Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
File: neBXM--4s3ZMqT7jQJiIadlmA6o.mft (raw, json)
Hash identifier: B3U2fdOlPYG245XPqHEcRNPkALgPnermb5jZbXYW9GQ=
Subject key identifier: B8:8F:68:61:27:BB:2E:E1:29:D9:83:1F:4D:F1:23:20:D1:34:48:93
Authority key identifier: 9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
Certificate issuer: /CN=9de05733efb8b3764ca93ee340988869d96603aa
Certificate serial: 019D3865502E71959564FDDA2C95D8729DE8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
Manifest number: 08BF
Signing time: Sun 29 Mar 2026 07:00:56 +0000
Manifest this update: Sun 29 Mar 2026 07:00:56 +0000
Manifest next update: Mon 30 Mar 2026 07:00:56 +0000
Files and hashes: 1: 0dKz27FXmEvTUAS97w6oezHQSJM.roa (hash: O/nMJnxeA2xWpfnp6SVdaMqFKXk+z2ftNLJ81ExuMdU=)
2: neBXM--4s3ZMqT7jQJiIadlmA6o.crl (hash: B0A57uOroCig2qxiobVVmpsNkI8n/GzzdBMxVqd6cpg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:65:50:2e:71:95:95:64:fd:da:2c:95:d8:72:9d:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de05733efb8b3764ca93ee340988869d96603aa
Validity
Not Before: Mar 29 07:00:56 2026 GMT
Not After : Mar 30 07:00:56 2026 GMT
Subject: CN=b88f686127bb2ee129d9831f4df12320d1344893
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:71:ee:74:a8:6f:7e:ec:8f:11:40:e5:92:
3b:37:42:b3:2a:b9:98:2b:e8:d9:8a:a0:17:eb:1c:
ca:7e:c5:4d:ad:a9:93:7c:a8:21:60:c1:06:c1:1f:
81:56:b5:05:e0:d5:48:3c:75:f4:42:e5:3b:46:6e:
98:31:d6:7e:10:4c:51:ba:bc:fe:9d:8c:68:b3:52:
47:0f:95:54:e3:cb:1a:a0:3e:8f:e2:30:3c:7f:bb:
23:ae:51:e5:10:a9:48:5d:6a:ee:48:c2:8c:99:7c:
c4:ea:56:e6:12:bf:8a:98:95:c7:97:b7:47:93:4e:
6c:03:aa:36:da:41:dc:4a:af:bd:f7:8a:cd:04:b0:
48:db:25:ce:54:d6:04:a9:cb:db:79:ef:bf:a1:b1:
8a:5e:65:c0:b0:c4:40:d2:0b:10:06:65:b7:0d:19:
b4:b5:2f:07:3f:db:61:3d:9e:ee:a5:35:4c:64:7e:
aa:87:4d:2c:05:66:b7:be:5c:95:e4:bb:df:f1:42:
e5:08:7b:a9:b1:da:52:ae:d7:8e:de:16:a4:f7:c0:
e5:36:d9:93:7f:a3:eb:03:86:a4:d6:04:9a:68:4c:
61:6c:38:31:1e:e0:31:0f:ad:02:db:e1:64:60:30:
81:29:34:5e:ba:99:9d:fc:79:80:72:2c:10:75:81:
55:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:8F:68:61:27:BB:2E:E1:29:D9:83:1F:4D:F1:23:20:D1:34:48:93
X509v3 Authority Key Identifier:
keyid:9D:E0:57:33:EF:B8:B3:76:4C:A9:3E:E3:40:98:88:69:D9:66:03:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/neBXM--4s3ZMqT7jQJiIadlmA6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/99ef87-f86c-4fac-84b6-316b03d502cc/1/neBXM--4s3ZMqT7jQJiIadlmA6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:cf:2d:21:48:47:b1:d6:5a:00:d8:6b:6e:19:b3:19:d0:a7:
d1:0b:ae:80:ae:78:e4:81:59:ff:c3:81:8c:5b:c2:e6:7b:ee:
ed:0a:a6:f2:86:e1:dc:95:64:5d:69:8f:7f:99:c5:82:3d:53:
39:67:de:0e:3b:02:2c:d5:b8:82:57:94:11:9e:a3:a8:47:34:
e8:3d:d7:17:8e:86:19:99:98:af:42:60:10:ea:ac:d9:a0:aa:
96:d2:98:8e:00:aa:84:4b:fa:dd:0e:47:0b:4b:b7:83:44:cd:
26:1b:59:85:a2:d0:b0:c5:eb:34:4b:8e:56:52:24:a5:64:60:
42:a1:c1:77:7b:55:23:66:76:c9:aa:82:f3:b2:86:1f:1d:48:
5a:9a:ac:2d:31:59:6e:2c:8f:dd:56:f3:d1:21:bb:fb:95:0e:
d5:89:26:22:61:db:a2:f2:7c:b8:73:6f:a9:0a:c8:e7:93:46:
e5:19:49:06:6c:26:77:30:f5:18:7e:c6:4e:a6:8b:10:39:56:
03:42:f7:bb:5e:23:b1:90:f5:54:66:ca:91:78:b3:68:81:0e:
59:f1:8c:a9:38:a1:fd:16:12:97:58:e1:47:9f:71:44:0e:b2:
fb:a0:8c:4e:0c:7b:b7:49:18:c9:b0:78:78:9c:45:d8:97:48:
e5:98:bc:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 15:48:13 2026 by rpki-client