Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
File: NEGOJrKutuqoFD_XGDD5s1Sue7w.mft (raw, json)
Hash identifier: lZRX+r6jNUtz2IdsK2lKM4wQ3tHko3Oyw4cdWZHZrWo=
Subject key identifier: 57:61:99:D0:D3:3C:CC:E6:15:C2:D1:51:D9:7D:4C:B9:DC:F1:EE:1B
Authority key identifier: 34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
Certificate issuer: /CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Certificate serial: 019D37F77C0B3BAA9E8C4B48FA9EE2AFE9C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
Manifest number: 1164
Signing time: Sun 29 Mar 2026 05:00:59 +0000
Manifest this update: Sun 29 Mar 2026 05:00:59 +0000
Manifest next update: Mon 30 Mar 2026 05:00:59 +0000
Files and hashes: 1: GBUw27gsiJFLtmfTXNRWbUZ_Y94.roa (hash: b7QdPsdPI/bxDJG7gykmn29+t0AwGH/1f0qFnRyv30s=)
2: NEGOJrKutuqoFD_XGDD5s1Sue7w.crl (hash: hVi3LW5nmiEQwKEaPfgjbsKJ2jgkdSbDMH+bRGe0Ec0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 05:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:37:f7:7c:0b:3b:aa:9e:8c:4b:48:fa:9e:e2:af:e9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34418e26b2aeb6eaa8143fd71830f9b354ae7bbc
Validity
Not Before: Mar 29 05:00:59 2026 GMT
Not After : Mar 30 05:00:59 2026 GMT
Subject: CN=576199d0d33ccce615c2d151d97d4cb9dcf1ee1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7b:32:6d:7d:f3:63:db:14:32:6a:7d:c2:c1:
e2:e4:b8:f0:a6:6f:8d:ea:7c:3e:47:a4:d9:8c:30:
c0:94:f0:dc:71:9f:61:89:2d:e2:c1:e4:f5:4e:65:
57:ff:99:56:37:bc:54:81:41:92:cc:0a:0b:45:6d:
03:3e:b9:72:44:75:72:51:27:68:cc:38:b7:62:ff:
ee:3d:4a:f2:76:a9:db:37:52:ee:e6:49:dd:b7:4c:
17:33:ba:f5:da:37:0e:8f:14:56:37:7e:93:c5:e9:
b9:08:61:1e:16:9b:a4:e1:4f:e7:c4:23:69:0c:40:
a9:f3:86:fc:98:05:1c:54:87:7d:ee:c2:06:12:60:
37:81:66:97:d4:c7:cc:f5:5a:9c:5c:8b:86:96:38:
7d:11:41:e2:dd:cf:6f:c7:3b:0b:d4:bb:f4:b8:28:
16:fc:3b:0d:27:23:7f:17:dd:16:3e:bb:96:4e:fd:
9f:4c:67:7b:24:0a:23:c3:bc:80:47:50:61:d9:bb:
fa:b1:a1:15:71:a6:25:e7:f9:3a:1c:95:b4:b0:68:
e0:7c:7d:b4:29:28:16:50:3e:07:5d:9b:86:9f:c6:
ad:f0:f3:eb:75:e6:91:6c:3d:4c:7c:17:85:07:1f:
ca:98:ad:80:57:84:cc:0e:4f:c6:af:19:d3:7c:ba:
04:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:61:99:D0:D3:3C:CC:E6:15:C2:D1:51:D9:7D:4C:B9:DC:F1:EE:1B
X509v3 Authority Key Identifier:
keyid:34:41:8E:26:B2:AE:B6:EA:A8:14:3F:D7:18:30:F9:B3:54:AE:7B:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEGOJrKutuqoFD_XGDD5s1Sue7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/1d4f36-b97d-4d98-bb2c-b8a27472a896/1/NEGOJrKutuqoFD_XGDD5s1Sue7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1e:f8:65:e2:16:80:62:42:2d:81:be:6f:e4:0b:cf:ea:99:
b2:db:ea:d6:2d:b2:30:fc:e1:ef:7b:67:85:ce:bb:d0:76:4e:
d4:74:7d:7e:3c:ef:d5:cc:51:3b:75:86:85:b3:e4:87:64:cb:
97:85:ff:21:bb:08:13:1b:1d:02:d2:8d:1f:e7:2f:0c:ae:f3:
76:c3:f6:b4:c0:fa:9a:5e:bb:d8:54:ba:7b:78:d5:5f:e4:a4:
18:85:23:fc:d5:fb:0e:14:a4:00:5a:49:29:6a:ae:e7:fc:57:
af:dc:56:87:a0:9e:e4:f7:5c:e6:a3:7d:f5:89:44:40:57:9c:
30:f0:70:01:2f:a7:e8:92:53:10:a8:ad:e6:80:77:73:76:b2:
22:58:19:9a:45:32:7f:88:47:fd:24:79:01:b3:b8:5b:08:ae:
25:9e:3f:f3:f0:70:ae:a5:98:c6:30:c9:52:7a:13:0c:cb:d0:
db:4f:1e:03:18:6f:4d:42:3c:d2:be:9e:7f:a7:83:05:ee:0a:
cc:dc:71:52:2b:fa:43:f3:07:c0:5e:80:e2:a5:7b:d5:eb:b4:
77:8b:98:c3:90:c5:5e:ea:c8:d8:21:7a:08:5c:a7:5b:90:01:
09:d9:e6:d3:16:b2:ad:45:53:2a:5a:38:39:d1:6f:a9:56:4b:
38:0c:92:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:13:36 2026 by rpki-client