Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
File: NeXw-_PWvzoWokvseAyw_W7fMec.mft (raw, json)
Hash identifier: 3v4ZdpcplyyH8ODLxxGEVwFQo3ekQceRZN+idinBojs=
Subject key identifier: 44:3B:03:AB:C6:C1:0A:A3:35:65:98:26:D9:7F:F5:2C:7C:CA:62:4E
Authority key identifier: 35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
Certificate issuer: /CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Certificate serial: 01A1152A293ED571567EA2622DA7BDBBD9BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
Manifest number: 12D3
Signing time: Wed 07 Oct 2026 07:00:46 +0000
Manifest this update: Wed 07 Oct 2026 07:00:46 +0000
Manifest next update: Thu 08 Oct 2026 07:00:46 +0000
Files and hashes: 1: NeXw-_PWvzoWokvseAyw_W7fMec.crl (hash: xx94ebFIqt84RdviHxBBpbZhKRUA/a98Xbh+qEOG7E0=)
2: Nrh-Yc5_mByKR8_TIQlcdSyRCJs.roa (hash: +G9LwjpRWHwueIKlr62p05K5p0dJNYZacuNPYqJmmCU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 08 Oct 2026 07:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:15:2a:29:3e:d5:71:56:7e:a2:62:2d:a7:bd:bb:d9:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e5f0fbf3d6bf3a16a24bec780cb0fd6edf31e7
Validity
Not Before: Oct 7 07:00:46 2026 GMT
Not After : Oct 8 07:00:46 2026 GMT
Subject: CN=443b03abc6c10aa335659826d97ff52c7cca624e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:7a:af:bf:20:cd:cf:95:46:bd:f9:78:95:c3:
57:d3:cb:f4:5e:e7:5b:bb:f6:1b:db:52:14:4b:69:
38:cf:31:a7:4f:bf:c3:6e:ca:92:eb:6e:90:d4:88:
5b:e2:31:7a:bb:27:52:02:50:d7:f8:d4:f7:f4:29:
32:97:de:89:38:21:6e:21:0a:95:bd:6b:d0:4f:9e:
6c:3b:58:1c:b2:a9:c4:ff:44:2b:ee:13:ab:c4:23:
6d:57:41:8b:76:6c:96:79:ed:ea:53:0b:85:d8:96:
bb:b2:e5:95:cc:ed:c0:48:93:98:73:f8:f4:fd:11:
4b:98:1c:e8:f0:d0:24:3d:56:fc:db:f0:3a:90:f5:
2e:c6:1a:43:90:33:e0:88:df:ca:a7:11:a4:bd:e9:
d4:75:64:93:e6:59:00:cf:1e:2a:34:a7:cf:71:4c:
e0:a1:8c:06:12:8e:e0:b4:07:6e:a3:5b:e5:a5:1f:
25:58:b3:99:ff:eb:51:90:ad:98:90:5e:c5:c6:df:
e3:08:bc:ee:33:46:ed:84:9b:99:33:f5:05:46:fa:
33:e8:69:fb:4b:25:c9:3d:15:6b:5d:90:de:c7:49:
22:00:f2:c8:e9:d5:60:d9:4a:0f:1a:1e:28:7e:24:
07:fa:44:c5:c2:0f:5a:05:fc:9d:56:7b:2b:9a:c2:
70:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:3B:03:AB:C6:C1:0A:A3:35:65:98:26:D9:7F:F5:2C:7C:CA:62:4E
X509v3 Authority Key Identifier:
keyid:35:E5:F0:FB:F3:D6:BF:3A:16:A2:4B:EC:78:0C:B0:FD:6E:DF:31:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeXw-_PWvzoWokvseAyw_W7fMec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/b6baa4-c131-430d-806a-2e967a4cdde1/1/NeXw-_PWvzoWokvseAyw_W7fMec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:a7:e4:7b:41:35:71:36:05:6c:bc:43:a9:54:ad:6a:08:ce:
41:7d:7f:36:e1:58:05:a5:a7:40:f5:14:61:3e:39:f0:5b:4d:
c2:94:42:55:68:07:ab:d4:28:0c:45:1a:32:15:59:68:84:10:
de:d6:be:a3:7c:ae:0e:cb:8a:6e:44:76:9e:97:26:a6:a8:f4:
80:bd:5a:22:88:10:0a:a6:39:51:66:14:66:90:99:82:d5:68:
48:cd:8a:1f:a8:5a:ae:63:71:4d:e3:b0:3b:ae:dc:7f:d9:4a:
f2:d6:af:f1:11:66:ed:23:00:a2:0f:bb:74:e5:68:56:30:5c:
8c:f1:4f:61:48:ee:63:58:bf:36:74:12:c0:02:a7:da:fe:c2:
4f:bc:b5:69:79:47:00:3b:90:91:96:63:1c:c9:13:cb:54:f4:
3c:c9:8d:a6:e0:e4:e5:48:5a:fd:40:93:a9:ef:cf:b7:28:5e:
47:cc:3f:ab:fd:ed:72:01:8d:ec:81:e8:8d:6a:ae:2f:59:5f:
ab:eb:19:fe:88:3d:db:85:14:f7:db:84:83:60:87:4c:18:4a:
ad:ab:e0:cb:ab:55:e2:54:76:d3:d9:71:5c:d4:0c:38:11:67:
82:6a:8f:be:87:4d:b9:8f:41:29:a4:7d:46:45:8a:6b:02:2b:
ba:0a:f2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 17:14:54 2026 by rpki-client