Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 7UiX5q6j6QzQYUL6/Su1mGqi/NsvnvAFsx2gw8I7wL0=
Subject key identifier: F3:CD:47:C1:51:F1:F5:D9:66:97:BC:0D:72:AC:64:0F:9B:7E:82:87
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019DEC6CFA2E70ABED027584BA7F14C0E370
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 182C
Signing time: Sun 03 May 2026 06:00:58 +0000
Manifest this update: Sun 03 May 2026 06:00:58 +0000
Manifest next update: Mon 04 May 2026 06:00:58 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: J1eSO8ieTzHLPaR/IHCS7gtS2b8yYldnwJFWqXO6tmg=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ec:6c:fa:2e:70:ab:ed:02:75:84:ba:7f:14:c0:e3:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: May 3 06:00:58 2026 GMT
Not After : May 4 06:00:58 2026 GMT
Subject: CN=f3cd47c151f1f5d96697bc0d72ac640f9b7e8287
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:76:7d:96:f9:d0:b3:55:05:24:92:97:ca:10:
72:93:a3:65:1c:a4:58:50:6a:f1:7f:bf:d8:92:c7:
e1:e6:5b:c2:9c:e1:3e:37:0b:e3:26:bf:be:74:07:
fa:99:d3:a4:3c:9a:e3:fd:66:f0:c3:cb:7d:70:79:
04:13:03:16:4f:dc:2a:3f:6f:f2:46:d8:d7:2b:c8:
75:df:fd:75:3f:1e:31:8e:18:c2:d4:66:02:34:b8:
af:96:83:d1:2c:81:ad:47:9f:3a:2f:8d:ab:e1:34:
0d:53:fc:b3:29:4d:05:cd:77:36:17:05:fa:c3:cb:
e8:a0:e6:0c:2f:c5:d5:25:96:f3:99:0a:f1:1b:92:
5e:05:74:02:b0:d4:dc:88:3e:77:11:2f:8a:26:dc:
6e:16:af:a9:83:bc:87:05:2e:16:97:04:95:42:b6:
5e:d0:b6:e7:62:cc:3b:1c:a3:bf:f1:b2:a7:1b:10:
8e:12:3c:e5:99:8f:12:da:9e:cc:e5:a4:4f:6b:6f:
8e:8b:08:1c:25:60:bb:c5:08:d3:86:69:f6:1e:71:
9c:f2:94:ac:c6:5c:2a:ef:67:2c:7f:5c:b6:35:0d:
fc:85:47:04:33:22:6c:a1:4e:eb:0f:8a:9e:34:6b:
b6:d5:58:17:65:eb:04:f8:3f:e9:f2:21:74:f3:03:
f0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:CD:47:C1:51:F1:F5:D9:66:97:BC:0D:72:AC:64:0F:9B:7E:82:87
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a1:e2:ed:0c:62:89:ee:74:9d:66:02:b4:d1:f3:bc:41:8d:
0f:fd:6a:eb:ee:2d:b7:ec:b5:95:91:22:a7:1f:eb:7c:0d:2c:
8b:d1:29:37:19:08:0b:e2:76:c5:16:47:e3:0c:85:4a:45:07:
ef:15:ec:6f:18:e4:ce:6d:05:2b:76:91:82:7c:f6:e9:51:a4:
c1:89:46:0b:41:12:27:e7:b7:be:dc:2e:19:0b:c3:08:e7:5c:
fa:93:22:44:8c:e9:de:66:c2:82:4f:c7:65:25:9e:c6:91:aa:
a9:ec:79:26:bb:45:b8:8a:5e:b0:08:90:6d:71:9b:31:5e:37:
cd:08:bf:cf:6c:b2:ac:a2:d1:29:37:9a:dd:91:9a:9d:de:01:
60:f5:42:5f:68:76:15:d4:3b:59:e9:76:89:1d:0a:31:ae:0b:
2c:ab:83:90:7c:9e:f4:0a:e7:74:67:a6:51:21:87:58:a6:5b:
33:10:ca:71:ca:ec:af:ac:12:07:80:9a:a4:39:5a:ae:4a:74:
06:3b:02:43:74:8f:f5:fb:46:31:66:a0:83:64:03:32:c9:bf:
87:42:08:c1:60:3c:a6:ca:7d:61:e0:2e:f3:2b:2e:b7:45:1c:
0c:5c:33:5f:a3:47:e5:ff:c4:00:42:9d:d4:b2:9f:3e:30:c6:
93:e1:57:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ3sbPoucKvtAnWEun8UwONwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1ZTNkNGJmMWJjMGY4MTcyODIwNWU1MWRlMDk3Y2YzODNh
MGNkYzkwHhcNMjYwNTAzMDYwMDU4WhcNMjYwNTA0MDYwMDU4WjAzMTEwLwYDVQQD
EyhmM2NkNDdjMTUxZjFmNWQ5NjY5N2JjMGQ3MmFjNjQwZjliN2U4Mjg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7XZ9lvnQs1UFJJKXyhByk6NlHKRY
UGrxf7/Yksfh5lvCnOE+NwvjJr++dAf6mdOkPJrj/Wbww8t9cHkEEwMWT9wqP2/y
RtjXK8h13/11Px4xjhjC1GYCNLivloPRLIGtR586L42r4TQNU/yzKU0FzXc2FwX6
w8vooOYML8XVJZbzmQrxG5JeBXQCsNTciD53ES+KJtxuFq+pg7yHBS4WlwSVQrZe
0LbnYsw7HKO/8bKnGxCOEjzlmY8S2p7M5aRPa2+OiwgcJWC7xQjThmn2HnGc8pSs
xlwq72csf1y2NQ38hUcEMyJsoU7rD4qeNGu21VgXZesE+D/p8iF08wPw9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPPNR8FR8fXZZpe8DXKsZA+bfoKHMB8GA1UdIwQY
MBaAFDXj1L8bwPgXKCBeUd4JfPODoM3JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2Qt
YTYzNDc5MTQ0MGNhLzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9jM2NkYTUtOGE2NC00MjkwLWEyM2QtYTYzNDc5MTQ0MGNh
LzEvTmVQVXZ4dkEtQmNvSUY1UjNnbDg4NE9nemNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqHi7Qxi
ie50nWYCtNHzvEGND/1q6+4tt+y1lZEipx/rfA0si9EpNxkIC+J2xRZH4wyFSkUH
7xXsbxjkzm0FK3aRgnz26VGkwYlGC0ESJ+e3vtwuGQvDCOdc+pMiRIzp3mbCgk/H
ZSWexpGqqex5JrtFuIpesAiQbXGbMV43zQi/z2yyrKLRKTea3ZGand4BYPVCX2h2
FdQ7Wel2iR0KMa4LLKuDkHye9ArndGemUSGHWKZbMxDKccrsr6wSB4CapDlarkp0
BjsCQ3SP9ftGMWagg2QDMsm/h0IIwWA8psp9YeAu8ysut0UcDFwzX6NH5f/EAEKd
1LKfPjDGk+FXHw==
-----END CERTIFICATE-----
Generated at Sun May 3 16:14:23 2026 by rpki-client