Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
File: b-NJEELvMdzG4K2OVcvhSd0MMYI.mft (raw, json)
Hash identifier: E21sVxDBqUnmIRABambQ/+36WzDLPRpadxB0h5208KU=
Subject key identifier: 6D:F1:2A:DC:03:27:38:14:37:28:37:B8:90:9B:E9:57:CE:FD:2F:4B
Authority key identifier: 6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
Certificate issuer: /CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Certificate serial: 019DCD87052D858A9972D895A3A30937DDCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
Manifest number: 10A4
Signing time: Mon 27 Apr 2026 06:01:10 +0000
Manifest this update: Mon 27 Apr 2026 06:01:10 +0000
Manifest next update: Tue 28 Apr 2026 06:01:10 +0000
Files and hashes: 1: QEvR43rn7DHOYyABuYA1eLNqIkA.roa (hash: cUXOa6ZZg6M88CmsP7OWEFb4wJjhqPpZLujJtEhpcCc=)
2: b-NJEELvMdzG4K2OVcvhSd0MMYI.crl (hash: kkh5YT5exLLiaAIXiOYx2DqYU5LF0Z7VfhMLWuxYRRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 06:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:cd:87:05:2d:85:8a:99:72:d8:95:a3:a3:09:37:dd:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fe3491042ef31dcc6e0ad8e55cbe149dd0c3182
Validity
Not Before: Apr 27 06:01:10 2026 GMT
Not After : Apr 28 06:01:10 2026 GMT
Subject: CN=6df12adc03273814372837b8909be957cefd2f4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:08:19:ab:1d:7b:34:e8:62:ac:8f:d8:f2:e4:
2b:f1:83:ad:9f:22:b6:ad:71:41:17:10:a1:64:39:
af:21:cc:47:be:5f:ef:82:b6:c2:21:bb:11:14:f1:
15:b3:11:ad:9c:13:83:f8:51:f3:f3:b2:a1:c2:93:
c2:84:35:2e:4f:ac:4b:8b:16:d2:09:95:32:dd:94:
22:32:a1:ba:39:79:f6:9b:c1:c3:30:11:2e:f7:ea:
14:74:c4:26:2c:d0:83:47:be:6c:c9:d3:f9:6e:2f:
d6:05:d9:8c:32:82:ae:eb:e8:8c:6f:08:3b:c2:16:
6e:59:4b:9f:12:74:cc:a0:a9:d1:72:09:e5:b5:ec:
6b:ce:d6:02:ef:27:94:a4:5a:da:e9:78:0e:a5:f9:
ee:ff:12:c3:80:3a:87:eb:47:45:de:52:3b:8e:5c:
8e:c1:f8:54:84:58:07:4f:98:37:2a:1e:28:19:80:
c7:fa:7a:80:bc:41:e8:fc:61:2c:59:ac:22:d9:38:
55:ef:d0:b0:96:75:fe:2f:d0:0c:6b:17:86:b7:94:
c5:62:fb:a6:75:64:b9:e4:76:1a:44:f6:cc:c8:53:
62:be:50:55:9e:fb:3b:d4:91:8f:9c:53:f2:df:b6:
84:12:26:68:c0:96:4e:6b:b3:0a:e7:43:1e:d2:90:
8b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F1:2A:DC:03:27:38:14:37:28:37:B8:90:9B:E9:57:CE:FD:2F:4B
X509v3 Authority Key Identifier:
keyid:6F:E3:49:10:42:EF:31:DC:C6:E0:AD:8E:55:CB:E1:49:DD:0C:31:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b-NJEELvMdzG4K2OVcvhSd0MMYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/f89bf0-3d6f-4b4d-bf42-c78bd228a91d/1/b-NJEELvMdzG4K2OVcvhSd0MMYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:81:e5:42:5c:37:4d:dc:61:e3:15:16:f3:fc:3b:b6:ee:e6:
18:33:e6:89:b3:aa:b6:95:d3:b7:87:62:2f:7a:07:9e:e0:78:
4b:99:67:75:38:86:70:af:1b:0c:a8:0d:a6:fc:aa:19:13:ff:
a2:8b:38:5b:17:e2:19:6b:93:e9:54:ac:29:9d:24:32:5f:89:
a6:91:6a:d2:46:94:f2:7a:d2:cd:e9:0d:c1:4d:fb:13:7f:36:
c0:4c:f2:38:ac:94:17:66:ee:52:8d:75:aa:44:67:2e:9d:22:
dd:4b:28:55:25:a5:53:17:58:78:ab:b5:37:d0:51:fe:d6:0a:
eb:84:de:2a:c4:5f:e7:57:26:5f:bf:27:12:7c:c3:bc:0a:65:
7c:8f:e1:c4:ca:44:7d:e6:fc:bc:cc:bc:9b:f3:4c:f8:6c:01:
00:db:5f:17:87:53:cd:58:18:4b:27:7b:7b:91:95:25:dc:3b:
bd:b1:fc:28:04:12:62:de:d1:fe:e3:79:44:51:29:35:e6:66:
ed:16:9a:95:cc:3c:ff:5e:5c:47:71:4f:0a:de:b2:44:77:b9:
53:34:dc:c4:a6:2b:a3:a8:5a:1d:d8:b8:88:f2:69:7f:96:2b:
8a:2f:04:ee:61:05:ed:89:29:f4:41:b3:40:f3:ca:9c:3d:88:
6c:74:aa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 14:30:05 2026 by rpki-client