Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
File: NePUvxvA-BcoIF5R3gl884Ogzck.mft (raw, json)
Hash identifier: OT59jMUvZUH+2rUrYs2utSetLxNnI/hg2yxzVZS7um0=
Subject key identifier: 4C:95:9E:25:33:E5:6E:32:21:9A:8B:23:D2:45:3F:54:1F:E9:62:5E
Authority key identifier: 35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
Certificate issuer: /CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Certificate serial: 019D04AF3E04D2252C4EE142F2E8A43FA5B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
Manifest number: 17B4
Signing time: Thu 19 Mar 2026 06:01:26 +0000
Manifest this update: Thu 19 Mar 2026 06:01:26 +0000
Manifest next update: Fri 20 Mar 2026 06:01:26 +0000
Files and hashes: 1: NePUvxvA-BcoIF5R3gl884Ogzck.crl (hash: eOR6WYsy2o3j5fsEy79sBCdji5wQT5k6qvy8APuKbSg=)
2: jCabWwc4lrzZfud5oOw_j95TRxI.roa (hash: IlGH+P9+bkg65b5rGsYg3482ima8u2sdZU18E1WvtY8=)
3: vqGFDj0dJpEJ_K9mMZMY2Pb0u70.roa (hash: 6ZW28XbNWPt2onL+kOFHq5ID9QTnhKevRaeNbk8iaXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Mar 2026 06:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:04:af:3e:04:d2:25:2c:4e:e1:42:f2:e8:a4:3f:a5:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e3d4bf1bc0f81728205e51de097cf383a0cdc9
Validity
Not Before: Mar 19 06:01:26 2026 GMT
Not After : Mar 20 06:01:26 2026 GMT
Subject: CN=4c959e2533e56e32219a8b23d2453f541fe9625e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:20:ac:ef:45:fa:8f:b8:b0:f8:7a:c3:59:c4:
b0:82:ca:38:87:e7:da:47:ed:7a:1c:62:3a:3e:04:
5c:38:53:39:01:41:80:d0:f7:a9:94:99:d7:b7:14:
04:5d:c5:d6:88:78:0d:38:19:63:44:32:f6:0c:7b:
6a:7f:17:84:64:44:c0:30:10:b1:3c:53:76:9c:15:
ae:a9:e2:63:f2:ff:0c:65:e8:cb:b3:2c:2e:44:67:
67:81:99:c0:61:70:f1:94:3c:f0:22:3e:2e:6f:6c:
ac:74:91:ea:fe:4f:ba:c7:61:fb:b5:ea:53:6b:2b:
51:8f:d9:3e:92:8f:05:64:59:53:a0:12:e2:72:04:
04:db:25:79:9b:9b:be:c2:4a:51:75:93:72:fa:45:
5f:60:b4:ca:e4:43:72:98:2d:a3:64:84:e5:bf:bf:
32:90:b1:9c:df:a7:d6:65:df:5c:16:cd:08:54:ac:
4c:9b:4e:8f:e6:10:7e:51:8e:71:2f:2c:a2:bb:f8:
f6:ba:b1:70:b1:a5:de:90:2c:0b:73:88:1b:82:99:
3c:86:fc:61:99:7d:bf:2d:40:f8:a1:e4:87:3d:7c:
0f:ee:44:7d:16:ac:c3:75:b4:1f:fa:f2:c2:ba:ec:
2d:a4:36:f1:f3:ed:62:06:c6:3f:59:8e:9d:a6:e9:
07:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:95:9E:25:33:E5:6E:32:21:9A:8B:23:D2:45:3F:54:1F:E9:62:5E
X509v3 Authority Key Identifier:
keyid:35:E3:D4:BF:1B:C0:F8:17:28:20:5E:51:DE:09:7C:F3:83:A0:CD:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NePUvxvA-BcoIF5R3gl884Ogzck.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/c3cda5-8a64-4290-a23d-a634791440ca/1/NePUvxvA-BcoIF5R3gl884Ogzck.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:af:94:05:ba:bf:a5:3b:cd:55:82:de:89:c2:81:3b:f2:73:
b7:0b:1a:6c:54:6c:8d:94:54:db:a9:28:3f:a1:44:3c:30:24:
d3:05:16:c7:33:08:88:0e:fb:ff:66:da:76:5c:55:8d:66:19:
bf:6c:99:36:9b:72:cc:26:f0:0d:68:87:2b:b4:10:40:08:9f:
08:fa:9f:d4:33:bf:df:0c:09:8b:5e:f0:29:ea:49:53:7b:db:
e9:7f:11:d0:38:01:b9:68:57:c0:62:d6:fe:c9:66:1a:dd:4d:
e1:0f:84:3e:08:98:33:a4:3e:bc:0d:a6:fa:59:2e:98:f9:d2:
a7:fb:87:5d:ab:b4:d1:de:af:ac:e4:c2:de:1e:2a:d2:b1:8e:
82:97:e0:cb:7b:ce:80:1f:10:1b:19:d0:24:a2:1c:b7:96:36:
cf:71:5d:45:ac:c3:43:43:4e:6c:5b:18:56:a0:51:e7:77:42:
ad:71:1a:5c:5c:13:b9:ed:d0:7f:b6:a0:cf:95:c9:b6:75:0f:
b3:10:eb:f6:31:c4:aa:bd:1b:25:2c:43:36:db:f4:2b:2c:14:
5a:99:c4:d6:90:5e:66:1c:07:c0:bd:47:8d:c5:0d:ac:a6:4e:
ef:aa:ba:74:11:cb:23:1c:bc:6a:1b:5a:cf:5b:5d:29:09:46:
93:b4:04:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 14:08:15 2026 by rpki-client