Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
File: r_NeOD6c1EpySaxdQbbfrfQ1e08.mft (raw, json)
Hash identifier: eVY69gRHBoxQaVSAh5nX1ObVELJ5xDsuxU6/eGIlO68=
Subject key identifier: 04:25:E4:44:1A:4A:6D:C0:45:2B:DA:62:43:50:6F:E7:2D:DC:7D:44
Authority key identifier: AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
Certificate issuer: /CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Certificate serial: 019D371B724E3C4E7CEEB3CDAB3F3B9B9B58
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
Manifest number: 0C1B
Signing time: Sun 29 Mar 2026 01:00:38 +0000
Manifest this update: Sun 29 Mar 2026 01:00:38 +0000
Manifest next update: Mon 30 Mar 2026 01:00:38 +0000
Files and hashes: 1: 3PK45Mc8PRaXojUs0ZBQA83YcGQ.roa (hash: JXEf/2aFK3BkZHNCEWJcH/8ouUNCu/50cDZ97h1t3QI=)
2: r_NeOD6c1EpySaxdQbbfrfQ1e08.crl (hash: z0aYFMsCSK7HMAsWUH/WTeQWiu5nzExbBcRKP+sBst4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 01:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:1b:72:4e:3c:4e:7c:ee:b3:cd:ab:3f:3b:9b:9b:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff35e383e9cd44a7249ac5d41b6dfadf4357b4f
Validity
Not Before: Mar 29 01:00:38 2026 GMT
Not After : Mar 30 01:00:38 2026 GMT
Subject: CN=0425e4441a4a6dc0452bda6243506fe72ddc7d44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:70:c1:17:dc:1a:68:a9:ae:86:8a:06:d5:3a:
1a:af:2a:f7:de:6d:7e:c4:5e:6d:95:75:c0:bb:2e:
1e:48:6a:c3:a9:30:81:5b:eb:5d:6f:90:65:9f:d5:
28:b8:0b:97:b4:a3:65:3a:ee:2e:d3:d5:ea:37:58:
90:f5:f7:2c:9a:8e:53:e9:23:48:8c:94:c2:34:f0:
b1:6a:51:97:77:b7:5e:8a:b4:e8:f8:8d:5e:3f:20:
89:66:06:1f:f7:85:42:7c:fe:c8:33:58:ad:47:5f:
ad:7d:e6:9f:98:7b:73:d1:0e:01:70:ef:bd:1e:70:
91:1d:7b:d7:7e:cc:19:b8:90:f8:59:25:99:3f:7d:
bd:72:dc:ab:00:e8:39:38:04:85:64:02:48:53:93:
f3:3a:69:66:34:28:c8:97:09:72:db:ac:ec:0e:b9:
79:43:50:36:02:7c:86:69:64:71:3c:4a:a3:e6:7a:
00:3b:87:c4:8f:ff:4d:9e:ff:fc:af:9a:b4:66:b0:
83:d5:a6:9b:30:60:77:9d:9b:25:e1:19:df:c3:80:
39:9b:67:ba:f7:98:fa:0e:2d:48:a5:9b:e3:b1:ad:
b0:c3:44:a3:fb:67:0b:4a:6c:52:ed:5d:85:8a:21:
49:ca:50:42:52:11:6a:c4:77:65:6b:ae:cd:c4:95:
64:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:25:E4:44:1A:4A:6D:C0:45:2B:DA:62:43:50:6F:E7:2D:DC:7D:44
X509v3 Authority Key Identifier:
keyid:AF:F3:5E:38:3E:9C:D4:4A:72:49:AC:5D:41:B6:DF:AD:F4:35:7B:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_NeOD6c1EpySaxdQbbfrfQ1e08.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/150282-c9e0-44e3-aa12-570aed58c194/1/r_NeOD6c1EpySaxdQbbfrfQ1e08.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:fe:44:17:ec:0d:d1:20:09:a2:6a:c4:be:61:a1:aa:22:4e:
19:1f:dc:2c:71:56:e3:2c:c9:7d:77:0a:d3:8a:10:30:41:33:
31:42:1f:db:44:f6:21:75:77:fc:0a:ef:d3:9b:50:57:00:bb:
b9:14:7a:6e:b6:8b:aa:68:5e:a2:95:b5:6f:d4:51:e9:6f:48:
9d:09:0d:f3:47:d7:09:2c:ee:23:a5:cf:2a:44:23:d6:a4:af:
e9:3f:13:1d:85:cf:7b:5c:ff:66:53:17:01:e5:80:5c:0a:86:
e6:56:63:c1:3e:8e:c2:19:3c:5c:3e:83:56:98:8d:6d:26:e3:
99:a2:7c:a6:e4:d0:d0:c6:7a:d5:b2:72:4f:17:5b:22:7f:10:
39:ee:4f:b1:80:7a:54:14:58:5d:4b:42:49:df:ed:b0:24:82:
fe:9f:f1:6b:4c:38:d2:10:55:ab:d0:50:f2:6b:04:5e:69:89:
04:49:ca:f9:3d:d9:88:b3:fc:ed:3c:6e:ab:a5:cf:cc:2a:eb:
38:ea:06:93:e1:c1:45:6c:b3:97:7e:61:4b:c9:30:e7:cb:35:
6f:1d:ea:cf:ff:ee:cd:e5:a2:40:3b:ed:3a:36:2c:1f:e6:85:
6d:95:c8:74:a2:f5:7d:8c:fc:16:2d:3f:ce:f3:9c:6d:d8:8e:
86:73:c8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:31:49 2026 by rpki-client