08:98:33:A7:53:08:E7:9D:E6:F5:7B:5D:0D:A2:83
Authority key identifier: 9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
Certificate issuer: /CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Certificate serial: 019CE77FFE359B93C3BCD0288C9D36A519C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
Manifest number: 1640
Signing time: Fri 13 Mar 2026 14:00:50 +0000
Manifest this update: Fri 13 Mar 2026 14:00:50 +0000
Manifest next update: Sat 14 Mar 2026 14:00:50 +0000
Files and hashes: 1: H2f81tAnClNQA7oxSnrk0RN1378.roa (hash: ztDbogPZdL+kyDbQ7D06edmucI3GWmYZufxKMT/XxH4=)
2: nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl (hash: jcW6gxmpo5ocMJGDOQ5OHX9AVbS6MbvjSz9dwVeup78=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e7:7f:fe:35:9b:93:c3:bc:d0:28:8c:9d:36:a5:19:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c40e307d12ce0568c299e17cd65a66b26cdb04d
Validity
Not Before: Mar 13 14:00:50 2026 GMT
Not After : Mar 14 14:00:50 2026 GMT
Subject: CN=940008abc6089833a75308e79de6f57b5d0da283
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:31:26:27:6e:a2:d8:23:c7:ec:e6:21:83:62:
48:86:32:a0:f0:e4:eb:3f:37:08:aa:6d:4b:ec:c5:
37:1c:d0:19:b6:a6:b1:1f:7e:73:57:d3:0e:b8:a9:
e4:82:46:03:cd:b6:d3:5d:ff:3c:b4:ed:d0:4f:47:
fb:fe:bc:1f:b8:d9:a2:88:2a:d9:b2:5b:9a:9e:84:
d1:c0:e7:d2:3e:63:54:f6:8c:cd:75:99:e1:2b:b0:
03:e2:83:a7:36:c6:fa:a7:8b:d9:4d:09:6e:c8:82:
b3:0f:6e:77:6a:36:06:9e:76:2f:86:dc:d6:79:09:
f8:bc:7a:e9:64:04:cc:f1:aa:71:81:d4:34:11:42:
aa:6a:ca:b0:cd:e0:9d:27:94:23:7a:08:6c:14:b8:
b9:4e:9f:cb:de:58:f3:5c:c4:93:96:19:b7:bd:0f:
10:b0:47:32:9c:aa:aa:0b:56:30:2e:34:0e:71:a0:
b4:f0:28:58:60:61:5c:e3:0a:38:a9:57:40:d4:a2:
6d:e9:d1:6f:fe:9f:d4:8f:35:1d:0c:ce:57:38:eb:
a8:fb:78:05:68:45:df:0a:0d:d2:74:be:a1:6f:36:
ca:1b:3e:a5:2a:f5:31:8f:7f:2b:2c:56:88:25:51:
c9:03:29:af:c2:7c:92:e4:73:ef:ca:a9:81:b7:65:
a0:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:00:08:AB:C6:08:98:33:A7:53:08:E7:9D:E6:F5:7B:5D:0D:A2:83
X509v3 Authority Key Identifier:
keyid:9C:40:E3:07:D1:2C:E0:56:8C:29:9E:17:CD:65:A6:6B:26:CD:B0:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nEDjB9Es4FaMKZ4XzWWmaybNsE0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/faf2ae-6a83-445b-974b-8fb3779b8704/1/nEDjB9Es4FaMKZ4XzWWmaybNsE0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:60:50:70:19:0d:3b:7a:b1:a1:af:b1:c5:4c:25:9f:21:4e:
0e:24:cd:ae:42:42:bc:cb:57:eb:8a:4a:f0:29:47:46:f8:ab:
0c:53:41:79:e6:a9:77:fb:49:e0:01:8f:bb:31:15:f3:dd:88:
f0:dd:bc:81:18:56:66:cb:45:67:40:f8:77:97:d7:37:de:09:
a0:ac:50:75:5f:25:05:39:8f:8d:6d:6e:b7:10:55:4f:a3:6c:
69:08:3a:69:23:c8:e8:90:bf:20:e3:23:08:2b:5c:28:95:53:
bf:35:fb:13:48:0b:e6:d0:63:d4:13:2c:21:86:41:f9:af:4b:
2b:2c:7f:a0:ee:5e:3c:52:c6:25:27:ef:7a:25:9d:07:c1:8e:
55:42:5b:90:97:32:03:70:13:12:20:f0:8a:bb:60:db:21:33:
53:8d:f8:b9:e0:f2:35:a7:df:ef:c6:a4:b7:b6:e4:c0:14:9a:
77:0e:12:c1:ea:6a:d4:67:1d:5c:8d:00:36:5f:ee:b5:9a:c5:
e7:4a:14:e0:16:f6:4d:9d:25:5e:48:a7:31:6a:3c:b5:b9:a0:
fa:f2:1d:a9:74:90:79:39:50:e0:2a:91:2b:fb:2f:a3:7b:6c:
39:f8:46:d2:2f:70:69:7a:11:71:3c:21:38:89:06:0d:1d:ce:
45:4b:0a:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZznf/41m5PDvNAojJ02pRnDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDljNDBlMzA3ZDEyY2UwNTY4YzI5OWUxN2NkNjVhNjZiMjZj
ZGIwNGQwHhcNMjYwMzEzMTQwMDUwWhcNMjYwMzE0MTQwMDUwWjAzMTEwLwYDVQQD
Eyg5NDAwMDhhYmM2MDg5ODMzYTc1MzA4ZTc5ZGU2ZjU3YjVkMGRhMjgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0zEmJ26i2CPH7OYhg2JIhjKg8OTr
PzcIqm1L7MU3HNAZtqaxH35zV9MOuKnkgkYDzbbTXf88tO3QT0f7/rwfuNmiiCrZ
sluanoTRwOfSPmNU9ozNdZnhK7AD4oOnNsb6p4vZTQluyIKzD253ajYGnnYvhtzW
eQn4vHrpZATM8apxgdQ0EUKqasqwzeCdJ5QjeghsFLi5Tp/L3ljzXMSTlhm3vQ8Q
sEcynKqqC1YwLjQOcaC08ChYYGFc4wo4qVdA1KJt6dFv/p/UjzUdDM5XOOuo+3gF
aEXfCg3SdL6hbzbKGz6lKvUxj38rLFaIJVHJAymvwnyS5HPvyqmBt2WgowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJQACKvGCJgzp1MI553m9XtdDaKDMB8GA1UdIwQY
MBaAFJxA4wfRLOBWjCmeF81lpmsmzbBNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGIt
OGZiMzc3OWI4NzA0LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi9mYWYyYWUtNmE4My00NDViLTk3NGItOGZiMzc3OWI4NzA0
LzEvbkVEakI5RXM0RmFNS1o0WHpXV21heWJOc0UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfGBQcBkN
O3qxoa+xxUwlnyFODiTNrkJCvMtX64pK8ClHRvirDFNBeeapd/tJ4AGPuzEV892I
8N28gRhWZstFZ0D4d5fXN94JoKxQdV8lBTmPjW1utxBVT6NsaQg6aSPI6JC/IOMj
CCtcKJVTvzX7E0gL5tBj1BMsIYZB+a9LKyx/oO5ePFLGJSfveiWdB8GOVUJbkJcy
A3ATEiDwirtg2yEzU434ueDyNaff78akt7bkwBSadw4Swepq1GcdXI0ANl/utZrF
50oU4Bb2TZ0lXkinMWo8tbmg+vIdqXSQeTlQ4CqRK/svo3tsOfhG0i9waXoRcTwh
OIkGDR3ORUsK3Q==
-----END CERTIFICATE-----
Generated at Fri Mar 13 16:48:02 2026 by rpki-client