Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
File: NehMBjohgLI_X20xYqdbMJL1wY0.mft (raw, json)
Hash identifier: aK+Y1UGIftRUQKCaZtSCx7tUOD9Q38A4dXqKYnwQfwY=
Subject key identifier: DB:64:C1:ED:8F:8B:8A:40:85:31:56:77:9E:14:50:65:7F:D5:DD:92
Authority key identifier: 35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
Certificate issuer: /CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Certificate serial: 019D37BFFFDC51063D435B78AC12E1C40B1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
Manifest number: 188D
Signing time: Sun 29 Mar 2026 04:00:22 +0000
Manifest this update: Sun 29 Mar 2026 04:00:22 +0000
Manifest next update: Mon 30 Mar 2026 04:00:22 +0000
Files and hashes: 1: NehMBjohgLI_X20xYqdbMJL1wY0.crl (hash: BZi5GNU3XyYmQ4+bNkn5ZASh9Ub2bA/GxhjOpl6uHL0=)
2: Vi8I4MkCYQcd0rGXc9xuEZAFofI.roa (hash: P7eM54+hvOkGLmFDM1sHFQzbHZ9ga56vNG5gdNovG80=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 04:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:bf:ff:dc:51:06:3d:43:5b:78:ac:12:e1:c4:0b:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e84c063a2180b23f5f6d3162a75b3092f5c18d
Validity
Not Before: Mar 29 04:00:22 2026 GMT
Not After : Mar 30 04:00:22 2026 GMT
Subject: CN=db64c1ed8f8b8a40853156779e1450657fd5dd92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:d4:17:c1:9c:6a:fb:9e:40:d6:26:24:e8:67:
3b:95:e4:84:6f:f2:19:68:74:5e:c3:73:42:70:52:
67:45:d3:60:8f:ef:6d:18:4c:c3:3b:5b:a6:e7:9f:
24:7d:97:f1:f6:77:3f:28:07:ab:90:c2:86:8a:6c:
6d:c8:6b:8c:80:d1:e2:eb:89:bc:17:ed:c2:d1:b9:
5f:ad:bf:bd:61:0a:d1:99:19:fa:d8:6e:e5:7e:a8:
41:fe:66:f0:68:ec:a3:23:8f:43:a3:de:88:af:9b:
c4:49:cf:ff:fb:96:2c:81:76:2c:b9:bc:bf:f4:d7:
fd:0d:4b:0e:4d:13:70:4a:09:39:00:72:d6:1c:e5:
63:4d:69:57:6f:97:d9:7c:14:04:4c:56:d3:9d:a2:
9e:d2:25:6c:29:bf:9f:37:a5:92:66:48:92:f5:ac:
d0:bf:7a:46:61:37:27:ff:68:c3:d9:e9:3b:cf:b2:
bc:2a:de:77:2e:09:c3:e9:ff:7a:e9:26:62:7f:50:
d8:85:f8:de:69:7b:38:3e:45:bd:9c:38:a9:bd:b0:
72:21:17:21:8b:ea:e1:67:7f:be:3e:f0:e5:5b:1d:
d7:b5:13:27:e0:27:00:a1:e3:de:18:54:eb:63:7b:
2f:4a:0e:18:d0:21:37:df:f8:1a:78:34:70:b8:8a:
d4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:64:C1:ED:8F:8B:8A:40:85:31:56:77:9E:14:50:65:7F:D5:DD:92
X509v3 Authority Key Identifier:
keyid:35:E8:4C:06:3A:21:80:B2:3F:5F:6D:31:62:A7:5B:30:92:F5:C1:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NehMBjohgLI_X20xYqdbMJL1wY0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/6ca852-ed4b-41d1-a7b6-84a71cc32d48/1/NehMBjohgLI_X20xYqdbMJL1wY0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bf:0c:c2:bc:58:74:b6:09:3b:d7:32:d1:c7:86:48:e8:c2:c9:
12:e0:43:c6:6d:f9:fe:48:1b:63:fb:ae:6c:3f:df:8b:a4:4c:
55:82:f5:b1:fe:9b:44:30:0a:90:0f:4a:bb:06:52:66:98:87:
d4:2b:80:3e:21:96:52:a1:c2:95:8c:1f:85:3b:6e:fa:13:71:
be:ce:76:87:6a:d7:4c:34:0a:41:54:70:08:d1:4c:1c:43:75:
db:ba:1c:e3:b3:b1:e4:d5:2d:8c:08:e4:a0:82:69:ba:13:5d:
3d:fe:b1:69:6d:da:0c:59:5e:94:0d:ad:54:1b:38:98:e3:4d:
08:30:f3:02:96:fd:76:0a:cc:53:98:2d:2e:c0:50:b7:df:6a:
5f:9e:9a:37:ca:7d:76:d7:44:96:2e:ee:93:34:58:57:01:4d:
e7:6a:07:5e:89:a5:47:26:63:40:6d:c3:1c:4d:9c:2e:97:9c:
2f:8a:7b:ee:0f:65:8c:68:ae:8f:a1:64:34:37:b7:3b:6a:de:
c8:fb:a5:f8:4f:f2:ae:a9:62:ce:54:4f:31:02:89:48:b2:92:
c2:d4:96:7e:87:3d:0f:36:a1:93:e9:60:64:fc:58:29:1a:2a:
13:c9:8c:7e:2d:2c:65:2f:bf:af:74:f1:2c:2f:d8:3d:7e:d1:
e7:c2:17:15
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ03v//cUQY9Q1t4rBLhxAsbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTg0YzA2M2EyMTgwYjIzZjVmNmQzMTYyYTc1YjMwOTJm
NWMxOGQwHhcNMjYwMzI5MDQwMDIyWhcNMjYwMzMwMDQwMDIyWjAzMTEwLwYDVQQD
EyhkYjY0YzFlZDhmOGI4YTQwODUzMTU2Nzc5ZTE0NTA2NTdmZDVkZDkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv9QXwZxq+55A1iYk6Gc7leSEb/IZ
aHRew3NCcFJnRdNgj+9tGEzDO1um558kfZfx9nc/KAerkMKGimxtyGuMgNHi64m8
F+3C0blfrb+9YQrRmRn62G7lfqhB/mbwaOyjI49Do96Ir5vESc//+5YsgXYsuby/
9Nf9DUsOTRNwSgk5AHLWHOVjTWlXb5fZfBQETFbTnaKe0iVsKb+fN6WSZkiS9azQ
v3pGYTcn/2jD2ek7z7K8Kt53LgnD6f966SZif1DYhfjeaXs4PkW9nDipvbByIRch
i+rhZ3++PvDlWx3XtRMn4CcAoePeGFTrY3svSg4Y0CE33/gaeDRwuIrU8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNtkwe2Pi4pAhTFWd54UUGV/1d2SMB8GA1UdIwQY
MBaAFDXoTAY6IYCyP19tMWKnWzCS9cGNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYt
ODRhNzFjYzMyZDQ4LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC82Y2E4NTItZWQ0Yi00MWQxLWE3YjYtODRhNzFjYzMyZDQ4
LzEvTmVoTUJqb2hnTElfWDIweFlxZGJNSkwxd1kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvwzCvFh0
tgk71zLRx4ZI6MLJEuBDxm35/kgbY/uubD/fi6RMVYL1sf6bRDAKkA9KuwZSZpiH
1CuAPiGWUqHClYwfhTtu+hNxvs52h2rXTDQKQVRwCNFMHEN127oc47Ox5NUtjAjk
oIJpuhNdPf6xaW3aDFlelA2tVBs4mONNCDDzApb9dgrMU5gtLsBQt99qX56aN8p9
dtdEli7ukzRYVwFN52oHXomlRyZjQG3DHE2cLpecL4p77g9ljGiuj6FkNDe3O2re
yPul+E/yrqlizlRPMQKJSLKSwtSWfoc9Dzahk+lgZPxYKRoqE8mMfi0sZS+/r3Tx
LC/YPX7R58IXFQ==
-----END CERTIFICATE-----
Generated at Sun Mar 29 14:06:07 2026 by rpki-client