Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
File: cNE-Khag7mY0IHqI_wqsTqvGaTw.mft (raw, json)
Hash identifier: 44ZllCQZvSdw1CvF4Ma1Ud5Ru8PJTyhSUdFUMgX18nU=
Subject key identifier: D1:D1:7E:A7:42:19:65:C0:C9:8D:BD:8D:34:9E:28:ED:70:54:26:94
Authority key identifier: 70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
Certificate issuer: /CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Certificate serial: 019D27A8CA6C3F460AFFF13AC4DB2F9E78BF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
Manifest number: 188A
Signing time: Thu 26 Mar 2026 01:01:06 +0000
Manifest this update: Thu 26 Mar 2026 01:01:06 +0000
Manifest next update: Fri 27 Mar 2026 01:01:06 +0000
Files and hashes: 1: RlL6IgEXEHtlHG87R_tgHeGJuso.roa (hash: e4pQoIrHsDZ81Hd65Er2benKsfXZs73qgjEzBGazD/4=)
2: cNE-Khag7mY0IHqI_wqsTqvGaTw.crl (hash: hnNLWeePXp7Fpd8OiDRHEVGYbts6z2s316+pPXYcg2U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:27:a8:ca:6c:3f:46:0a:ff:f1:3a:c4:db:2f:9e:78:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70d13e2a16a0ee6634207a88ff0aac4eabc6693c
Validity
Not Before: Mar 26 01:01:06 2026 GMT
Not After : Mar 27 01:01:06 2026 GMT
Subject: CN=d1d17ea7421965c0c98dbd8d349e28ed70542694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:93:b8:26:2e:ff:ac:d5:47:15:a5:9b:8f:5f:
65:c3:42:fc:a4:9a:22:5f:cc:0b:6e:7e:77:1f:50:
b4:47:e1:5f:13:4a:a8:8c:ce:bf:bf:37:66:cc:0d:
74:33:89:0a:c7:7c:f6:6e:6d:ca:73:91:13:e7:40:
5e:58:54:ef:7c:17:c4:22:be:0b:f8:78:72:7b:35:
d0:0a:0e:7d:79:0c:1e:ee:39:96:e0:b5:d0:0a:41:
31:1e:79:ff:36:34:0a:5a:62:99:28:ad:a7:2a:84:
e1:b2:4a:88:4a:1a:a6:d3:02:b6:14:62:32:60:81:
8b:09:d8:96:6e:b7:f2:f5:0f:11:b9:ff:ab:6b:0f:
fc:66:2e:58:7f:88:36:f6:bd:ec:2d:da:7a:ec:42:
7a:ff:ee:cc:73:cb:4a:a0:df:a8:96:6e:dc:71:75:
4b:1e:30:95:ae:db:05:4f:f6:db:25:3b:f5:46:c0:
c0:32:a1:0c:91:22:53:9a:9a:fd:12:15:d5:7c:1c:
76:0a:8f:2f:dc:e1:92:ce:59:28:0e:49:e1:6d:e8:
a3:34:fc:61:3d:70:1d:05:1d:fc:d3:8a:33:07:1d:
5f:ad:ac:53:5c:d7:a8:47:38:30:1d:25:41:bb:dd:
39:9f:f9:7d:06:c5:58:9c:ee:6d:df:e4:69:bd:f6:
29:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:D1:7E:A7:42:19:65:C0:C9:8D:BD:8D:34:9E:28:ED:70:54:26:94
X509v3 Authority Key Identifier:
keyid:70:D1:3E:2A:16:A0:EE:66:34:20:7A:88:FF:0A:AC:4E:AB:C6:69:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cNE-Khag7mY0IHqI_wqsTqvGaTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/c78348-ac2e-44e4-8467-2bdd20b4823b/1/cNE-Khag7mY0IHqI_wqsTqvGaTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:a5:51:5c:cb:8b:39:3d:1d:9a:7c:c0:3c:e9:4e:43:2a:47:
3a:31:46:95:9b:cc:38:ab:3e:e6:24:2f:fd:cd:65:88:2c:a2:
f5:5f:50:85:aa:55:50:0b:17:4e:1d:aa:b4:2e:13:85:c3:c8:
ef:b9:fc:bc:ae:86:5c:0d:25:c1:4a:c1:cb:8b:b7:00:9e:67:
91:0b:d4:3b:ba:5c:c8:81:85:97:48:1f:8d:15:84:cf:3e:74:
47:16:a1:e6:68:7e:e6:65:34:d6:76:4b:03:16:ae:dd:16:5a:
c6:e9:3f:12:4a:60:81:91:80:6b:3d:15:77:85:40:01:40:7d:
37:42:c8:79:28:15:9a:1c:34:58:4e:8a:be:6f:24:8f:2d:7f:
20:4f:99:04:49:da:b9:5b:ad:34:52:15:df:8a:f3:df:ec:6c:
14:4b:17:b2:fb:04:e3:28:99:af:b0:8a:06:d1:bf:b0:2c:ba:
ea:2a:39:15:94:0d:48:bb:4a:a7:2a:75:86:c8:a1:15:42:c4:
25:33:3e:be:b9:76:40:dd:5c:7f:30:6f:92:6d:ed:51:a5:b7:
97:a5:2e:dc:84:00:10:ba:fe:ad:78:64:93:64:cc:82:fc:f1:
29:e1:d6:0c:8c:6e:41:98:5b:4c:6e:20:0a:dd:b0:8a:04:43:
59:47:75:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:21:56 2026 by rpki-client