Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
File: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft (raw, json)
Hash identifier: MLA3ytj0o7+rrby4XNOQ/qxDS7fNe80njvGrSTC5YA0=
Subject key identifier: 96:1D:12:E4:60:0D:A0:DD:F0:A8:4A:C7:2C:8B:4E:2B:E5:3D:34:1F
Authority key identifier: 35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
Certificate issuer: /CN=35e6764594e00d9ab8017893c71092cf516b101f
Certificate serial: 019D390A1F3801F44D7FA50B44BDF8F811E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
Manifest number: 181D
Signing time: Sun 29 Mar 2026 10:00:57 +0000
Manifest this update: Sun 29 Mar 2026 10:00:57 +0000
Manifest next update: Mon 30 Mar 2026 10:00:57 +0000
Files and hashes: 1: NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl (hash: YinN6wedOxOV2bkuEAZ6Tp9JVf8KTZsxDyRpFULc0cI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:39:0a:1f:38:01:f4:4d:7f:a5:0b:44:bd:f8:f8:11:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e6764594e00d9ab8017893c71092cf516b101f
Validity
Not Before: Mar 29 10:00:57 2026 GMT
Not After : Mar 30 10:00:57 2026 GMT
Subject: CN=961d12e4600da0ddf0a84ac72c8b4e2be53d341f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:bd:e9:87:a4:a6:0d:85:da:14:63:09:1c:98:
e0:31:5e:da:59:e0:97:1c:12:06:bc:5a:a5:ec:8c:
0a:ea:41:37:5d:6d:c9:1b:e5:c8:06:c9:c3:88:32:
eb:2a:e3:8b:54:ca:7b:0e:5e:92:e5:0f:ed:0c:70:
b5:52:66:58:5f:ef:3b:3c:b3:b9:2b:72:62:31:95:
5a:1d:a5:dc:b1:28:8e:50:93:0e:81:bc:70:12:7f:
1c:94:61:6d:00:cf:63:97:98:79:24:ae:eb:d2:2d:
de:d5:b0:81:f8:01:ce:4d:c0:01:25:ba:00:3c:b3:
28:75:b6:3c:78:d4:43:1e:90:c0:03:2b:5a:73:9b:
c8:23:9c:ad:41:aa:78:ff:6f:f9:32:5f:18:ad:8c:
c0:88:75:5f:1a:de:58:7a:3d:83:63:2f:5f:6b:97:
45:32:a9:84:4b:0e:69:1d:b1:3b:75:e5:b6:ba:a0:
7d:5a:38:b0:ed:85:fd:d9:db:c8:16:97:77:b7:01:
f7:99:92:f2:5e:f7:40:1b:c1:d7:7d:52:b4:01:8f:
32:fd:9a:48:f0:71:18:0d:ee:c5:1f:10:59:3f:3f:
22:6a:2b:b8:c9:f8:9e:87:43:e9:9f:25:16:6f:1b:
87:1a:13:ef:85:3f:22:79:72:ef:62:29:bc:03:de:
34:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:1D:12:E4:60:0D:A0:DD:F0:A8:4A:C7:2C:8B:4E:2B:E5:3D:34:1F
X509v3 Authority Key Identifier:
keyid:35:E6:76:45:94:E0:0D:9A:B8:01:78:93:C7:10:92:CF:51:6B:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/4c31f2-8f30-4dbe-938d-b2f0b1bcae5c/1/NeZ2RZTgDZq4AXiTxxCSz1FrEB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:dc:d1:df:3f:1e:30:a3:77:fc:bf:76:6d:bf:f0:35:3d:49:
79:e0:40:3e:01:96:39:d3:77:22:06:ad:87:ce:ec:5e:cf:ca:
e3:d9:23:67:14:fc:1a:eb:2c:b6:c6:a9:1f:bf:36:c9:13:9e:
c6:75:86:9d:e2:be:9d:b7:7c:c4:1a:2d:89:af:0a:82:06:f0:
ee:4e:c0:6a:68:15:9f:19:97:ff:e0:67:18:b9:25:2f:13:83:
cc:02:96:05:d1:3d:9a:32:9e:9f:d3:7d:56:05:80:11:26:cc:
ac:79:74:03:d5:fd:61:ed:e1:fb:73:73:ed:86:d6:57:1f:04:
c1:06:f7:1c:29:c4:6b:9d:89:3c:d7:1d:4f:16:fe:98:a7:fd:
57:ae:09:e4:bc:b4:85:46:bf:2f:31:de:b9:11:6e:9d:84:33:
a8:05:0f:b7:c7:11:e5:44:90:fa:8d:58:9d:5b:33:80:7a:c6:
cf:1a:94:df:d4:47:94:9a:5d:08:74:55:ff:3c:1e:1b:d2:fd:
21:cc:d6:44:ac:44:13:a9:03:3a:cf:40:76:b5:33:c6:c8:3f:
f1:aa:2b:85:a2:24:fd:c2:cc:73:7f:55:dd:b2:b5:b6:b9:14:
3f:e8:39:ee:81:67:16:66:a5:5b:0c:b7:7a:37:7e:af:30:cb:
e5:b8:5c:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 14:53:54 2026 by rpki-client