Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: 5+l2//FJe13NLZM9mj0YRaRb5G5PmTnL3RrJEL7Buko=
Subject key identifier: 2B:E2:8E:AB:0E:D8:92:C3:29:DE:75:4B:2F:AC:47:9E:9D:63:21:36
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019EFACB75C244E13C9CECF842F27287B037
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 18B8
Signing time: Wed 24 Jun 2026 18:01:38 +0000
Manifest this update: Wed 24 Jun 2026 18:01:38 +0000
Manifest next update: Thu 25 Jun 2026 18:01:38 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: RRtgVm7ZN9BNj+6sYbzbRsmq/P58FNPZFKadKHLJzDs=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 25 Jun 2026 14:31:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fa:cb:75:c2:44:e1:3c:9c:ec:f8:42:f2:72:87:b0:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Jun 24 18:01:38 2026 GMT
Not After : Jun 25 18:01:38 2026 GMT
Subject: CN=2be28eab0ed892c329de754b2fac479e9d632136
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7d:f4:36:ca:50:ba:41:02:99:58:90:88:8e:
7f:57:15:8c:3f:93:da:88:24:72:0d:54:f4:8b:16:
30:e4:e0:6e:43:d1:fe:de:69:da:b0:68:a4:b4:f7:
ab:07:9c:f5:b2:2e:dd:eb:06:a6:8c:ce:c9:b3:70:
3a:22:83:3d:0a:7f:c2:ff:7d:f3:1d:88:34:33:84:
ad:8b:e5:1f:47:71:9a:89:31:5f:09:95:fe:14:10:
a8:ef:a4:ba:c5:65:67:73:34:13:b3:20:cc:45:07:
be:fe:a6:74:ce:5f:94:a8:d4:a4:28:db:c6:b4:ca:
f0:ae:e9:c4:f0:b0:23:1c:ce:12:fc:19:62:1a:d5:
da:fc:9d:1d:07:25:31:16:34:44:36:7b:e9:29:a9:
83:6d:11:f8:4d:9a:7b:57:ac:b8:fd:94:b8:36:23:
ce:14:05:5c:dc:01:2e:e8:09:bb:7d:48:1f:6a:43:
95:4f:8d:61:d9:a1:8e:0c:4a:a8:57:92:a5:6f:59:
ca:bb:5e:5c:5e:25:6e:b0:40:30:54:36:1f:3f:ab:
ec:7f:f5:23:7b:da:4b:ad:81:2e:59:e8:ce:79:21:
84:cc:02:89:5d:2d:1b:ab:18:46:6f:44:15:98:47:
f9:2f:a5:92:37:5b:8b:12:13:97:ff:09:93:79:a6:
94:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:E2:8E:AB:0E:D8:92:C3:29:DE:75:4B:2F:AC:47:9E:9D:63:21:36
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:21:6c:11:49:4d:51:03:28:d7:98:6d:82:cc:6e:76:71:f3:
24:49:5c:f9:dd:fe:2d:36:bd:53:ff:b1:49:aa:00:07:c5:90:
e3:e4:d2:f9:37:cd:19:1b:2b:1c:79:ad:f4:c3:1b:57:ab:2b:
d6:90:0b:7c:4e:39:29:4e:a8:25:6a:46:9e:cb:54:a9:d4:55:
a8:12:3c:8e:62:e7:a5:7e:3a:91:3e:cf:be:76:a0:03:2b:aa:
02:d5:b8:e6:b5:f0:19:fb:c0:eb:1e:88:17:4e:7a:87:39:9c:
1d:65:c6:8f:8d:50:2d:19:6d:7e:35:21:4a:02:b1:62:86:3e:
7c:c9:47:56:4e:77:08:3a:35:17:16:80:b5:f4:aa:79:f9:e4:
07:f7:89:14:8e:85:de:65:6d:b6:22:46:9f:59:e0:fa:5d:95:
11:41:f7:80:bc:4c:a5:29:15:eb:ce:84:b8:43:7e:1f:15:2e:
4d:e3:24:97:39:1f:2a:a4:46:41:56:91:81:41:f7:7a:38:1a:
0f:d4:4d:4b:3f:f7:9b:29:66:1d:d6:e5:85:22:1a:5e:3c:3c:
7c:72:8f:34:54:66:b0:c5:f0:84:76:33:ca:f5:0a:e3:a1:d8:
44:bb:9e:55:a0:1a:51:92:f1:d5:1d:4c:4e:20:db:0d:60:67:
5d:69:9e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 21:17:07 2026 by rpki-client