Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: o1p4HStKDDgT0DgV8O/4VWkuzdvEt9/sfcy7n1/GcAQ=
Subject key identifier: AC:7B:60:6D:A9:AE:A7:05:14:B0:B6:7E:30:13:25:1C:6A:C6:83:97
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 01A08AFAAC9B6BB82FB1B19BCC76F81C93A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 174D
Signing time: Thu 10 Sep 2026 11:01:19 +0000
Manifest this update: Thu 10 Sep 2026 11:01:19 +0000
Manifest next update: Fri 11 Sep 2026 11:01:19 +0000
Files and hashes: 1: IEePDjWIaVXLuW3itE_AzBzTOC4.roa (hash: vnmA7r4TvlqCSHwR52jJ5zRprAPhiYq8N3EloxYQoI4=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: jY29uWWW0FKOYROvmxCi3IvHNel61J4WlkGypQIhj/I=)
3: O5Y2NwPNUGHcqnEAv2khEfuYfww.roa (hash: wxeDJgWK/O5UPofjmWqVX0YN/5RLHzZTTnSEdLWmG9o=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 11:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:fa:ac:9b:6b:b8:2f:b1:b1:9b:cc:76:f8:1c:93:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Sep 10 11:01:19 2026 GMT
Not After : Sep 11 11:01:19 2026 GMT
Subject: CN=ac7b606da9aea70514b0b67e3013251c6ac68397
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d1:7e:ce:08:18:0b:42:ca:89:4e:57:8b:11:
52:59:41:eb:ca:0d:d2:2f:1e:8d:1b:8e:16:ab:df:
7f:b0:00:87:58:2e:b7:6b:e3:d1:e7:61:28:35:0c:
8e:a6:c1:08:b1:65:55:b9:01:80:6e:eb:2d:dc:c5:
9e:8e:30:ab:00:f5:a9:ee:22:52:06:bc:50:d4:46:
23:3e:33:5e:e4:bb:9d:d5:8c:70:59:7e:5c:f0:9e:
6e:1e:bd:88:b7:5f:be:e4:6a:0f:9f:1e:ba:e6:b3:
a5:d7:b4:c8:0e:86:23:da:3e:6d:a3:72:ca:89:35:
a5:f3:d7:e0:9d:ac:e7:6c:13:3b:81:33:f0:52:b4:
c5:93:37:60:04:6d:d9:ee:87:2b:82:5e:c3:53:30:
02:ca:19:79:66:f6:d4:a4:45:7a:ae:12:8c:82:d1:
23:3d:94:74:c5:b1:03:dc:0a:91:13:23:76:03:e1:
c5:37:c8:37:13:dd:76:90:8a:8f:7d:35:0a:ec:a1:
4d:d6:a0:de:ca:4e:3c:ec:54:6d:89:a9:29:fa:2d:
d1:1d:29:d0:0e:3b:8e:d1:31:6a:be:a4:46:e0:97:
90:32:78:56:b7:3d:d5:2a:55:3a:7e:f0:71:81:d2:
b7:1f:ef:48:7b:84:49:c5:67:ee:6c:f5:25:89:ae:
d1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:7B:60:6D:A9:AE:A7:05:14:B0:B6:7E:30:13:25:1C:6A:C6:83:97
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:2b:a2:70:f0:e5:c2:de:14:41:78:ee:a8:ac:1c:eb:62:c0:
a0:7f:1f:d9:17:99:93:2c:a3:41:b9:0b:30:19:2b:65:99:b7:
6c:31:48:8c:33:c2:e2:58:60:a1:18:48:4c:81:2e:31:ae:15:
d6:03:3d:e8:df:8a:20:a7:42:e7:b8:12:06:93:86:2f:3b:fc:
0b:6f:cb:1c:02:fa:48:10:dd:b2:16:11:37:ee:de:46:ec:78:
21:8b:14:a5:ea:9d:b7:59:e0:f1:81:99:07:d4:3a:24:97:91:
a9:5d:75:ad:46:06:21:66:16:09:02:39:32:da:63:bf:c4:b2:
b8:70:b0:10:41:d3:98:1d:e8:45:86:ec:8c:e2:24:aa:ee:d1:
68:f1:48:23:c7:d6:2c:8e:82:77:5f:d1:44:c9:f3:61:ac:a9:
3a:f3:46:b0:e8:d8:57:f3:50:21:69:b5:24:c2:3b:1c:09:bf:
c6:63:4d:d3:e4:cf:2f:90:d0:a7:e9:e6:b5:c0:19:90:6b:0f:
d9:30:9d:6d:eb:6a:81:ff:95:68:f5:54:d1:9f:f3:35:43:c2:
1e:48:49:71:df:0b:f1:70:ce:2a:de:9e:4e:7c:ab:97:d4:d2:
b1:b2:b2:a3:1a:2c:5b:8f:f6:a4:85:df:d8:1d:da:06:a6:ae:
e5:88:ec:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:49:46 2026 by rpki-client