Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
File: NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft (raw, json)
Hash identifier: 07hXvgX3nJIe2jADTGIxQ0ShIZsd9u3uNDekM5zvgKE=
Subject key identifier: C4:25:14:D7:4E:13:A3:87:2A:B3:66:C4:47:C7:FC:72:9B:0F:B4:0E
Authority key identifier: 34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
Certificate issuer: /CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Certificate serial: 019A209B3C8706175541533447C16E551953
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
Manifest number: 13F9
Signing time: Sun 26 Oct 2025 13:00:35 +0000
Manifest this update: Sun 26 Oct 2025 13:00:35 +0000
Manifest next update: Mon 27 Oct 2025 13:00:35 +0000
Files and hashes: 1: GHI5fKOLnVPTORGJ-8HvgMn5I8g.roa (hash: tTyvweQSG7PSV/1T7+CqEyju3wttfhrfn44tpkM7ENI=)
2: NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl (hash: xZWiRGJxqVWx5u3zdxgtRPJ7p6/xNKNR3mS9HYOuwGY=)
3: xHwvN6-vM3aYD0WFb7ooENGYbZk.roa (hash: iMOiUeIxNdKNrUiqdP5pHSRFVDIEoaVwDT8Frv9xIdQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Oct 2025 12:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:20:9b:3c:87:06:17:55:41:53:34:47:c1:6e:55:19:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344fdad10ee55b3282a64246a41dc61a8922d25d
Validity
Not Before: Oct 26 13:00:35 2025 GMT
Not After : Oct 27 13:00:35 2025 GMT
Subject: CN=c42514d74e13a3872ab366c447c7fc729b0fb40e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:c0:a4:3d:6b:64:da:0d:44:01:10:a5:5a:e6:
8c:43:f9:da:8b:69:ca:f7:04:de:d8:aa:9e:96:ab:
de:e0:15:01:98:53:2d:c7:c9:14:bb:c7:fe:04:4a:
81:b1:58:11:2c:36:cf:88:8c:28:d0:be:27:23:c5:
12:08:ac:81:ea:94:dd:ad:d8:9a:6c:50:d2:91:58:
f8:56:53:bb:34:9d:86:56:65:40:c0:dc:96:29:d1:
e8:9a:ad:62:c6:9e:d1:1e:95:ed:0e:92:94:ae:43:
65:12:44:bb:d7:cb:ee:46:b5:6e:f7:45:18:d9:b4:
40:bd:c0:39:84:83:34:b7:99:af:a1:9c:92:76:d4:
fa:45:8e:da:91:08:66:f0:ad:63:35:57:84:76:53:
33:cb:ac:42:9d:99:42:39:d4:75:4a:00:e6:79:98:
6d:12:49:6f:45:e2:73:35:5b:66:ca:0d:d4:b8:e2:
4f:5d:cc:16:3c:94:0f:a4:c4:d2:09:85:80:d7:33:
38:c4:48:9d:4a:04:a9:cc:43:3d:ce:81:d2:56:9a:
25:d6:fb:05:ef:e5:7b:24:70:62:e8:bf:ac:a4:de:
21:32:6c:0c:a0:c3:45:e0:0e:4d:b5:52:a3:8e:40:
aa:dc:38:b7:83:46:f5:61:2c:23:78:5f:0c:da:25:
16:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:25:14:D7:4E:13:A3:87:2A:B3:66:C4:47:C7:FC:72:9B:0F:B4:0E
X509v3 Authority Key Identifier:
keyid:34:4F:DA:D1:0E:E5:5B:32:82:A6:42:46:A4:1D:C6:1A:89:22:D2:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NE_a0Q7lWzKCpkJGpB3GGoki0l0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/067630-306e-4c37-8bcc-4f021c73ef74/1/NE_a0Q7lWzKCpkJGpB3GGoki0l0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
71:74:b6:77:9d:b1:53:36:fa:d1:52:c9:c8:50:b6:1c:59:09:
af:9b:4b:f5:fe:ee:21:d4:6a:9b:b2:42:b9:0a:9e:cc:f5:e4:
5f:b1:5d:8c:ce:31:e7:c9:eb:bb:1f:3b:e3:82:d6:94:d1:dc:
79:6c:2a:5b:70:d7:fb:a6:3a:73:80:25:e6:09:08:88:2c:29:
c3:66:e2:db:6d:f9:34:f5:09:59:37:4f:79:e9:67:57:57:aa:
3c:b4:49:32:c6:15:86:8a:d4:fb:ea:6a:62:81:e2:82:33:84:
84:ec:87:31:c5:d8:69:84:9f:a6:74:23:f4:b1:de:a3:b1:4a:
49:ad:ef:3b:0b:a4:1f:e5:1f:d8:f9:6b:62:07:98:73:59:35:
a3:a8:3a:85:56:a9:d4:3b:07:cb:bc:b3:eb:b4:56:2c:ae:65:
c6:1f:b0:6f:21:cc:5a:81:b3:9a:ca:71:6b:a4:23:7b:9c:18:
e3:fe:59:91:21:21:4f:f4:3c:1f:79:1e:2a:08:00:b7:58:4d:
ef:70:41:08:78:38:7b:a4:1b:ec:31:29:3a:12:9c:eb:a3:0b:
ff:d2:c0:36:f6:f0:87:47:80:f7:30:84:30:ce:10:13:60:c7:
74:9d:83:a0:7d:e7:25:d7:1a:0f:49:3d:10:89:c6:a5:f9:71:
82:90:f1:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZogmzyHBhdVQVM0R8FuVRlTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NGZkYWQxMGVlNTViMzI4MmE2NDI0NmE0MWRjNjFhODky
MmQyNWQwHhcNMjUxMDI2MTMwMDM1WhcNMjUxMDI3MTMwMDM1WjAzMTEwLwYDVQQD
EyhjNDI1MTRkNzRlMTNhMzg3MmFiMzY2YzQ0N2M3ZmM3MjliMGZiNDBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMCkPWtk2g1EARClWuaMQ/nai2nK
9wTe2Kqelqve4BUBmFMtx8kUu8f+BEqBsVgRLDbPiIwo0L4nI8USCKyB6pTdrdia
bFDSkVj4VlO7NJ2GVmVAwNyWKdHomq1ixp7RHpXtDpKUrkNlEkS718vuRrVu90UY
2bRAvcA5hIM0t5mvoZySdtT6RY7akQhm8K1jNVeEdlMzy6xCnZlCOdR1SgDmeZht
EklvReJzNVtmyg3UuOJPXcwWPJQPpMTSCYWA1zM4xEidSgSpzEM9zoHSVpol1vsF
7+V7JHBi6L+spN4hMmwMoMNF4A5NtVKjjkCq3Di3g0b1YSwjeF8M2iUWcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMQlFNdOE6OHKrNmxEfH/HKbD7QOMB8GA1UdIwQY
MBaAFDRP2tEO5VsygqZCRqQdxhqJItJdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2Mt
NGYwMjFjNzNlZjc0LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNjc2MzAtMzA2ZS00YzM3LThiY2MtNGYwMjFjNzNlZjc0
LzEvTkVfYTBRN2xXektDcGtKR3BCM0dHb2tpMGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcXS2d52x
Uzb60VLJyFC2HFkJr5tL9f7uIdRqm7JCuQqezPXkX7FdjM4x58nrux8744LWlNHc
eWwqW3DX+6Y6c4Al5gkIiCwpw2bi2235NPUJWTdPeelnV1eqPLRJMsYVhorU++pq
YoHigjOEhOyHMcXYaYSfpnQj9LHeo7FKSa3vOwukH+Uf2PlrYgeYc1k1o6g6hVap
1DsHy7yz67RWLK5lxh+wbyHMWoGzmspxa6Qje5wY4/5ZkSEhT/Q8H3keKggAt1hN
73BBCHg4e6Qb7DEpOhKc66ML/9LANvbwh0eA9zCEMM4QE2DHdJ2DoH3nJdcaD0k9
EInGpflxgpDxdQ==
-----END CERTIFICATE-----
Generated at Sun Oct 26 20:05:45 2025 by rpki-client