Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
File: NEcY0TWgm7UkcGtCWcq8xiblFO8.mft (raw, json)
Hash identifier: gMjkq3bJZ3Zn9BgKn67Q9fS5TFRlrcYtR+8jxcFf5Is=
Subject key identifier: 91:DB:AF:71:37:A0:59:85:B5:6E:F5:2C:9B:85:C4:9E:57:11:51:AB
Authority key identifier: 34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
Certificate issuer: /CN=344718d135a09bb524706b4259cabcc626e514ef
Certificate serial: 019D389BCCD8384BC1E296F63DE482AC80F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
Manifest number: 1822
Signing time: Sun 29 Mar 2026 08:00:27 +0000
Manifest this update: Sun 29 Mar 2026 08:00:27 +0000
Manifest next update: Mon 30 Mar 2026 08:00:27 +0000
Files and hashes: 1: NEcY0TWgm7UkcGtCWcq8xiblFO8.crl (hash: VRJJK+jwmR1D6PNn1MgsTb/IDofikCfgYgQXxZ5a+Uw=)
2: nVkaAqSfL68oakAlVtLj1dtBZ5U.roa (hash: 7UgxJx/cj3QDCAU9ObG2tF/QVp8YtTmI4r8lV80aZ1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:9b:cc:d8:38:4b:c1:e2:96:f6:3d:e4:82:ac:80:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=344718d135a09bb524706b4259cabcc626e514ef
Validity
Not Before: Mar 29 08:00:27 2026 GMT
Not After : Mar 30 08:00:27 2026 GMT
Subject: CN=91dbaf7137a05985b56ef52c9b85c49e571151ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:71:57:23:22:6c:db:4d:89:c1:68:33:78:b4:
24:ce:98:e7:69:bb:18:aa:db:7a:df:02:78:83:b6:
d9:88:33:a1:66:f1:3f:ca:d3:78:af:b4:83:bb:e6:
7f:e8:0e:1e:96:a6:0c:6e:5a:ab:41:64:a5:f6:12:
d7:92:96:5d:c3:3c:44:08:ce:23:19:72:a1:53:fa:
6e:af:4e:59:1a:72:80:35:25:c4:96:de:5f:62:8d:
c6:fc:89:46:c1:e9:a8:07:d2:86:25:79:e2:3e:3b:
12:3a:94:3c:e4:65:b5:91:88:e5:1f:10:f2:e5:91:
39:36:01:35:85:03:78:d6:9e:a0:81:76:84:3e:3d:
32:1d:ff:df:77:fd:ef:20:dd:7a:2f:53:f7:41:b0:
9d:06:84:34:5d:e7:88:c0:ed:d1:f7:24:85:bd:0f:
25:21:87:f1:a8:1c:1e:4a:36:5c:cc:ce:e5:5f:d8:
a7:8b:de:e0:ff:e8:f9:29:a0:a4:03:2c:40:f6:a1:
44:0c:b9:06:c7:5b:5c:fc:dc:2a:d6:76:f4:cc:dc:
35:58:8a:ea:00:04:6c:a5:76:c4:1e:ac:de:63:50:
ee:32:01:6c:f8:eb:3a:c3:65:3a:0d:75:a0:c9:0a:
20:a4:1b:81:41:58:d4:a3:f6:e1:3c:e8:14:52:02:
4a:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:DB:AF:71:37:A0:59:85:B5:6E:F5:2C:9B:85:C4:9E:57:11:51:AB
X509v3 Authority Key Identifier:
keyid:34:47:18:D1:35:A0:9B:B5:24:70:6B:42:59:CA:BC:C6:26:E5:14:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEcY0TWgm7UkcGtCWcq8xiblFO8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/bdd2ba-a484-4b0d-ae9a-5d33e18a69a0/1/NEcY0TWgm7UkcGtCWcq8xiblFO8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:f0:cb:d4:ca:0d:ea:da:13:78:ce:02:72:4d:2b:57:19:e3:
ff:8b:c9:b1:02:b2:02:ed:15:f1:15:3e:66:6e:f0:e0:89:91:
81:98:dd:ce:31:c9:53:63:4f:07:bf:95:9d:af:4b:59:e7:cf:
8d:48:5b:a6:9c:5f:01:2f:7d:29:fd:0c:aa:69:db:a3:b3:91:
bf:30:ae:1f:67:b9:38:ac:a3:71:46:3d:48:75:52:d2:14:26:
92:57:a2:2f:70:6f:f5:26:b4:83:56:8b:ac:c7:98:01:fd:97:
e9:28:27:d0:6c:fa:8d:a8:f1:54:80:52:62:b3:b0:05:34:30:
1c:c1:ee:14:f4:fe:fe:d0:b9:f8:b5:63:2d:1d:dc:ba:ec:e9:
71:99:74:2a:3d:ba:25:bd:17:c2:7c:84:67:ec:c9:fd:fd:0c:
e3:44:17:09:c4:f3:74:3d:30:db:9b:55:54:37:bd:1d:c4:e6:
95:02:88:67:83:79:bf:29:b4:8d:e0:c9:32:e7:1f:71:e7:33:
a9:5d:02:25:31:4e:bc:5b:75:ac:25:4c:bb:4d:d8:8f:d7:8b:
e5:ca:26:00:81:c5:bc:18:fa:d3:c8:91:1e:6a:0c:48:27:cf:
6a:19:06:07:b6:62:08:fd:d9:25:c2:a9:27:48:0d:d4:63:48:
cd:0d:8c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 11:29:55 2026 by rpki-client