Manifest
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: A3BqbZa97YSngNnbpbrT04NS09rOm0H5MH5KugvyAck=
Subject key identifier: A5:FD:1B:83:3D:21:8E:85:8B:B0:62:E0:56:91:D3:BF:C9:04:C6:9A
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 01A06F8419D08262A65D7DD98D15B3D4C8D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 1A42
Signing time: Sat 05 Sep 2026 03:02:03 +0000
Manifest this update: Sat 05 Sep 2026 03:02:03 +0000
Manifest next update: Sun 06 Sep 2026 03:02:03 +0000
Files and hashes: 1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: pY7egKoBuj8EL6MeLbOdmL+ZFtFNCJoBVorHi2qT/KU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 03:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6f:84:19:d0:82:62:a6:5d:7d:d9:8d:15:b3:d4:c8:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Sep 5 03:02:03 2026 GMT
Not After : Sep 6 03:02:03 2026 GMT
Subject: CN=a5fd1b833d218e858bb062e05691d3bfc904c69a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:71:2d:cb:56:52:1c:07:b9:95:fb:d9:45:6b:
52:c9:da:dd:ef:26:df:de:c0:7f:37:a0:ee:ee:61:
2c:a2:a2:40:9a:36:b8:b5:bc:97:fb:7a:84:d0:27:
08:e0:74:d1:48:7b:2d:38:84:0b:3c:fe:87:36:5a:
69:a2:97:81:04:2c:8c:b0:8d:2f:2c:d3:39:27:84:
f7:fb:d3:e2:f9:71:09:fb:b0:4c:ea:87:54:e9:66:
9e:4b:51:56:9a:44:2d:a3:26:83:fa:14:0f:3f:e9:
24:17:02:1c:35:01:f9:98:5f:5d:32:ba:e8:d2:80:
c9:3e:2c:77:9f:14:31:8a:6e:02:db:d1:4f:ef:02:
3a:1d:b2:ac:4a:75:0d:46:21:58:db:71:5d:de:36:
ca:ac:0d:4f:19:f4:e3:09:df:72:62:81:46:19:e4:
de:5c:8a:32:9c:c3:34:cf:24:da:1f:c7:2b:f5:6d:
22:e0:9e:4d:5b:23:b1:f3:13:fa:03:4b:5f:c9:1e:
31:bc:fc:e9:2d:69:aa:5d:9d:63:dd:56:85:39:57:
93:06:28:a5:ff:d9:b4:91:15:32:67:2d:2b:cc:75:
3c:6d:52:50:86:08:05:21:65:c2:d8:b9:23:6e:c3:
2c:9d:7e:22:f0:b7:d6:97:e2:d0:3a:01:fa:9b:02:
88:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:FD:1B:83:3D:21:8E:85:8B:B0:62:E0:56:91:D3:BF:C9:04:C6:9A
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:28:6c:51:e8:e8:36:b6:f4:cf:4d:db:2c:04:e4:fc:18:ae:
c6:68:8d:35:c0:1e:61:e2:09:b3:74:f8:c5:9e:3e:53:43:e9:
20:c2:36:5e:a3:9b:b4:26:96:b8:03:ff:d5:65:e1:5e:20:c6:
af:a3:90:1f:05:38:4c:b9:ee:89:74:07:54:0a:60:eb:e9:bb:
0e:d6:cd:07:cb:d1:c6:48:78:0d:ae:ee:38:50:35:7f:95:1b:
f2:07:93:25:a4:b9:7b:67:29:a3:f5:8d:83:d0:7f:07:7d:ed:
77:da:d7:dd:5e:db:78:83:1c:08:ff:d8:d4:4a:4f:9f:ed:0a:
de:da:25:9e:96:82:a0:8c:98:89:49:6e:4b:c7:7e:67:c6:06:
90:d7:d9:70:09:47:9f:c2:5c:ec:34:c1:cc:72:1e:16:b5:07:
ef:78:15:f0:ed:88:3a:64:8a:ec:0f:00:8c:b1:21:23:75:8c:
88:c1:05:41:67:be:6c:6e:0c:04:9d:5c:df:3e:b2:10:0a:ee:
79:e0:d5:6d:17:c0:6f:22:ed:3a:a4:9b:e7:5a:ff:ba:20:9d:
37:5b:14:26:7c:8b:31:da:a4:60:0f:bb:aa:c2:a9:a7:4c:b1:
3a:b9:fd:b3:30:2d:bb:c9:3e:23:5b:0a:29:1a:2b:f3:20:30:
87:d8:1b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:35:52 2026 by rpki-client