Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
File: NEejBCglTJlw_Pvf_vBrDWtJDw4.mft (raw, json)
Hash identifier: qvrY1IHeNRZSBoE9jXFq8J2ze4D0Fw9pIjDxv6s71mU=
Subject key identifier: A7:33:D9:52:4F:9F:F4:CD:B0:5B:47:BA:3C:07:72:FA:77:AB:7C:53
Authority key identifier: 34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
Certificate issuer: /CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Certificate serial: 019DA8D5139D1A078F7264971C888455A632
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
Manifest number: 18D2
Signing time: Mon 20 Apr 2026 03:00:29 +0000
Manifest this update: Mon 20 Apr 2026 03:00:29 +0000
Manifest next update: Tue 21 Apr 2026 03:00:29 +0000
Files and hashes: 1: EatRVRBBWy_Eiw-BYatitoyprMs.roa (hash: iv+Kv1NfcsjQn7ciX3R3V9wqkwDXw2M471v/p/wN2I8=)
2: NEejBCglTJlw_Pvf_vBrDWtJDw4.crl (hash: AjWi45Vrjd17yUO91/snqi3kAI9NOLwvt1wjoVmMG3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 03:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a8:d5:13:9d:1a:07:8f:72:64:97:1c:88:84:55:a6:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3447a30428254c9970fcfbdffef06b0d6b490f0e
Validity
Not Before: Apr 20 03:00:29 2026 GMT
Not After : Apr 21 03:00:29 2026 GMT
Subject: CN=a733d9524f9ff4cdb05b47ba3c0772fa77ab7c53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0d:54:85:ee:c5:95:ca:fc:ee:c9:18:96:5a:
d1:c5:0e:a1:5f:6a:b1:a7:7e:dc:28:60:ce:22:50:
f3:78:eb:8a:97:d3:6f:8f:3a:12:f1:1e:73:87:f7:
32:9c:31:24:76:69:22:f2:2c:1d:85:ac:81:04:b8:
40:68:16:fb:ff:e7:19:00:48:bb:c2:ca:d0:fe:6e:
6f:df:f2:ba:d1:e1:c0:47:14:94:7d:95:3f:ed:f8:
1a:cb:d2:25:46:a5:ec:b5:da:68:33:ab:72:cb:68:
f8:28:33:46:17:26:b8:67:58:f5:aa:ea:af:64:f1:
e5:1c:82:59:45:dd:0d:01:31:1f:71:f5:1f:71:f9:
bc:bf:49:1e:90:84:20:07:19:b4:d0:5b:17:cf:48:
1a:7b:67:2c:72:16:5a:88:f1:b2:52:f4:ff:81:b8:
8b:50:a5:c8:81:ee:92:1f:90:e0:23:58:a2:79:56:
8f:ac:1b:dd:27:86:bb:76:a5:9b:23:45:5d:cb:19:
c7:48:bc:74:e3:5f:43:30:0d:d8:da:10:11:d4:3a:
29:fa:c3:e0:6a:dc:d1:17:8d:9d:28:fa:24:1a:c7:
03:96:35:a2:13:f6:92:e5:0d:6f:bd:63:9b:d6:6b:
fe:33:24:dc:82:5a:c9:63:16:42:2e:19:2b:37:d2:
7f:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:33:D9:52:4F:9F:F4:CD:B0:5B:47:BA:3C:07:72:FA:77:AB:7C:53
X509v3 Authority Key Identifier:
keyid:34:47:A3:04:28:25:4C:99:70:FC:FB:DF:FE:F0:6B:0D:6B:49:0F:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NEejBCglTJlw_Pvf_vBrDWtJDw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/fc419a-5c21-4d2f-9b80-bde028ad5930/1/NEejBCglTJlw_Pvf_vBrDWtJDw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:49:f2:57:cf:5a:88:c1:b1:b7:92:1b:f5:65:84:03:75:fa:
63:6b:39:bd:97:f5:84:43:cb:fa:3d:cb:77:85:bf:b7:e0:9a:
75:82:d8:f1:ab:61:0d:8e:1f:9a:e7:7f:a2:81:02:07:cb:78:
35:cb:c1:ec:2b:58:b5:35:bc:41:5e:53:28:bb:06:a8:dd:50:
26:72:3b:2b:70:ea:08:76:d8:af:9a:66:02:3f:2e:48:51:f9:
4a:fc:bb:39:2c:4a:8f:34:d0:fb:87:6f:f8:70:25:19:69:bc:
38:87:cc:6b:94:ce:c7:54:a2:3e:7a:a1:81:8d:d5:82:56:df:
9a:76:64:83:b0:21:01:ff:ae:e2:21:db:a2:78:5a:d3:14:55:
95:22:ae:5c:8c:e7:c1:c4:eb:e0:98:da:f6:04:f8:da:87:cf:
7c:3f:04:93:22:e6:b9:7b:09:ff:e9:33:b7:35:49:70:11:3e:
a9:3b:f4:84:2b:cc:e7:ae:f8:c4:e4:00:8b:41:ca:b0:c6:94:
6e:f1:02:75:6c:8a:fe:34:8d:87:60:06:ea:f1:db:a2:1a:46:
9c:e6:b2:8e:a6:0a:22:78:d5:a8:9d:c7:62:eb:2b:83:f4:af:
27:91:18:95:1a:d1:f1:c2:16:1a:5a:3b:3c:ab:d1:fb:b7:37:
b0:ae:3b:53
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ2o1ROdGgePcmSXHIiEVaYyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM0NDdhMzA0MjgyNTRjOTk3MGZjZmJkZmZlZjA2YjBkNmI0
OTBmMGUwHhcNMjYwNDIwMDMwMDI5WhcNMjYwNDIxMDMwMDI5WjAzMTEwLwYDVQQD
EyhhNzMzZDk1MjRmOWZmNGNkYjA1YjQ3YmEzYzA3NzJmYTc3YWI3YzUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug1Uhe7Flcr87skYllrRxQ6hX2qx
p37cKGDOIlDzeOuKl9NvjzoS8R5zh/cynDEkdmki8iwdhayBBLhAaBb7/+cZAEi7
wsrQ/m5v3/K60eHARxSUfZU/7fgay9IlRqXstdpoM6tyy2j4KDNGFya4Z1j1quqv
ZPHlHIJZRd0NATEfcfUfcfm8v0kekIQgBxm00FsXz0gae2cschZaiPGyUvT/gbiL
UKXIge6SH5DgI1iieVaPrBvdJ4a7dqWbI0VdyxnHSLx0419DMA3Y2hAR1Dop+sPg
atzRF42dKPokGscDljWiE/aS5Q1vvWOb1mv+MyTcglrJYxZCLhkrN9J/+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKcz2VJPn/TNsFtHujwHcvp3q3xTMB8GA1UdIwQY
MBaAFDRHowQoJUyZcPz73/7waw1rSQ8OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAt
YmRlMDI4YWQ1OTMwLzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS9mYzQxOWEtNWMyMS00ZDJmLTliODAtYmRlMDI4YWQ1OTMw
LzEvTkVlakJDZ2xUSmx3X1B2Zl92QnJEV3RKRHc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH0nyV89a
iMGxt5Ib9WWEA3X6Y2s5vZf1hEPL+j3Ld4W/t+CadYLY8athDY4fmud/ooECB8t4
NcvB7CtYtTW8QV5TKLsGqN1QJnI7K3DqCHbYr5pmAj8uSFH5Svy7OSxKjzTQ+4dv
+HAlGWm8OIfMa5TOx1SiPnqhgY3VglbfmnZkg7AhAf+u4iHbonha0xRVlSKuXIzn
wcTr4Jja9gT42ofPfD8EkyLmuXsJ/+kztzVJcBE+qTv0hCvM5674xOQAi0HKsMaU
bvECdWyK/jSNh2AG6vHbohpGnOayjqYKInjVqJ3HYusrg/SvJ5EYlRrR8cIWGlo7
PKvR+7c3sK47Uw==
-----END CERTIFICATE-----
Generated at Mon Apr 20 08:41:19 2026 by rpki-client